Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6af7e935-f69d-4ea1-8649-d127bc9db1c7/6a379583c161ace23fe7bd96e86b98760936a49e.roa
File: 6a379583c161ace23fe7bd96e86b98760936a49e.roa (raw, json)
Hash identifier: gLvNBASTV4MORjhtz/bf2IOoe6piP08/C9vSiBsCTFo=
Subject key identifier: CB:1C:EB:E8:89:2C:6C:D8:FC:71:17:68:11:9E:14:9D:6C:59:47:58
Certificate issuer: /CN=ffe64fcbdace0b26df99b62a807cea23c8707e12
Certificate serial: 0BC8B0
Authority key identifier: 20:E0:45:88:BA:C8:ED:0C:36:11:AD:F3:B0:C6:C6:A4:1C:FA:1E:75
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ffe64fcbdace0b26df99b62a807cea23c8707e12.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6af7e935-f69d-4ea1-8649-d127bc9db1c7/6a379583c161ace23fe7bd96e86b98760936a49e.roa
Signing time: Wed 22 Dec 2021 16:08:05 +0000
ROA not before: Wed 22 Dec 2021 03:00:00 +0000
ROA not after: Mon 22 Dec 2025 03:00:00 +0000
asID: 263218
IP address blocks: 45.191.244.0/24 maxlen: 24
45.191.245.0/24 maxlen: 24
45.191.246.0/24 maxlen: 24
45.191.244.0/22 maxlen: 22
2803:b4e0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 772272 (0xbc8b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe64fcbdace0b26df99b62a807cea23c8707e12
Validity
Not Before: Dec 22 03:00:00 2021 GMT
Not After : Dec 22 03:00:00 2025 GMT
Subject: CN=6a379583c161ace23fe7bd96e86b98760936a49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:57:b7:0c:e4:6f:d0:0a:c1:d5:e8:b2:ad:20:
b3:d3:90:a8:55:9d:d7:e5:85:af:52:4a:8e:b5:9c:
02:f9:aa:79:5e:6c:5e:03:84:8c:e4:2e:dd:67:df:
f8:b6:e8:b5:b7:23:0f:58:f0:b6:9e:0b:b5:a8:ae:
0b:30:fa:74:fc:80:4a:9d:77:1c:43:16:7d:e3:98:
df:2c:e8:2a:7f:e5:d3:4e:ba:ad:5a:6e:7d:e7:e6:
d0:86:3d:de:a4:56:90:77:19:d6:d2:9b:13:d5:59:
48:93:e3:2c:39:65:a4:9b:b5:67:25:21:d5:62:7f:
b6:12:f7:53:5f:19:0c:7f:d0:8a:12:a6:0d:d4:f1:
fc:e6:c4:76:b7:47:a0:7f:60:69:92:50:5b:28:42:
54:3d:ad:dd:c0:e4:73:6d:77:9b:91:ca:15:91:87:
1b:56:74:a2:84:22:b7:82:ff:b2:18:00:17:d8:04:
9a:a9:52:5b:fe:d8:67:b4:46:c4:7b:d4:e5:c6:74:
00:66:60:e1:35:48:aa:5c:02:6e:23:d5:4c:3c:38:
15:55:fd:95:6c:57:93:bd:17:18:21:98:50:f9:6b:
52:7a:77:e6:97:62:0b:02:4d:c8:ae:1d:ec:7b:27:
bd:0f:d1:19:7f:6d:53:c8:15:d7:db:a5:88:30:a3:
c5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1C:EB:E8:89:2C:6C:D8:FC:71:17:68:11:9E:14:9D:6C:59:47:58
X509v3 Authority Key Identifier:
keyid:20:E0:45:88:BA:C8:ED:0C:36:11:AD:F3:B0:C6:C6:A4:1C:FA:1E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ffe64fcbdace0b26df99b62a807cea23c8707e12.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6af7e935-f69d-4ea1-8649-d127bc9db1c7/6a379583c161ace23fe7bd96e86b98760936a49e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6af7e935-f69d-4ea1-8649-d127bc9db1c7/ffe64fcbdace0b26df99b62a807cea23c8707e12.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.244.0/22
IPv6:
2803:b4e0::/32
Signature Algorithm: sha256WithRSAEncryption
62:90:93:b3:66:25:2b:9f:85:c4:6e:20:29:33:75:cd:50:70:
b4:72:91:fd:e9:29:e1:4f:e9:e4:f0:83:23:10:2a:41:bc:21:
a5:aa:d1:cd:3f:99:f6:50:ab:50:6b:4c:51:76:0e:cc:bf:82:
03:09:ac:10:42:d8:e6:4f:0d:f5:b9:8e:28:ab:80:a1:d2:cc:
7a:03:16:53:b4:15:5d:d6:45:0d:4b:f5:65:7f:62:77:32:57:
0c:58:8f:ba:21:b4:76:e4:4b:60:71:bd:04:cf:8d:8d:88:d9:
4d:fb:ad:7f:9a:70:42:a4:91:bc:15:a0:d2:f7:df:62:ad:4c:
ae:14:0d:e6:03:b0:1e:7a:f4:b1:94:ec:a1:3d:81:11:61:bf:
91:b1:60:cd:e1:a0:c3:29:c4:39:55:40:cc:47:d2:db:89:0a:
3a:d2:72:00:3f:15:12:cf:79:8d:c3:87:2d:ff:cc:ec:51:e4:
8b:85:86:e7:50:0e:34:09:01:a3:69:b7:6d:67:d7:80:f2:a8:
05:a4:a9:6d:0c:8b:c0:82:e1:48:b1:0e:fb:d5:76:3a:42:c6:
2a:61:69:39:3e:64:14:08:3d:7a:d0:cf:b8:7e:47:b6:05:c9:
f0:5d:ce:ca:b6:e3:b3:aa:2b:46:d6:d1:26:c7:1e:8a:63:b9:
e4:cf:1d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 12 19:01:27 2023 by rpki-client on console-fra.rpki-client.org