Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6f3c7c9a-c2cb-4650-a953-f7b81258f942/87d73aed09914da1a13b668ce1a0a84e70f18325.roa
File: 87d73aed09914da1a13b668ce1a0a84e70f18325.roa (raw, json)
Hash identifier: GUW4ivcV4ufCgCGqrvzJGisnRWZ42Dlff/KwwPXy9KI=
Subject key identifier: C5:71:3E:7D:D3:91:22:DF:42:64:B0:1C:27:D5:5F:66:5D:12:E3:E8
Certificate issuer: /CN=580bb6ad5a7e41db42c5a6f5b88efe8aef60c064
Certificate serial: 05C973
Authority key identifier: C6:09:F3:88:24:4D:CB:B7:E6:06:F6:F4:2D:68:B2:C8:4F:56:6D:74
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/580bb6ad5a7e41db42c5a6f5b88efe8aef60c064.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6f3c7c9a-c2cb-4650-a953-f7b81258f942/87d73aed09914da1a13b668ce1a0a84e70f18325.roa
Signing time: Wed 24 Mar 2021 14:30:45 +0000
ROA not before: Wed 24 Mar 2021 14:30:45 +0000
ROA not after: Tue 24 Mar 2026 14:30:45 +0000
asID: 267798
IP address blocks: 45.173.16.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 379251 (0x5c973)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=580bb6ad5a7e41db42c5a6f5b88efe8aef60c064
Validity
Not Before: Mar 24 14:30:45 2021 GMT
Not After : Mar 24 14:30:45 2026 GMT
Subject: CN=87d73aed09914da1a13b668ce1a0a84e70f18325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a7:f6:4d:b2:40:37:5f:7d:ca:d8:7c:5b:fa:
d7:0b:70:67:ad:5e:05:cd:df:68:50:5a:63:6c:33:
6e:44:b8:d8:5b:50:11:e9:b6:a4:6e:25:f9:b0:62:
c6:a2:f3:6b:7d:d2:d0:74:e3:ec:86:37:f5:33:6f:
b1:0b:83:89:e0:0d:cc:0a:cf:6f:64:ad:aa:8d:f0:
96:10:f2:fc:d0:22:69:e7:c7:ab:3b:cd:ae:4c:97:
89:09:62:d4:d4:ed:a4:ac:50:68:b9:f0:16:3b:ac:
4c:95:18:53:69:7d:b6:20:bc:a3:9d:01:90:44:52:
93:8d:13:24:aa:f7:19:06:74:63:60:50:d6:14:df:
fb:fa:5a:c4:52:00:f5:1b:73:b5:a9:b9:24:03:30:
95:77:b9:75:f1:a3:a5:4d:23:f5:e6:64:18:36:d6:
06:49:2c:55:87:11:29:85:36:dc:c4:5e:c8:e3:fd:
53:00:9c:57:18:5a:e7:1f:f5:3b:f0:40:07:5f:07:
62:87:5a:4f:1d:52:a6:4a:61:f1:b9:19:c9:95:40:
c3:db:34:7b:3b:4a:1d:d8:6d:02:bb:26:8d:7b:3f:
75:9f:d7:f4:21:66:31:2e:89:a0:9f:72:a8:3b:2e:
1b:67:9f:b7:73:59:1e:32:3f:0e:e0:3f:90:90:49:
28:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:71:3E:7D:D3:91:22:DF:42:64:B0:1C:27:D5:5F:66:5D:12:E3:E8
X509v3 Authority Key Identifier:
keyid:C6:09:F3:88:24:4D:CB:B7:E6:06:F6:F4:2D:68:B2:C8:4F:56:6D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/580bb6ad5a7e41db42c5a6f5b88efe8aef60c064.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6f3c7c9a-c2cb-4650-a953-f7b81258f942/87d73aed09914da1a13b668ce1a0a84e70f18325.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6f3c7c9a-c2cb-4650-a953-f7b81258f942/580bb6ad5a7e41db42c5a6f5b88efe8aef60c064.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.173.16.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:38:c8:e1:2f:f3:7a:05:5d:67:9d:7f:f4:57:bb:e1:21:1b:
05:14:ca:0b:dc:5b:12:31:d2:bb:e3:2a:e6:cb:ef:cb:f2:8b:
ad:cd:c3:6a:e6:10:38:6b:85:35:65:a7:16:f3:25:07:b6:ad:
9e:fb:4e:92:ea:3d:9b:a1:47:5e:81:06:50:5f:c7:0d:cb:89:
e8:bf:32:b7:ca:1a:5d:49:23:87:4a:88:a3:eb:75:b6:16:0f:
de:b9:c4:2f:0f:07:ec:12:2a:89:f0:b7:63:d9:8c:a7:a1:be:
40:59:6e:a4:10:61:61:02:2b:9a:56:54:33:f3:6b:ed:f6:02:
64:f4:cb:ec:eb:db:87:11:ea:8f:83:f5:17:ef:26:53:38:13:
e5:b0:71:31:79:c4:6a:8d:91:a7:7e:80:51:6b:4c:bd:66:a0:
98:75:3a:6c:69:48:18:fe:f1:c4:d1:2f:84:ce:84:ea:e7:bf:
92:1a:0c:44:f1:df:0d:32:51:c6:cf:2f:88:b5:d2:cf:cb:da:
00:1e:45:26:4f:23:b6:48:26:28:56:d2:79:06:b2:59:f7:c5:
97:ba:f4:33:b4:c9:76:d5:9d:f0:f1:65:2b:14:3d:30:06:87:
3e:9f:6d:18:ba:28:7d:38:f0:b0:f3:04:ab:a0:39:b2:11:91:
b0:5c:bc:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 19:13:02 2023 by rpki-client on console-fra.rpki-client.org