Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/1901fb7988d53acc220233f0abb3c8c55541cb8c.roa
File: 1901fb7988d53acc220233f0abb3c8c55541cb8c.roa (raw, json)
Hash identifier: geOmucDdMZwzrjuaYZCl06VAaOlF9RUPVGjbMAD4bBw=
Subject key identifier: 24:8B:33:82:42:D0:DF:96:A2:01:58:0A:4F:55:47:17:C4:15:A5:06
Certificate issuer: /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial: 229844
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/1901fb7988d53acc220233f0abb3c8c55541cb8c.roa
Signing time: Tue 02 May 2023 19:47:02 +0000
ROA not before: Mon 01 May 2023 19:47:02 +0000
ROA not after: Fri 02 May 2025 19:47:02 +0000
asID: 28000
IP address blocks: 45.6.248.0/22 maxlen: 24
45.6.252.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2267204 (0x229844)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Validity
Not Before: May 1 19:47:02 2023 GMT
Not After : May 2 19:47:02 2025 GMT
Subject: CN=1901fb7988d53acc220233f0abb3c8c55541cb8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5f:ef:49:2a:b3:b5:af:b5:03:79:74:74:f0:
3b:e7:8e:e7:9b:2c:c9:26:9f:45:32:54:c2:bb:47:
15:ce:59:fb:3b:9b:c0:40:92:32:35:c6:36:28:cd:
3c:a3:7c:29:c8:83:55:4b:7e:5c:86:c5:2e:7b:88:
8a:6f:db:96:b3:b6:86:4f:92:60:0a:e3:16:28:3f:
f7:e2:05:bf:80:4b:5c:1c:10:f4:94:d4:a2:68:a1:
92:e1:9e:4b:f2:7f:31:51:7f:c0:a8:0b:1b:d9:19:
03:12:16:52:90:f6:70:dc:bb:3a:74:b2:79:7d:4d:
68:76:dd:71:eb:02:58:ea:5a:a0:f3:68:fb:bf:71:
d2:00:aa:22:73:fb:15:f4:f5:2f:fe:56:e9:39:5a:
95:c3:f6:a5:f0:f1:2b:76:53:e3:6c:18:45:27:cf:
ca:47:40:3e:fc:e7:f5:b0:15:71:91:7f:6e:d1:cb:
e6:cf:81:90:ec:54:c9:02:e5:39:4a:e3:71:97:39:
65:73:21:e6:54:5d:ff:ba:ca:fc:34:f6:be:83:80:
c5:27:ae:7e:b1:72:17:2f:83:e0:a1:4c:39:c2:c2:
6f:f1:d0:c0:6e:8f:00:d7:11:1f:93:4b:2b:99:2c:
b1:62:e2:bb:6f:9e:ad:0c:9f:33:ef:b5:58:04:34:
0e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:8B:33:82:42:D0:DF:96:A2:01:58:0A:4F:55:47:17:C4:15:A5:06
X509v3 Authority Key Identifier:
keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/1901fb7988d53acc220233f0abb3c8c55541cb8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.248.0/21
Signature Algorithm: sha256WithRSAEncryption
3b:54:ae:28:15:d1:3f:7d:19:70:a6:48:79:86:5b:e5:60:d0:
52:8c:92:1f:95:a4:fe:6b:ca:0a:45:ff:d8:9a:56:d6:bd:4e:
a2:a2:cd:9b:85:a0:77:db:c7:0c:97:35:7b:6e:e0:a1:8b:76:
24:7a:04:35:af:b7:aa:5e:e1:e1:d0:d2:7c:6a:79:87:11:9b:
19:76:bf:cd:7d:1a:26:b6:4a:38:78:ae:50:e2:7a:9d:27:87:
34:dd:07:1e:79:eb:5a:96:35:9f:b7:ef:11:37:15:90:b9:e9:
a6:21:ce:d1:70:0c:bd:93:39:5f:c5:72:51:0b:6e:15:a4:e9:
77:37:7d:bc:5f:71:bf:53:e9:97:5c:89:16:51:f4:89:2c:32:
68:a6:b9:3a:7e:37:ce:43:62:87:81:b8:d9:70:39:95:5b:2b:
b2:50:ce:58:f4:a8:73:0d:bb:db:5b:cb:c5:fe:74:aa:c8:00:
3c:71:c3:4d:51:37:08:3d:01:e1:2d:ae:09:89:60:ce:a4:06:
be:06:6d:94:8c:70:22:15:4f:00:98:b3:fe:13:2f:cb:97:2f:
59:15:9b:af:eb:c2:85:ae:b8:fa:80:09:4f:c4:a8:ae:1b:a7:
d9:87:ac:73:27:a3:da:86:49:36:20:87:e4:2a:3b:aa:2e:0c:
5f:6b:1f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:36 2023 by rpki-client on console-ams.rpki-client.org