Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685b658c-83c3-4542-9299-af5cac5b2efe/136964735ad3f335d1e54fdbd57c7158f47d463d.roa
File: 136964735ad3f335d1e54fdbd57c7158f47d463d.roa (raw, json)
Hash identifier: O2qSExJ6Sm1kcuEQTnqaT78xBfKIwu3Lv3B079Ate2U=
Subject key identifier: 82:DA:C2:2A:6E:C4:B3:C2:67:4A:A5:FF:93:52:E0:44:BD:36:00:92
Certificate issuer: /CN=1bbd0b26e28ec0e225838e2cda93e25e122b332a
Certificate serial: 1E49AC
Authority key identifier: 62:CB:ED:1B:21:A1:AD:2F:E5:F5:B2:63:B3:90:0D:90:EA:E1:C4:05
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1bbd0b26e28ec0e225838e2cda93e25e122b332a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/685b658c-83c3-4542-9299-af5cac5b2efe/136964735ad3f335d1e54fdbd57c7158f47d463d.roa
Signing time: Fri 24 Mar 2023 08:31:37 +0000
ROA not before: Thu 23 Mar 2023 08:31:37 +0000
ROA not after: Sat 22 Mar 2025 08:31:37 +0000
asID: 48252
IP address blocks: 45.169.164.0/24 maxlen: 24
45.169.165.0/24 maxlen: 24
45.169.166.0/24 maxlen: 24
45.169.167.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1984940 (0x1e49ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bbd0b26e28ec0e225838e2cda93e25e122b332a
Validity
Not Before: Mar 23 08:31:37 2023 GMT
Not After : Mar 22 08:31:37 2025 GMT
Subject: CN=136964735ad3f335d1e54fdbd57c7158f47d463d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1a:c3:21:d5:a0:6e:31:5d:2c:be:67:c3:ce:
6a:80:f6:11:94:d5:2c:bd:cb:be:a6:81:22:41:3f:
a7:70:3f:c3:17:fc:20:be:77:a8:46:d2:94:1b:1f:
00:65:f3:67:9f:f4:79:7f:38:a9:b1:aa:32:e2:55:
54:d8:a8:d1:cd:69:7a:ec:56:6c:65:c0:8a:5d:3f:
e5:85:23:d0:13:ca:06:59:c7:bb:a0:d5:93:cb:a5:
85:22:26:05:ee:6d:7e:56:c1:06:a7:6f:46:af:a4:
48:a7:c6:80:3a:40:76:12:66:86:94:d8:93:81:03:
af:63:63:8e:6e:56:04:a3:45:ed:b3:49:9a:4a:1d:
64:e1:91:97:d9:10:3f:4a:cf:6a:aa:60:4c:e2:67:
af:20:fd:60:c6:a6:9e:6b:d1:cc:8a:48:c0:83:8b:
24:aa:b9:a6:d7:53:7b:ea:47:9c:fc:55:0f:34:b2:
ea:36:b8:6a:44:0d:35:5a:d9:cb:42:90:c0:88:0e:
bd:06:f7:41:6d:5e:e0:25:85:17:d4:63:6e:77:6f:
d4:85:93:56:b6:dc:51:6b:bc:8f:18:4a:d4:00:80:
b6:96:64:36:c9:d4:14:6e:ce:3f:bb:c6:eb:65:c5:
ca:89:88:c5:d5:d3:24:a4:f8:be:3b:5e:5c:2c:e3:
ab:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:DA:C2:2A:6E:C4:B3:C2:67:4A:A5:FF:93:52:E0:44:BD:36:00:92
X509v3 Authority Key Identifier:
keyid:62:CB:ED:1B:21:A1:AD:2F:E5:F5:B2:63:B3:90:0D:90:EA:E1:C4:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1bbd0b26e28ec0e225838e2cda93e25e122b332a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685b658c-83c3-4542-9299-af5cac5b2efe/136964735ad3f335d1e54fdbd57c7158f47d463d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/685b658c-83c3-4542-9299-af5cac5b2efe/1bbd0b26e28ec0e225838e2cda93e25e122b332a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.169.164.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:d6:b8:0b:f3:92:c8:ef:0e:b2:39:f0:7c:6e:d8:3b:7a:d2:
56:0a:5f:f3:90:a3:04:6d:d7:88:cd:a2:23:47:1c:82:16:70:
66:77:b8:f2:0d:cb:87:d3:97:b6:1d:61:5c:b3:8f:40:68:1c:
a5:0d:7c:a7:b7:40:75:e2:07:b9:57:e9:35:e8:66:f3:aa:51:
2f:0c:cb:5c:79:b9:c4:99:ba:de:e7:fc:dd:2e:65:51:01:b0:
ce:d5:72:40:e9:52:6a:0a:e0:8e:14:af:e6:eb:37:6e:4f:9f:
a0:c8:a8:e9:cb:b9:d8:f2:0d:61:b1:17:28:8c:fa:62:3d:0b:
d3:3b:d3:12:f7:f0:f4:4b:8a:d4:4f:fc:b9:f3:d0:f4:ea:6b:
03:a8:21:d8:2f:15:cd:31:70:d8:ac:bd:51:df:29:57:1d:84:
82:72:5f:07:27:41:3b:0a:a5:72:d0:1e:69:19:73:4d:87:ec:
4f:0d:bc:51:50:67:84:0c:14:ef:46:3f:8f:8d:40:0b:d8:72:
72:e9:71:b4:6f:a9:b1:8d:f1:a0:d0:2a:46:36:0b:d4:7b:c4:
21:57:30:72:6c:4d:b8:c4:76:bd:46:f5:36:20:57:74:38:f4:
99:b6:43:15:ac:03:23:c4:fc:ca:8f:b9:45:6a:f4:96:6d:ee:
db:61:71:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 6 00:58:20 2024 by rpki-client on console-ams.rpki-client.org