Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6e1394b9-b078-44ff-8c75-9365303aca4f/ef718673764210d977e61f55470deb63b2b13741.roa
File: ef718673764210d977e61f55470deb63b2b13741.roa (raw, json)
Hash identifier: Qni01Sfv5FITtLuVuyYMkDN95L7NM5zoCn4nmComqkI=
Subject key identifier: 09:A3:64:AD:91:21:2B:77:50:2F:18:4B:43:EB:97:E0:66:5C:6B:89
Certificate issuer: /CN=af74f3aa42340a4c03a724bcfe9d604390d00998
Certificate serial: 222C71
Authority key identifier: F8:C0:0E:76:BA:BC:3C:DE:FE:23:93:A2:4A:E4:97:0A:34:85:7E:E8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/af74f3aa42340a4c03a724bcfe9d604390d00998.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6e1394b9-b078-44ff-8c75-9365303aca4f/ef718673764210d977e61f55470deb63b2b13741.roa
Signing time: Wed 05 Jul 2023 13:20:26 +0000
ROA not before: Tue 04 Jul 2023 13:20:26 +0000
ROA not after: Sat 05 Jul 2025 13:20:26 +0000
asID: 52468
IP address blocks: 45.71.36.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2239601 (0x222c71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af74f3aa42340a4c03a724bcfe9d604390d00998
Validity
Not Before: Jul 4 13:20:26 2023 GMT
Not After : Jul 5 13:20:26 2025 GMT
Subject: CN=ef718673764210d977e61f55470deb63b2b13741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1d:39:e9:06:05:c2:72:e7:f4:62:9e:61:59:
ba:5b:28:5a:b1:41:dc:62:a8:fd:7e:a6:8a:33:c9:
ff:2d:db:b4:a2:6f:a9:73:a1:d2:c0:e3:c1:6e:c6:
1a:e6:7e:25:a4:c3:eb:b7:0b:c6:4b:3a:c2:d8:98:
d9:9a:b2:75:c4:7c:3d:b4:ad:89:45:9d:36:85:07:
76:85:35:b1:3f:00:55:16:9e:fc:33:e0:75:3c:1f:
5a:de:9a:15:0d:d0:7c:39:0a:26:02:ab:f6:5b:99:
7d:13:9a:ad:60:c7:5a:86:51:12:e1:36:13:9a:49:
a2:3e:b5:4d:45:64:c0:a5:2c:da:b2:e2:51:5a:f8:
91:91:4d:16:ea:e2:9b:05:8b:78:63:fd:c7:d5:00:
3a:be:8c:bf:e9:05:97:e4:db:96:a7:ef:57:7f:b1:
00:f4:fd:24:ee:32:1e:1b:24:c2:5f:fb:dc:1c:0e:
33:33:db:ee:66:e4:27:91:61:8c:ae:68:31:a7:a0:
3b:c1:26:22:ba:95:a3:73:18:f1:18:70:a2:ba:54:
d6:60:c5:a6:d5:f2:c7:08:6f:4e:44:78:18:b3:69:
08:27:2b:4f:46:11:4a:c3:fa:18:d1:a9:4d:ca:aa:
30:e9:c7:b2:b7:3a:af:16:6e:20:fc:64:d5:42:87:
95:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A3:64:AD:91:21:2B:77:50:2F:18:4B:43:EB:97:E0:66:5C:6B:89
X509v3 Authority Key Identifier:
keyid:F8:C0:0E:76:BA:BC:3C:DE:FE:23:93:A2:4A:E4:97:0A:34:85:7E:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/af74f3aa42340a4c03a724bcfe9d604390d00998.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6e1394b9-b078-44ff-8c75-9365303aca4f/ef718673764210d977e61f55470deb63b2b13741.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6e1394b9-b078-44ff-8c75-9365303aca4f/af74f3aa42340a4c03a724bcfe9d604390d00998.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.36.0/22
Signature Algorithm: sha256WithRSAEncryption
28:e7:ad:49:55:b8:7e:57:6c:02:f7:37:b9:c4:b2:a8:a4:75:
f6:96:da:bb:79:06:47:01:92:a3:b9:89:c3:a9:bb:9d:11:b2:
ac:82:2b:51:c2:0b:c6:74:52:96:2a:93:08:5b:e7:8e:11:63:
1a:a9:3f:be:38:b6:01:1b:9c:e1:d4:2c:02:ff:af:be:35:cc:
ea:be:37:cb:62:53:b7:ca:22:94:a5:2e:b8:db:67:ac:e7:e9:
36:94:90:ba:1b:64:89:90:2a:4c:62:39:a8:bf:09:35:87:18:
da:6c:48:14:e5:66:34:8f:2a:49:f2:ae:3e:69:61:a1:8e:4d:
c2:ab:31:58:af:5e:32:da:fb:f8:1f:ae:8f:7f:b5:ec:02:e3:
a8:26:e7:48:3d:e9:e1:00:eb:e9:be:e1:aa:24:67:f9:a0:a3:
c7:93:ca:81:ba:81:e9:b8:c0:fa:20:eb:bc:6c:0d:8d:3b:ba:
c2:74:5f:bf:28:82:75:60:ed:9f:b0:cd:9e:af:ef:92:41:c0:
27:83:47:6e:56:99:18:ce:ce:5b:bc:aa:7d:7e:15:25:57:b6:
36:59:30:fb:77:5f:49:9f:83:c3:69:25:1d:31:aa:55:87:0f:
58:c2:4f:94:32:79:c9:65:5d:d2:9f:91:9e:a0:21:2c:fb:de:
58:7a:3d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:39 2023 by rpki-client on console-ams.rpki-client.org