Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ee6cc91-1e55-4ec8-9db9-920b08533749/cfab2ae2801b5c87bbb0bedc8bea3dd1078f8ab1.roa
File: cfab2ae2801b5c87bbb0bedc8bea3dd1078f8ab1.roa (raw, json)
Hash identifier: Zs/lL7os5d+beHAUiAjc4FL6lN6sQdvSk4JsiORyHaA=
Subject key identifier: E6:CD:42:72:61:D5:A4:57:52:C2:E3:53:AA:5A:E2:B5:FE:3A:A5:1F
Certificate issuer: /CN=8b6dd3a80ea4cbdb37061c93296421e4a7217d0c
Certificate serial: 224368
Authority key identifier: 8C:83:00:3C:04:82:E5:40:32:9F:D8:42:31:87:23:F4:94:EC:1E:43
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b6dd3a80ea4cbdb37061c93296421e4a7217d0c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6ee6cc91-1e55-4ec8-9db9-920b08533749/cfab2ae2801b5c87bbb0bedc8bea3dd1078f8ab1.roa
Signing time: Wed 05 Jul 2023 01:47:41 +0000
ROA not before: Tue 04 Jul 2023 01:47:41 +0000
ROA not after: Sat 05 Jul 2025 01:47:41 +0000
asID: 52468
IP address blocks: 45.4.88.0/23 maxlen: 23
45.4.90.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2245480 (0x224368)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6dd3a80ea4cbdb37061c93296421e4a7217d0c
Validity
Not Before: Jul 4 01:47:41 2023 GMT
Not After : Jul 5 01:47:41 2025 GMT
Subject: CN=cfab2ae2801b5c87bbb0bedc8bea3dd1078f8ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7e:40:38:21:3d:4f:e4:8d:6a:04:51:26:01:
d4:df:ad:ff:7f:1d:72:52:ec:dd:6a:ed:4f:fe:0e:
cf:a7:10:e7:d3:da:fb:1b:e8:06:6e:93:35:07:84:
3f:5d:51:d6:45:c6:14:f7:d2:e4:76:b9:fb:6a:3e:
40:5b:5f:ed:64:12:26:a2:06:cd:b7:b6:f3:bd:4b:
bc:8c:b1:fa:56:71:a9:81:39:60:c0:d8:a0:6d:39:
e1:c7:ea:b7:56:79:12:0f:71:28:33:a0:da:1b:71:
d5:03:94:09:ec:87:71:4b:72:f8:15:31:f5:00:60:
26:1b:e7:00:57:a8:f4:bd:d6:10:6c:d8:ff:c3:d8:
93:1e:b2:64:3d:8b:f0:ac:84:26:88:81:d9:1f:5f:
5a:ef:e1:f3:9c:61:23:e1:38:b1:a9:36:43:c1:e3:
78:17:1d:b1:33:4f:a0:2a:13:69:0a:a3:08:df:af:
9c:01:ff:2f:4a:99:02:4b:b9:17:7d:63:82:4a:7f:
bf:1a:73:ad:2e:eb:ae:14:75:61:da:08:fe:69:d9:
2c:72:a2:c8:2b:a9:4a:2f:d1:29:21:85:8c:8a:da:
be:a5:07:49:64:78:ee:d9:a1:47:df:f6:3a:be:c1:
a0:8c:ee:e8:eb:5f:27:9a:ea:f6:9c:52:7a:ed:d1:
a1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CD:42:72:61:D5:A4:57:52:C2:E3:53:AA:5A:E2:B5:FE:3A:A5:1F
X509v3 Authority Key Identifier:
keyid:8C:83:00:3C:04:82:E5:40:32:9F:D8:42:31:87:23:F4:94:EC:1E:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b6dd3a80ea4cbdb37061c93296421e4a7217d0c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ee6cc91-1e55-4ec8-9db9-920b08533749/cfab2ae2801b5c87bbb0bedc8bea3dd1078f8ab1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6ee6cc91-1e55-4ec8-9db9-920b08533749/8b6dd3a80ea4cbdb37061c93296421e4a7217d0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.88.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:fb:8a:1b:b2:ad:64:72:1e:09:a1:b6:45:92:ab:99:ab:92:
69:cf:ac:fb:cd:0a:b1:d6:2a:70:39:38:94:ba:9c:4b:51:53:
5a:13:19:14:fa:d1:61:2f:f1:7e:ad:93:10:4d:73:7e:a5:55:
c6:a9:64:f8:a8:64:5f:c0:61:09:52:bd:58:da:ba:1b:a6:84:
e1:8f:ee:38:bc:26:20:2e:14:0e:48:15:9d:c0:f7:ff:c7:af:
28:06:e5:e5:83:29:7b:a6:73:02:0b:47:86:4f:38:31:65:a2:
66:8c:1e:f9:d0:98:7a:be:f9:8b:d9:c9:15:2c:59:3a:d9:0c:
5d:31:7a:0b:50:20:48:4f:cf:97:0b:6b:00:ec:8b:d7:d7:36:
b4:24:d4:36:45:0c:45:f3:6f:3c:0c:6f:68:53:83:1a:2e:84:
1a:c3:ee:27:17:39:ec:cd:bf:e1:c3:e8:db:c2:b9:b0:62:c1:
e5:12:31:7a:fe:e7:11:9e:7d:c5:16:14:29:7e:4f:e0:16:ab:
a6:7b:b2:21:30:79:36:5a:00:25:7b:ee:f2:b7:fd:25:e1:3d:
33:df:90:95:c7:2d:8f:b4:af:e3:b6:f1:7a:04:49:55:2b:7b:
3e:e4:8e:ae:bd:64:c8:5a:0f:89:ca:12:f8:65:e8:4d:c2:7a:
1b:da:41:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 17 20:29:14 2023 by rpki-client on console-fra.rpki-client.org