Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/34352e3232342e3130362e302f32342d3234203d3e20323635383438.roa
File: 34352e3232342e3130362e302f32342d3234203d3e20323635383438.roa (raw, json)
Hash identifier: 5VYCvopEmVZ/SXFwUx7t/PIaH2yjkPFU81veKH2KN7s=
Subject key identifier: 3A:95:81:E9:4A:66:CE:FC:A2:22:1B:FC:57:42:72:6A:4E:78:C0:39
Certificate issuer: /CN=28A7D53BAC53105CA8A0B3A1C95C2E6A71981653
Certificate serial: 73A76ED11718172953F63D234154F6F77B741301
Authority key identifier: 28:A7:D5:3B:AC:53:10:5C:A8:A0:B3:A1:C9:5C:2E:6A:71:98:16:53
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/34352e3232342e3130362e302f32342d3234203d3e20323635383438.roa
Signing time: Tue 05 Mar 2024 17:53:51 +0000
ROA not before: Tue 05 Mar 2024 17:48:51 +0000
ROA not after: Tue 04 Mar 2025 17:53:51 +0000
asID: 265848
IP address blocks: 45.224.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Apr 2024 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:a7:6e:d1:17:18:17:29:53:f6:3d:23:41:54:f6:f7:7b:74:13:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28A7D53BAC53105CA8A0B3A1C95C2E6A71981653
Validity
Not Before: Mar 5 17:48:51 2024 GMT
Not After : Mar 4 17:53:51 2025 GMT
Subject: CN=3A9581E94A66CEFCA2221BFC5742726A4E78C039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d3:22:aa:7e:15:20:39:01:62:f3:b4:65:7a:
83:8f:b9:51:40:8c:aa:a0:44:8b:2a:a2:d1:b0:f8:
72:22:a5:99:ce:d5:84:5e:64:22:aa:9c:83:e8:c2:
f3:cb:f7:92:d2:b0:e4:2b:2e:e5:26:d9:24:c4:ce:
cb:18:4a:da:06:89:e3:f0:0c:af:b9:37:36:fb:b8:
f8:cc:32:1c:a2:8b:a9:1b:af:c3:3a:93:9a:8c:af:
ed:47:da:fd:d0:7e:e8:d9:e5:d5:6f:1e:99:a6:1a:
cc:6a:17:5e:ae:82:72:6e:f5:06:68:9e:d3:ed:9a:
44:94:2a:fc:95:a2:53:18:ba:4b:75:62:6a:be:4d:
d9:52:9b:f2:53:5f:a9:7f:54:a2:e4:cd:9b:c6:43:
02:36:c0:d1:b8:8d:f5:9c:c3:14:0c:b9:1f:a7:19:
6a:cb:f8:8a:41:8c:c9:e2:61:de:8d:93:f8:64:4d:
ce:34:12:9c:e5:5b:6b:0c:f5:49:52:b6:e0:fb:bf:
25:c4:35:ec:e5:63:23:98:c5:7f:64:ee:cd:ea:68:
50:78:42:e5:ee:95:6c:ea:17:54:9e:71:a5:df:77:
56:0e:12:a2:c8:88:31:0c:5c:65:ba:29:2a:ba:89:
aa:07:26:b5:cd:4d:cb:7c:1a:66:a9:c2:0c:2c:47:
46:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:95:81:E9:4A:66:CE:FC:A2:22:1B:FC:57:42:72:6A:4E:78:C0:39
X509v3 Authority Key Identifier:
keyid:28:A7:D5:3B:AC:53:10:5C:A8:A0:B3:A1:C9:5C:2E:6A:71:98:16:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/34352e3232342e3130362e302f32342d3234203d3e20323635383438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.224.106.0/24
Signature Algorithm: sha256WithRSAEncryption
97:b3:f6:47:d2:3a:2a:d6:a9:b0:0d:5e:e5:c5:53:36:f6:d0:
55:01:85:48:09:fb:74:74:4c:da:11:49:6c:2c:45:76:43:63:
a7:87:a5:8c:25:ec:43:2d:06:be:87:2a:44:56:4b:96:bd:48:
af:25:66:5a:a8:7f:f2:03:01:ff:35:b5:e9:3f:33:86:42:a7:
50:c2:2b:2d:c1:54:1e:e2:37:89:a7:13:40:2d:a8:f6:34:a0:
2e:e2:d8:57:10:db:35:7b:94:77:fe:52:b6:3b:8f:5f:03:a7:
7e:8f:b7:b5:cf:f2:28:82:1e:a6:10:94:53:c8:29:47:a1:0d:
eb:b6:3d:b3:49:27:90:e5:bd:21:db:95:31:e9:7d:c5:08:42:
61:d1:31:cd:d9:ac:f3:cf:fb:f1:1a:f4:5e:10:9a:6a:37:28:
38:00:47:47:25:06:cc:d1:4b:8d:2d:eb:8b:c9:8d:cf:0e:5b:
66:76:7a:de:ac:83:b9:7e:bb:b3:8b:95:b0:f0:bb:d8:e2:4d:
7c:5f:52:38:ce:d2:e9:ff:e6:cc:80:4f:3c:5d:e6:3d:85:4c:
8f:a0:95:d6:e0:b2:2f:46:81:12:a0:57:9a:e4:c6:79:30:42:
17:ff:7e:ca:f7:17:85:1d:ff:af:8c:93:b0:4f:f1:98:3b:9d:
14:55:16:8a
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUc6du0RcYFylT9j0jQVT293t0EwEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhBN0Q1M0JBQzUzMTA1Q0E4QTBCM0ExQzk1QzJFNkE3
MTk4MTY1MzAeFw0yNDAzMDUxNzQ4NTFaFw0yNTAzMDQxNzUzNTFaMDMxMTAvBgNV
BAMTKDNBOTU4MUU5NEE2NkNFRkNBMjIyMUJGQzU3NDI3MjZBNEU3OEMwMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP0yKqfhUgOQFi87RleoOPuVFA
jKqgRIsqotGw+HIipZnO1YReZCKqnIPowvPL95LSsOQrLuUm2STEzssYStoGiePw
DK+5Nzb7uPjMMhyii6kbr8M6k5qMr+1H2v3QfujZ5dVvHpmmGsxqF16ugnJu9QZo
ntPtmkSUKvyVolMYukt1Ymq+TdlSm/JTX6l/VKLkzZvGQwI2wNG4jfWcwxQMuR+n
GWrL+IpBjMniYd6Nk/hkTc40EpzlW2sM9UlStuD7vyXENezlYyOYxX9k7s3qaFB4
QuXulWzqF1SecaXfd1YOEqLIiDEMXGW6KSq6iaoHJrXNTct8GmapwgwsR0b3AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUOpWB6UpmzvyiIhv8V0Jyak54wDkwHwYDVR0j
BBgwFoAUKKfVO6xTEFyooLOhyVwuanGYFlMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RDNDMkZFODI1MzZFNkI5NTQwOUNDMDQ0ODlEM0YwNURF
MjA3NDUwNTgwREMwNDMwOTI1NDc5RUUxQzczNzg1LzAvMjhBN0Q1M0JBQzUzMTA1
Q0E4QTBCM0ExQzk1QzJFNkE3MTk4MTY1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOEE3RDUzQkFDNTMxMDVDQThB
MEIzQTFDOTVDMkU2QTcxOTgxNjUzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0QzQzJGRTgyNTM2RTZCOTU0MDlDQzA0NDg5RDNGMDVERTIwNzQ1MDU4
MERDMDQzMDkyNTQ3OUVFMUM3Mzc4NS8wLzM0MzUyZTMyMzIzNDJlMzEzMDM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1MzgzNDM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALeBq
MA0GCSqGSIb3DQEBCwUAA4IBAQCXs/ZH0joq1qmwDV7lxVM29tBVAYVICft0dEza
EUlsLEV2Q2Onh6WMJexDLQa+hypEVkuWvUivJWZaqH/yAwH/NbXpPzOGQqdQwist
wVQe4jeJpxNALaj2NKAu4thXENs1e5R3/lK2O49fA6d+j7e1z/Iogh6mEJRTyClH
oQ3rtj2zSSeQ5b0h25Ux6X3FCEJh0THN2azzz/vxGvReEJpqNyg4AEdHJQbM0UuN
LeuLyY3PDltmdnrerIO5fruzi5Ww8LvY4k18X1I4ztLp/+bMgE88XeY9hUyPoJXW
4LIvRoESoFea5MZ5MEIX/37K9xeFHf+vjJOwT/GYO50UVRaK
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:02 2024 by rpki-client on console-ams.rpki-client.org