Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6c6fae99-2fb6-41eb-9fa9-5cda0f53a04c/d90d3df8057b5ef0271593effe75d4481c9fd588.roa
File: d90d3df8057b5ef0271593effe75d4481c9fd588.roa (raw, json)
Hash identifier: C3bCpKp3364xlGjJDrmH+ORbxwIrAoiSGp/6fBaJ9ZA=
Subject key identifier: 2D:C9:10:7F:F3:29:0D:4C:58:29:50:DF:59:3C:84:73:F3:0E:A1:6F
Certificate issuer: /CN=1f65d1c37e495ab494edc3bad30b1a6d4f88e383
Certificate serial: 2165BB
Authority key identifier: 4D:2E:30:FD:EB:2F:B3:C6:6F:8F:67:26:09:36:9D:75:D9:DE:CF:52
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1f65d1c37e495ab494edc3bad30b1a6d4f88e383.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6c6fae99-2fb6-41eb-9fa9-5cda0f53a04c/d90d3df8057b5ef0271593effe75d4481c9fd588.roa
Signing time: Wed 05 Jul 2023 01:48:48 +0000
ROA not before: Tue 04 Jul 2023 01:48:48 +0000
ROA not after: Sat 05 Jul 2025 01:48:48 +0000
asID: 52468
IP address blocks: 45.224.20.0/23 maxlen: 23
45.224.22.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2188731 (0x2165bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f65d1c37e495ab494edc3bad30b1a6d4f88e383
Validity
Not Before: Jul 4 01:48:48 2023 GMT
Not After : Jul 5 01:48:48 2025 GMT
Subject: CN=d90d3df8057b5ef0271593effe75d4481c9fd588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a3:a0:c8:45:6d:75:8d:7b:63:05:34:78:46:
c6:90:73:fc:fd:c5:a6:9d:66:d2:ab:8c:b3:79:37:
8f:af:6a:9d:7f:95:ee:40:aa:ac:4f:9d:b6:27:0d:
ec:fa:f2:0e:d6:69:b4:b7:85:33:25:a3:3d:1c:55:
c5:85:f6:d5:12:e9:5d:61:f7:ad:bb:8d:0e:6d:b6:
23:95:cf:62:a4:5e:09:6a:7f:6e:a4:c3:bc:75:5a:
4a:84:6c:d1:8b:6d:cd:c2:ec:9a:6c:59:fa:09:89:
56:b4:03:7c:f8:9a:79:ae:19:5b:43:97:4e:36:8b:
c0:42:30:f4:e0:67:68:2e:d0:60:ed:b7:00:e0:99:
ef:34:1e:0e:98:bb:a7:8f:5f:db:22:18:ae:e2:ee:
d1:14:2d:05:70:dd:de:1d:af:66:b4:bf:93:84:7c:
64:1f:cb:5a:2d:d9:66:66:ce:4c:e3:6b:d2:a5:31:
56:6a:61:17:09:62:80:9e:31:a9:32:b9:02:b7:17:
38:e4:1e:c1:96:a6:8e:07:45:67:61:66:cd:75:4c:
11:2a:2d:4a:bd:88:66:95:89:31:20:7c:81:a8:a2:
60:b1:ec:d5:56:1e:58:50:84:54:48:00:5f:a3:be:
a7:39:e0:17:2d:72:35:2e:ca:89:a8:88:a5:0e:a8:
25:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C9:10:7F:F3:29:0D:4C:58:29:50:DF:59:3C:84:73:F3:0E:A1:6F
X509v3 Authority Key Identifier:
keyid:4D:2E:30:FD:EB:2F:B3:C6:6F:8F:67:26:09:36:9D:75:D9:DE:CF:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1f65d1c37e495ab494edc3bad30b1a6d4f88e383.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6c6fae99-2fb6-41eb-9fa9-5cda0f53a04c/d90d3df8057b5ef0271593effe75d4481c9fd588.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6c6fae99-2fb6-41eb-9fa9-5cda0f53a04c/1f65d1c37e495ab494edc3bad30b1a6d4f88e383.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.224.20.0/22
Signature Algorithm: sha256WithRSAEncryption
34:58:19:04:99:58:8c:7f:37:78:70:b2:83:c8:e2:43:6a:bf:
71:a3:e7:97:f1:34:96:00:b8:2a:30:b4:5f:c0:56:c8:93:a5:
37:67:e8:cd:2a:26:05:74:c2:94:07:c0:65:ed:ce:37:6d:36:
9c:ca:ce:bb:1c:e2:a3:d8:ba:42:01:bd:80:c8:a4:b4:ae:70:
c6:0e:b4:ad:b9:be:66:e6:89:72:dc:c3:33:cc:79:7b:ae:50:
5a:53:55:ad:e1:47:61:8d:87:31:60:ab:02:5f:fa:93:ef:1d:
83:87:9e:d9:ba:d7:6b:d2:9a:e1:8b:f8:24:e8:af:17:b4:71:
ba:62:0b:3f:58:1b:20:9d:d4:12:b4:c8:66:42:a7:79:dc:dc:
53:d8:57:b7:7e:00:fa:8f:55:28:b4:1a:d7:5d:6e:89:8d:c6:
8d:93:6c:51:dd:ba:2d:29:0c:9e:f9:08:d8:02:1f:fa:44:25:
27:f0:30:8d:89:df:bc:5a:c9:a5:41:dc:5d:1b:e4:2f:74:ac:
9d:8d:b9:7a:69:ed:cb:ba:ba:3c:d1:73:16:de:cd:ea:63:61:
18:05:5e:bd:82:02:2d:9e:ef:04:f9:ee:7a:70:06:44:3e:dd:
57:5c:79:61:3c:41:c3:4f:a5:eb:db:5b:35:44:03:18:e0:19:
6a:2e:45:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 17 20:26:36 2023 by rpki-client on console-ams.rpki-client.org