Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/1855f70dc11f210cabfcc119f7f05da75f087556.roa
File: 1855f70dc11f210cabfcc119f7f05da75f087556.roa (raw, json)
Hash identifier: GnZgBVjBxCxzGM8NUQM7MkepA1G00wKlHJgwuPU5pHU=
Subject key identifier: 5D:F3:C7:F1:82:50:EA:8B:B6:44:76:15:A1:52:9E:6A:58:F0:CE:C3
Certificate issuer: /CN=1dfddfe2f66b991bd6c0a52036c8bafed2f1f289
Certificate serial: 0BF85D
Authority key identifier: 2F:F0:EB:90:52:72:03:93:9D:EB:1E:9A:33:44:7B:44:E1:57:DD:72
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1dfddfe2f66b991bd6c0a52036c8bafed2f1f289.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/1855f70dc11f210cabfcc119f7f05da75f087556.roa
Signing time: Wed 24 Mar 2021 14:35:19 +0000
ROA not before: Wed 24 Mar 2021 14:35:19 +0000
ROA not after: Tue 24 Mar 2026 14:35:19 +0000
asID: 197991
IP address blocks: 45.170.133.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 784477 (0xbf85d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dfddfe2f66b991bd6c0a52036c8bafed2f1f289
Validity
Not Before: Mar 24 14:35:19 2021 GMT
Not After : Mar 24 14:35:19 2026 GMT
Subject: CN=1855f70dc11f210cabfcc119f7f05da75f087556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6f:4c:a7:68:0d:eb:77:71:13:c7:98:0e:62:
d0:5f:49:29:88:be:27:a9:db:e0:b6:4b:9c:1b:69:
c0:08:40:a8:b0:96:f2:0d:19:b3:ab:c2:25:27:b2:
c1:54:1e:8c:cf:70:4d:0a:72:28:e4:f7:9e:4b:8b:
e1:66:31:4f:83:09:62:73:95:0e:a1:d2:94:56:9c:
c6:60:21:0b:4f:b9:ae:14:15:f4:5c:84:26:cd:3c:
dd:38:7f:cd:87:0a:b3:96:2e:cf:42:37:09:8f:bc:
96:f6:86:f7:d4:8f:69:9e:e7:28:ca:44:73:13:49:
cc:06:fa:06:6a:0b:d9:2f:92:ea:99:90:b9:18:56:
bf:e4:5e:bc:fc:59:03:90:10:6f:e8:82:25:dc:6d:
f2:d8:4a:32:ef:b9:80:3b:01:e6:17:47:b3:9d:86:
31:a9:ef:16:a3:fb:4b:46:00:ea:55:b6:82:99:b1:
2d:7a:42:8e:00:6c:96:38:22:2f:25:dd:93:72:76:
8a:de:3d:12:e2:b8:91:ed:26:69:3a:f1:e3:20:db:
d3:f7:ed:46:3b:20:d0:36:75:1a:d4:e6:88:c6:2c:
7e:03:c1:22:d7:52:75:9a:09:f9:09:fd:0f:1f:57:
e2:6d:9d:b2:79:33:fe:fd:d2:b1:0a:19:1c:be:f5:
00:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F3:C7:F1:82:50:EA:8B:B6:44:76:15:A1:52:9E:6A:58:F0:CE:C3
X509v3 Authority Key Identifier:
keyid:2F:F0:EB:90:52:72:03:93:9D:EB:1E:9A:33:44:7B:44:E1:57:DD:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1dfddfe2f66b991bd6c0a52036c8bafed2f1f289.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/1855f70dc11f210cabfcc119f7f05da75f087556.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/1dfddfe2f66b991bd6c0a52036c8bafed2f1f289.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.170.133.0/24
Signature Algorithm: sha256WithRSAEncryption
05:ad:e9:96:7b:0f:2f:04:8b:98:69:b5:41:0d:1e:a9:9b:d6:
ae:f0:45:6b:56:18:35:68:74:a0:52:b9:fc:05:68:77:7d:f8:
96:95:ed:5d:29:95:81:68:24:f8:9e:e8:e4:4d:7d:86:67:71:
62:0e:89:50:b9:bd:af:72:e8:f4:14:e9:f1:37:0a:f5:c9:98:
06:dd:43:96:be:14:18:80:a1:79:e4:5c:0e:0c:ed:c8:5f:4b:
98:ea:1c:c5:17:5d:f8:48:b9:22:4c:4d:46:cc:36:ec:da:16:
a4:0c:ca:93:20:20:c0:20:9c:cd:88:7d:04:80:9e:5b:0e:2c:
89:8e:66:02:69:89:47:f4:fd:e0:c7:fc:7b:1e:5e:45:7a:11:
e0:6a:39:53:20:a2:0c:19:eb:7a:f6:58:a3:0c:63:ba:e7:6f:
73:68:8c:c3:78:68:7d:82:7a:eb:32:28:a3:ea:1c:2f:8d:6a:
b5:75:30:7d:e0:f3:ec:66:3f:71:d6:99:b2:12:69:e1:3c:77:
1a:d1:6b:ad:64:aa:5c:81:9d:15:14:19:a3:10:10:a3:95:9d:
67:b3:d2:5a:34:02:e3:44:13:b8:c3:a6:e6:55:14:69:a4:31:
80:34:1f:fd:fc:ab:e4:f5:4d:ba:25:87:20:9b:3d:12:3e:26:
47:e4:dc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 14 07:35:31 2023 by rpki-client on console-ams.rpki-client.org