Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/34352e3232342e3130342e302f32342d3234203d3e20323635383438.roa
File: 34352e3232342e3130342e302f32342d3234203d3e20323635383438.roa (raw, json)
Hash identifier: 49FKip+cYcL9z4wtpDgqpkQijhGnJFmP0KxcKQDC3Ds=
Subject key identifier: 1E:4F:CF:75:BF:6B:9F:CC:01:A9:77:94:5F:11:E5:39:D1:33:74:DF
Certificate issuer: /CN=28A7D53BAC53105CA8A0B3A1C95C2E6A71981653
Certificate serial: 73EC89F88BCBE4D6AD02C9C73FA96EC70B6BF94C
Authority key identifier: 28:A7:D5:3B:AC:53:10:5C:A8:A0:B3:A1:C9:5C:2E:6A:71:98:16:53
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/34352e3232342e3130342e302f32342d3234203d3e20323635383438.roa
Signing time: Tue 05 Mar 2024 17:53:51 +0000
ROA not before: Tue 05 Mar 2024 17:48:51 +0000
ROA not after: Tue 04 Mar 2025 17:53:51 +0000
asID: 265848
IP address blocks: 45.224.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Apr 2024 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:ec:89:f8:8b:cb:e4:d6:ad:02:c9:c7:3f:a9:6e:c7:0b:6b:f9:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28A7D53BAC53105CA8A0B3A1C95C2E6A71981653
Validity
Not Before: Mar 5 17:48:51 2024 GMT
Not After : Mar 4 17:53:51 2025 GMT
Subject: CN=1E4FCF75BF6B9FCC01A977945F11E539D13374DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:63:c1:82:f5:ff:c4:29:e0:d1:d3:ff:87:61:
f8:54:62:35:74:b9:da:55:5c:e9:2e:91:b4:eb:43:
0a:c4:d3:c6:49:49:8f:12:ef:59:b6:0b:02:71:94:
1d:0e:f3:cb:eb:6c:49:aa:7f:60:67:ed:da:6b:a9:
27:f6:31:29:73:4e:68:3d:79:bc:31:17:ca:c8:f6:
cb:fe:2e:3e:17:45:bd:56:d1:70:8c:ee:f1:0e:28:
87:39:15:99:28:f2:d1:71:7c:44:c9:2b:51:fd:39:
86:a1:33:7d:1a:45:4a:40:c3:40:d3:bf:39:31:8e:
a5:f3:ed:21:c7:4d:57:38:89:2d:1b:2f:fb:44:58:
1b:66:0a:8b:dd:cf:43:72:7a:58:12:32:66:26:8a:
8e:e7:15:b6:5f:cf:56:0a:2a:15:25:eb:e2:36:fe:
f2:f7:32:44:ae:84:2e:9b:eb:17:c4:7b:b2:37:14:
83:bc:e2:b2:7d:5f:78:1e:19:45:a0:81:9a:10:31:
53:7b:c5:49:32:ea:57:cc:d8:6f:dd:93:a5:ea:e6:
6c:e2:32:27:12:81:0c:6f:98:7f:ac:c4:31:9b:cb:
7f:31:ac:5f:b5:81:b6:fc:49:60:0c:87:5c:6b:a9:
89:0f:10:a1:c1:a9:46:c0:1c:72:47:04:21:d2:61:
60:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:4F:CF:75:BF:6B:9F:CC:01:A9:77:94:5F:11:E5:39:D1:33:74:DF
X509v3 Authority Key Identifier:
keyid:28:A7:D5:3B:AC:53:10:5C:A8:A0:B3:A1:C9:5C:2E:6A:71:98:16:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/34352e3232342e3130342e302f32342d3234203d3e20323635383438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.224.104.0/24
Signature Algorithm: sha256WithRSAEncryption
08:64:3b:cb:ea:35:c3:e7:e2:a3:69:29:da:4f:87:8f:a7:30:
bb:4e:d1:18:28:7d:90:c5:56:02:dd:cb:ef:10:1b:c4:36:df:
4c:b0:41:c7:b7:cf:22:ca:2b:d4:34:51:0d:8b:dd:0c:62:7b:
43:5f:c0:ff:0d:53:5e:a5:44:e8:8f:f1:56:32:f1:c5:1e:42:
6d:ac:2d:69:43:bd:a4:a4:ed:66:f4:a5:b1:e7:70:5a:f8:ca:
0d:c2:3e:b6:98:f8:6d:85:ec:8f:06:94:39:76:6b:f2:41:6f:
0a:44:f4:94:f2:ea:e3:f5:f7:7d:03:6c:3c:40:5a:0b:93:48:
af:ba:07:4f:4f:45:fe:05:63:5b:d5:98:ff:47:b2:b7:43:b9:
08:cb:61:84:6e:f1:67:e0:23:8d:91:62:8c:5f:55:a3:75:ad:
b3:d5:69:9d:b9:26:f3:1c:bc:11:6c:fd:95:12:2b:bd:3e:68:
af:44:25:be:3a:f0:14:88:fa:90:0d:76:18:d2:d4:9d:08:02:
67:22:1d:a7:1f:dc:98:cd:04:81:4f:25:d6:60:0d:7e:d0:c1:
a4:4e:c2:6b:f9:99:e9:28:1d:e9:7b:11:dc:39:e1:b6:cf:6e:
dc:17:d3:eb:f1:31:df:f0:d0:12:ce:a3:e4:46:c9:bb:c3:a2:
61:94:ef:10
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUc+yJ+IvL5NatAsnHP6luxwtr+UwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhBN0Q1M0JBQzUzMTA1Q0E4QTBCM0ExQzk1QzJFNkE3
MTk4MTY1MzAeFw0yNDAzMDUxNzQ4NTFaFw0yNTAzMDQxNzUzNTFaMDMxMTAvBgNV
BAMTKDFFNEZDRjc1QkY2QjlGQ0MwMUE5Nzc5NDVGMTFFNTM5RDEzMzc0REYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Y8GC9f/EKeDR0/+HYfhUYjV0
udpVXOkukbTrQwrE08ZJSY8S71m2CwJxlB0O88vrbEmqf2Bn7dprqSf2MSlzTmg9
ebwxF8rI9sv+Lj4XRb1W0XCM7vEOKIc5FZko8tFxfETJK1H9OYahM30aRUpAw0DT
vzkxjqXz7SHHTVc4iS0bL/tEWBtmCovdz0NyelgSMmYmio7nFbZfz1YKKhUl6+I2
/vL3MkSuhC6b6xfEe7I3FIO84rJ9X3geGUWggZoQMVN7xUky6lfM2G/dk6Xq5mzi
MicSgQxvmH+sxDGby38xrF+1gbb8SWAMh1xrqYkPEKHBqUbAHHJHBCHSYWDHAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUHk/Pdb9rn8wBqXeUXxHlOdEzdN8wHwYDVR0j
BBgwFoAUKKfVO6xTEFyooLOhyVwuanGYFlMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RDNDMkZFODI1MzZFNkI5NTQwOUNDMDQ0ODlEM0YwNURF
MjA3NDUwNTgwREMwNDMwOTI1NDc5RUUxQzczNzg1LzAvMjhBN0Q1M0JBQzUzMTA1
Q0E4QTBCM0ExQzk1QzJFNkE3MTk4MTY1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOEE3RDUzQkFDNTMxMDVDQThB
MEIzQTFDOTVDMkU2QTcxOTgxNjUzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0QzQzJGRTgyNTM2RTZCOTU0MDlDQzA0NDg5RDNGMDVERTIwNzQ1MDU4
MERDMDQzMDkyNTQ3OUVFMUM3Mzc4NS8wLzM0MzUyZTMyMzIzNDJlMzEzMDM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1MzgzNDM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALeBo
MA0GCSqGSIb3DQEBCwUAA4IBAQAIZDvL6jXD5+KjaSnaT4ePpzC7TtEYKH2QxVYC
3cvvEBvENt9MsEHHt88iyivUNFENi90MYntDX8D/DVNepUToj/FWMvHFHkJtrC1p
Q72kpO1m9KWx53Ba+MoNwj62mPhtheyPBpQ5dmvyQW8KRPSU8urj9fd9A2w8QFoL
k0ivugdPT0X+BWNb1Zj/R7K3Q7kIy2GEbvFn4CONkWKMX1Wjda2z1WmduSbzHLwR
bP2VEiu9PmivRCW+OvAUiPqQDXYY0tSdCAJnIh2nH9yYzQSBTyXWYA1+0MGkTsJr
+ZnpKB3pexHcOeG2z27cF9Pr8THf8NASzqPkRsm7w6JhlO8Q
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:02 2024 by rpki-client on console-ams.rpki-client.org