Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6af7e935-f69d-4ea1-8649-d127bc9db1c7/bca41830f8b0e60f035ed04f883e1bc0233070e9.roa
File: bca41830f8b0e60f035ed04f883e1bc0233070e9.roa (raw, json)
Hash identifier: UEq3a/ZqkW6lGoPU1VlbHAVSrxXWRHatVvgUEoCRZss=
Subject key identifier: 77:1F:C5:10:99:9C:6A:66:F8:B4:73:10:2C:8F:0F:19:F4:DA:E4:A0
Certificate issuer: /CN=ffe64fcbdace0b26df99b62a807cea23c8707e12
Certificate serial: 0502B2
Authority key identifier: 20:E0:45:88:BA:C8:ED:0C:36:11:AD:F3:B0:C6:C6:A4:1C:FA:1E:75
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ffe64fcbdace0b26df99b62a807cea23c8707e12.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6af7e935-f69d-4ea1-8649-d127bc9db1c7/bca41830f8b0e60f035ed04f883e1bc0233070e9.roa
Signing time: Wed 24 Mar 2021 14:42:09 +0000
ROA not before: Wed 24 Mar 2021 14:42:09 +0000
ROA not after: Tue 24 Mar 2026 14:42:09 +0000
asID: 52451
IP address blocks: 45.191.247.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328370 (0x502b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe64fcbdace0b26df99b62a807cea23c8707e12
Validity
Not Before: Mar 24 14:42:09 2021 GMT
Not After : Mar 24 14:42:09 2026 GMT
Subject: CN=bca41830f8b0e60f035ed04f883e1bc0233070e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:08:98:f4:14:9d:88:ce:d6:d8:d6:91:12:a1:
60:f9:ef:ad:8d:23:df:98:44:5b:14:38:ff:e8:a2:
4c:da:f0:bd:8d:34:b6:b7:d3:de:53:86:71:29:e4:
a3:08:79:c3:0a:90:2e:88:06:76:84:37:97:43:95:
bd:2e:ba:64:1b:7e:91:7c:39:02:0d:4c:8e:3b:64:
eb:7e:66:c5:29:02:60:4c:d6:00:9e:5f:ac:69:27:
df:84:f8:65:fd:ca:ab:83:36:a6:a6:5d:2b:ce:c2:
53:81:2e:f9:ae:27:af:d1:91:9c:0a:be:51:62:8f:
66:8b:c3:a8:21:76:14:f6:39:40:08:a9:ca:55:aa:
ec:ed:3f:a7:45:84:58:da:06:d8:8e:e5:5e:9a:af:
4b:25:06:00:11:d8:bb:79:5f:29:7b:c3:a3:e5:15:
49:a9:79:e5:8d:16:97:5e:c6:f8:da:04:3f:e5:1b:
7a:8c:23:9f:56:c9:6f:6f:35:e6:d3:d4:f0:da:36:
0c:be:87:34:c7:64:98:d6:51:18:9d:eb:0d:e9:3c:
fa:61:83:cd:fa:c9:43:b8:3a:f9:ee:71:b6:77:28:
e5:c5:39:51:bb:06:e3:3d:f2:18:8c:a9:cd:f4:02:
67:96:36:20:dd:61:4a:35:db:96:da:d8:a9:ff:8a:
55:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:1F:C5:10:99:9C:6A:66:F8:B4:73:10:2C:8F:0F:19:F4:DA:E4:A0
X509v3 Authority Key Identifier:
keyid:20:E0:45:88:BA:C8:ED:0C:36:11:AD:F3:B0:C6:C6:A4:1C:FA:1E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ffe64fcbdace0b26df99b62a807cea23c8707e12.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6af7e935-f69d-4ea1-8649-d127bc9db1c7/bca41830f8b0e60f035ed04f883e1bc0233070e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6af7e935-f69d-4ea1-8649-d127bc9db1c7/ffe64fcbdace0b26df99b62a807cea23c8707e12.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.247.0/24
Signature Algorithm: sha256WithRSAEncryption
41:5e:8e:e2:da:db:f5:43:73:7e:25:3a:46:7c:4c:26:a6:3f:
08:48:24:7f:82:01:73:31:14:c3:77:f6:cf:58:fe:88:e2:1b:
8f:9c:d6:74:02:72:4c:d9:da:87:9a:b0:01:b2:e1:6b:a7:65:
d8:7a:68:9b:71:47:e1:94:96:79:25:03:32:60:94:a2:bb:7c:
42:99:c5:98:b1:93:f0:0b:25:3b:27:df:75:dc:94:8b:7b:ba:
a1:f2:c4:37:19:ca:be:73:1f:22:70:9d:af:2e:9c:37:b7:2c:
61:4e:55:8a:c6:2b:b8:c9:1c:42:6a:64:ac:c0:1f:38:67:e8:
3a:a7:c0:ae:63:00:ff:a8:4f:16:f5:b3:16:ee:11:3f:12:86:
b7:3a:2c:91:e7:05:4b:66:22:dc:94:6d:91:67:0f:e8:32:a5:
75:60:39:29:c7:fc:97:87:c1:5f:dd:3d:e5:02:b3:ff:7b:ec:
7b:02:95:92:ba:fb:bd:39:a3:cd:7c:70:1b:0f:a5:e1:8c:56:
98:0f:56:32:e1:ea:a2:2c:1a:74:c9:af:19:e6:3d:23:ad:65:
0f:5a:f9:bb:b6:de:ee:54:bc:44:a2:22:3c:ee:d1:da:a1:f8:
76:0a:59:d2:48:7f:cd:19:87:95:b2:04:6c:0a:e7:b1:4d:61:
3f:40:72:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 12 18:50:40 2023 by rpki-client on console-ams.rpki-client.org