Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/94cf8c0746cb2a3632d5d95f4010ff79fba6029c.roa
File: 94cf8c0746cb2a3632d5d95f4010ff79fba6029c.roa (raw, json)
Hash identifier: PgMH0/jGozEa0gRyvffQm0ElV4nM83FX2hl8qk91bs8=
Subject key identifier: 4C:B0:22:DA:B6:C4:1E:F3:0A:3B:39:E6:B6:EB:09:46:22:19:0E:85
Certificate issuer: /CN=1dfddfe2f66b991bd6c0a52036c8bafed2f1f289
Certificate serial: 0BFC36
Authority key identifier: 2F:F0:EB:90:52:72:03:93:9D:EB:1E:9A:33:44:7B:44:E1:57:DD:72
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1dfddfe2f66b991bd6c0a52036c8bafed2f1f289.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/94cf8c0746cb2a3632d5d95f4010ff79fba6029c.roa
Signing time: Wed 24 Mar 2021 14:35:19 +0000
ROA not before: Wed 24 Mar 2021 14:35:19 +0000
ROA not after: Tue 24 Mar 2026 14:35:19 +0000
asID: 265554
IP address blocks: 45.170.132.0/24 maxlen: 24
45.170.134.0/24 maxlen: 24
45.170.135.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 785462 (0xbfc36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dfddfe2f66b991bd6c0a52036c8bafed2f1f289
Validity
Not Before: Mar 24 14:35:19 2021 GMT
Not After : Mar 24 14:35:19 2026 GMT
Subject: CN=94cf8c0746cb2a3632d5d95f4010ff79fba6029c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5f:59:f3:91:1c:ba:40:45:58:a7:48:1e:89:
64:a4:b4:cf:d2:41:d4:c4:9a:06:6d:5f:50:02:50:
2e:84:fb:db:3d:43:d5:a8:1d:a0:a1:aa:e8:6b:c5:
50:9a:93:48:0f:7c:55:f9:d5:0f:81:0f:95:72:68:
5f:7b:78:eb:30:a9:87:9e:53:c5:0e:a2:f9:3b:54:
90:b4:7d:ab:d8:5b:0e:b5:07:7c:eb:63:0a:24:cd:
1c:59:8b:2d:13:52:dd:63:b8:39:4c:0f:c3:d9:9b:
56:56:36:41:9c:f4:a8:fb:03:44:e6:f3:71:a8:11:
0c:9e:2c:87:07:11:37:1d:96:cb:aa:e5:0a:13:61:
30:98:ea:d3:2f:dc:dd:e5:76:73:e2:c1:8b:4e:1c:
c0:40:c0:5a:d3:3e:16:65:c6:2d:6b:26:c3:73:fe:
06:17:d8:66:9c:9b:45:56:99:31:b5:62:26:6f:f8:
11:ea:7a:cf:70:f9:ad:5a:5f:96:78:c5:51:c0:4f:
6b:d5:2e:1a:b8:94:09:75:e0:eb:53:ea:e0:51:09:
1c:c9:36:55:4b:b3:9e:5a:16:de:34:fc:a5:0c:92:
60:6e:53:5a:df:ef:be:ca:2c:23:17:68:24:3b:66:
76:16:e5:2f:9a:da:7c:7c:e4:0d:41:7f:e7:5d:cc:
a6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B0:22:DA:B6:C4:1E:F3:0A:3B:39:E6:B6:EB:09:46:22:19:0E:85
X509v3 Authority Key Identifier:
keyid:2F:F0:EB:90:52:72:03:93:9D:EB:1E:9A:33:44:7B:44:E1:57:DD:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1dfddfe2f66b991bd6c0a52036c8bafed2f1f289.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/94cf8c0746cb2a3632d5d95f4010ff79fba6029c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6a899f67-c65f-4d64-b9fe-2de6a60c7307/1dfddfe2f66b991bd6c0a52036c8bafed2f1f289.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.170.132.0/24
45.170.134.0/23
Signature Algorithm: sha256WithRSAEncryption
29:27:1a:31:9e:ee:64:6a:27:b2:a6:de:6f:41:1e:b3:41:8c:
10:43:3a:df:3e:bb:7d:d3:60:76:46:9a:f9:9e:8d:2d:82:d0:
b7:72:97:62:8c:5b:e1:77:0b:db:11:1a:e4:95:c9:96:6d:b3:
21:21:a7:c6:21:79:05:6e:f4:16:d8:da:51:d3:68:05:66:78:
db:95:95:40:35:f7:6b:13:03:64:ba:ec:2c:0c:61:8c:97:1c:
a4:9a:38:6d:e1:c8:22:98:b1:92:28:2f:01:96:f7:11:06:27:
2d:0f:b5:3b:e0:d6:15:e8:b4:1c:28:3e:e5:a7:ad:9e:82:8f:
30:df:29:80:02:02:6d:af:5c:ff:28:64:56:b3:5d:ef:77:58:
b6:ee:31:a9:4d:8d:bf:d0:68:26:e9:9e:f1:75:3f:e2:54:44:
29:d8:aa:c4:4f:b5:16:52:36:00:88:b7:c3:e8:d5:61:48:27:
0b:dd:a9:a8:8f:a0:5e:06:4f:4f:dd:33:a8:20:98:8c:d7:2d:
b1:1d:7c:f1:54:f4:d8:fd:8a:ad:27:08:ed:23:a9:7f:69:94:
d7:0f:0a:44:9c:f0:f8:05:d5:6f:0a:8f:2b:2c:7f:ad:c5:22:
d4:42:1e:24:96:42:59:ce:e2:8d:b0:97:c0:d9:27:b1:2e:05:
cc:d4:73:8f
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDC/w2MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDFk
ZmRkZmUyZjY2Yjk5MWJkNmMwYTUyMDM2YzhiYWZlZDJmMWYyODkwHhcNMjEwMzI0
MTQzNTE5WhcNMjYwMzI0MTQzNTE5WjAzMTEwLwYDVQQDEyg5NGNmOGMwNzQ2Y2Iy
YTM2MzJkNWQ5NWY0MDEwZmY3OWZiYTYwMjljMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuV9Z85EcukBFWKdIHolkpLTP0kHUxJoGbV9QAlAuhPvbPUPV
qB2goaroa8VQmpNID3xV+dUPgQ+Vcmhfe3jrMKmHnlPFDqL5O1SQtH2r2FsOtQd8
62MKJM0cWYstE1LdY7g5TA/D2ZtWVjZBnPSo+wNE5vNxqBEMniyHBxE3HZbLquUK
E2EwmOrTL9zd5XZz4sGLThzAQMBa0z4WZcYtaybDc/4GF9hmnJtFVpkxtWImb/gR
6nrPcPmtWl+WeMVRwE9r1S4auJQJdeDrU+rgUQkcyTZVS7OeWhbeNPylDJJgblNa
3+++yiwjF2gkO2Z2FuUvmtp8fOQNQX/nXcymfwIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFEywItq2xB7zCjs55rbrCUYiGQ6FMB8GA1UdIwQYMBaAFC/w65BScgOTnese
mjNEe0ThV91yMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMWRmZGRm
ZTJmNjZiOTkxYmQ2YzBhNTIwMzZjOGJhZmVkMmYxZjI4OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmE4OTlmNjctYzY1Zi00ZDY0LWI5ZmUtMmRlNmE2
MGM3MzA3Lzk0Y2Y4YzA3NDZjYjJhMzYzMmQ1ZDk1ZjQwMTBmZjc5ZmJhNjAyOWMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82YTg5OWY2Ny1jNjVmLTRkNjQtYjlmZS0yZGU2
YTYwYzczMDcvMWRmZGRmZTJmNjZiOTkxYmQ2YzBhNTIwMzZjOGJhZmVkMmYxZjI4
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAC2qhAMEAS2qhjANBgkqhkiG9w0BAQsFAAOCAQEAKScaMZ7u
ZGonsqbeb0Ees0GMEEM63z67fdNgdkaa+Z6NLYLQt3KXYoxb4XcL2xEa5JXJlm2z
ISGnxiF5BW70FtjaUdNoBWZ425WVQDX3axMDZLrsLAxhjJccpJo4beHIIpixkigv
AZb3EQYnLQ+1O+DWFei0HCg+5aetnoKPMN8pgAICba9c/yhkVrNd73dYtu4xqU2N
v9BoJume8XU/4lREKdiqxE+1FlI2AIi3w+jVYUgnC92pqI+gXgZPT90zqCCYjNct
sR188VT02P2KrScI7SOpf2mU1w8KRJzw+AXVbwqPKyx/rcUi1EIeJJZCWc7ijbCX
wNknsS4FzNRzjw==
-----END CERTIFICATE-----
Generated at Mon Aug 14 07:35:31 2023 by rpki-client on console-ams.rpki-client.org