Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7912fc9c-086c-458e-a97b-4ad15c52bc5b/cb3018861b39ee05c4ad394e20d64aa5e76d85f6.roa
File: cb3018861b39ee05c4ad394e20d64aa5e76d85f6.roa (raw, json)
Hash identifier: HE0sODO4yaqfPV5rkfGaC/LK40+rosl1Ey34TUr7hdo=
Subject key identifier: 6A:E7:08:E4:BE:22:58:E3:A8:86:87:5A:0A:4C:3E:F6:AC:BE:5B:C1
Certificate issuer: /CN=a03a3f69e9a44aa1629814aa223324e0a63fa3f2
Certificate serial: 0B1B6D
Authority key identifier: 23:E7:1C:BF:F6:FD:08:B5:80:81:63:5B:3F:5E:32:59:00:39:DC:9A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a03a3f69e9a44aa1629814aa223324e0a63fa3f2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7912fc9c-086c-458e-a97b-4ad15c52bc5b/cb3018861b39ee05c4ad394e20d64aa5e76d85f6.roa
Signing time: Mon 10 May 2021 19:40:52 +0000
ROA not before: Mon 10 May 2021 03:00:00 +0000
ROA not after: Sat 10 May 2025 03:00:00 +0000
asID: 269872
IP address blocks: 45.189.200.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 727917 (0xb1b6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a03a3f69e9a44aa1629814aa223324e0a63fa3f2
Validity
Not Before: May 10 03:00:00 2021 GMT
Not After : May 10 03:00:00 2025 GMT
Subject: CN=cb3018861b39ee05c4ad394e20d64aa5e76d85f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d6:d6:f9:64:4e:95:5c:e0:b1:fb:9d:df:b1:
1b:ae:49:fc:ed:56:f4:28:25:64:7e:5c:55:e9:86:
f5:a2:58:05:a7:30:2b:aa:a7:49:89:4d:1b:c8:53:
4f:20:b6:94:7f:2d:5b:64:56:09:48:e9:5d:93:92:
1c:23:26:75:3b:d5:55:d6:86:cd:21:12:52:59:e6:
40:3a:55:46:60:28:56:6a:b1:a2:b8:22:df:ba:ee:
f6:c0:b2:d6:90:47:25:24:0b:22:2d:f4:5e:24:7a:
b6:41:33:df:79:30:3b:4c:9b:57:ea:26:cc:1a:92:
af:e9:81:41:7c:89:b2:5f:dd:d0:bd:a7:08:4b:86:
53:8e:3d:ec:1d:78:3b:0a:42:3f:c5:7a:43:8c:c1:
04:e8:d2:f5:63:7e:c4:f6:6c:cb:c9:19:fe:83:ee:
78:cd:92:52:01:a5:58:ed:68:f0:9d:91:24:2d:0e:
e1:d9:62:5c:5c:87:ae:b6:f2:cd:72:20:0b:12:54:
79:0e:2b:42:72:1f:c2:99:ca:ed:f5:82:9c:bc:6e:
59:fe:86:7c:e0:be:a9:50:7f:9b:d5:35:2c:e4:07:
ab:13:eb:d9:00:e0:c9:ef:d5:06:aa:4b:c2:45:9b:
3f:b3:ca:79:cb:cc:58:e5:0b:aa:30:c1:9c:80:55:
86:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E7:08:E4:BE:22:58:E3:A8:86:87:5A:0A:4C:3E:F6:AC:BE:5B:C1
X509v3 Authority Key Identifier:
keyid:23:E7:1C:BF:F6:FD:08:B5:80:81:63:5B:3F:5E:32:59:00:39:DC:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a03a3f69e9a44aa1629814aa223324e0a63fa3f2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7912fc9c-086c-458e-a97b-4ad15c52bc5b/cb3018861b39ee05c4ad394e20d64aa5e76d85f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7912fc9c-086c-458e-a97b-4ad15c52bc5b/a03a3f69e9a44aa1629814aa223324e0a63fa3f2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.189.200.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:e0:b3:bd:94:66:f0:2b:f1:98:7c:83:83:ed:97:81:5a:b0:
a5:82:0a:b4:27:bc:d1:32:38:0b:8a:2d:a7:b5:aa:19:45:22:
ad:dd:0c:25:20:27:8c:11:5c:c5:09:1d:d6:0e:3b:91:f6:4b:
d4:a7:5e:0e:8e:89:ac:aa:3c:a3:e2:c8:2e:18:13:29:d4:f8:
3a:55:9c:1e:d9:d6:a9:36:e6:40:79:f8:2a:e8:ed:1a:61:a3:
00:e8:db:1c:78:2c:b6:41:da:5d:4c:ac:9f:83:9d:c4:33:ae:
da:4c:4b:4e:ad:35:d9:26:24:ce:2b:5f:b5:a4:b4:65:f4:d9:
9f:23:2d:88:a8:5f:22:c6:a6:85:01:d5:7d:46:21:ba:7c:4c:
f4:d8:84:dc:61:64:f3:09:58:39:92:f7:28:dd:39:8e:dc:a4:
61:cf:60:80:fb:16:04:5c:91:02:81:e5:d6:29:cc:29:10:ad:
ac:5a:18:71:59:19:ef:3e:da:6e:48:a0:57:91:d8:55:4b:c0:
89:0e:1e:8b:ad:f9:bf:8d:62:73:c7:b1:23:3a:79:21:6b:68:
d4:25:f9:15:0e:13:ed:fd:ab:b8:f1:c9:30:cd:c0:58:99:f8:
3f:d9:94:17:49:8e:0b:03:45:5f:c1:db:8b:51:5a:c3:96:3e:
c0:25:a1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 12 22:22:32 2023 by rpki-client on console-ams.rpki-client.org