Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/5a4383d90bfa30b9e4955d8bf2604de2afbec669.roa
File: 5a4383d90bfa30b9e4955d8bf2604de2afbec669.roa (raw, json)
Hash identifier: bV9bk8iRYzkKnjpdb2FD51VArzMWcVnL2NSKkrlf/fY=
Subject key identifier: 04:B4:BC:25:74:0A:99:27:82:27:79:30:47:29:C4:A2:C6:6D:98:F3
Certificate issuer: /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial: 229B6C
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/5a4383d90bfa30b9e4955d8bf2604de2afbec669.roa
Signing time: Tue 02 May 2023 19:47:42 +0000
ROA not before: Mon 01 May 2023 19:47:42 +0000
ROA not after: Fri 02 May 2025 19:47:42 +0000
asID: 28000
IP address blocks: 45.6.248.0/22 maxlen: 28
45.6.252.0/22 maxlen: 30
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2268012 (0x229b6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Validity
Not Before: May 1 19:47:42 2023 GMT
Not After : May 2 19:47:42 2025 GMT
Subject: CN=5a4383d90bfa30b9e4955d8bf2604de2afbec669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d2:6e:29:6f:0c:64:69:72:5e:34:6f:2f:c0:
3b:43:cc:ad:63:fc:47:27:76:9f:82:ef:c7:c4:05:
fa:7a:62:56:d1:25:ca:a9:59:cb:60:0d:b2:dd:cd:
0a:c5:36:fd:74:81:e1:e0:9e:2c:36:3e:84:f0:fb:
71:e6:e6:16:3b:85:c4:8e:a9:20:5b:8c:d3:65:12:
63:be:ca:04:c7:be:18:6d:15:05:60:32:4f:0b:86:
99:aa:87:4f:4d:fe:03:ce:81:f8:bf:a6:c0:f6:54:
ab:e8:c7:a2:b1:c0:27:c7:94:67:85:49:41:30:54:
74:b3:17:de:11:86:9c:c6:f1:4e:e1:2e:4b:3b:02:
75:37:bb:4d:c6:a9:23:5f:f0:b8:ce:b9:f7:63:4b:
28:d2:7f:a9:14:10:b2:6f:66:76:09:84:9e:7c:6b:
c2:34:4f:15:99:13:70:12:b2:3f:0a:5e:ed:e5:52:
9f:4d:f7:44:3a:a2:18:77:ff:60:f5:04:7e:7d:5d:
3a:59:b5:85:61:16:90:f6:6c:bf:97:e6:f8:eb:e6:
cf:a8:09:54:1a:44:90:6e:68:7f:b5:10:c9:a9:b0:
58:24:35:73:9c:5b:a2:5d:c3:37:87:75:2a:78:8f:
72:e4:59:2d:88:b4:ef:7d:cc:34:d7:41:89:66:45:
9d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B4:BC:25:74:0A:99:27:82:27:79:30:47:29:C4:A2:C6:6D:98:F3
X509v3 Authority Key Identifier:
keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/5a4383d90bfa30b9e4955d8bf2604de2afbec669.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.248.0/21
Signature Algorithm: sha256WithRSAEncryption
67:a6:fd:9e:30:8c:f9:15:03:3b:f2:64:1d:96:b1:9d:9a:5c:
35:a1:a6:ce:b9:c9:45:f8:f9:0a:e1:ff:30:80:18:20:26:3b:
12:d0:93:d2:9b:44:8c:b2:27:39:85:94:3a:7f:d7:63:20:54:
94:48:2a:ff:4b:ab:44:ec:d2:84:8c:f8:44:06:0d:94:25:52:
84:6f:33:2e:7e:d7:cd:c5:bc:c5:18:7d:98:6c:70:3a:f2:f8:
25:c0:82:d3:6b:e6:7b:6d:44:1f:6e:08:97:bf:27:8b:fa:a2:
b1:f3:32:1e:05:4d:39:be:cd:ce:d1:c7:42:a2:64:79:cb:b3:
27:0d:7b:60:62:7a:d7:94:1c:7c:f8:d5:2f:ae:2f:39:be:2f:
c6:b1:ee:1d:5b:c1:10:5e:ee:51:c0:ee:1b:3f:d6:ab:5e:70:
ed:c3:24:2c:89:01:a6:93:52:15:50:3b:98:e6:54:24:65:1e:
76:ef:5f:f2:95:86:33:b2:85:8f:be:18:4a:2e:cb:6c:e9:92:
5d:c5:57:e0:d1:b4:75:45:ae:ab:77:44:65:a0:e5:89:86:b2:
f0:65:7b:05:88:96:d1:eb:74:0a:7b:bb:2c:e6:97:b4:e2:96:
46:99:4a:bc:d0:5a:a4:9c:a6:6f:f6:d6:73:78:fe:a5:e9:70:
22:ae:1d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:37 2023 by rpki-client on console-ams.rpki-client.org