Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7dd5ae62-24ad-4276-be5c-e5410b1d42d2/3ab2e821280ebf69e7ea6def192da59feb1344ce.roa
File: 3ab2e821280ebf69e7ea6def192da59feb1344ce.roa (raw, json)
Hash identifier: WiGAR58+tLtQy/noBwIDt8X2Ennohycz5QwX7RKFJWQ=
Subject key identifier: 45:50:10:FF:5A:FD:69:40:87:16:06:C4:91:30:D1:1B:D4:85:30:5E
Certificate issuer: /CN=363d27b2e0e1ef390647383d7ba029d58848034b
Certificate serial: 0CD483
Authority key identifier: C3:6E:4D:A2:77:1D:D4:FE:C0:0B:E6:E9:78:C2:1D:B4:0C:6B:97:BA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/363d27b2e0e1ef390647383d7ba029d58848034b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7dd5ae62-24ad-4276-be5c-e5410b1d42d2/3ab2e821280ebf69e7ea6def192da59feb1344ce.roa
Signing time: Wed 24 Mar 2021 14:41:05 +0000
ROA not before: Wed 24 Mar 2021 14:41:05 +0000
ROA not after: Tue 24 Mar 2026 14:41:05 +0000
asID: 264825
IP address blocks: 45.230.240.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 840835 (0xcd483)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363d27b2e0e1ef390647383d7ba029d58848034b
Validity
Not Before: Mar 24 14:41:05 2021 GMT
Not After : Mar 24 14:41:05 2026 GMT
Subject: CN=3ab2e821280ebf69e7ea6def192da59feb1344ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d0:94:47:16:24:ac:91:00:d0:ab:a8:6a:30:
d8:fc:cd:eb:a4:90:1c:65:88:68:e2:d6:d3:d7:82:
1f:c5:58:16:91:c3:98:fa:f1:c5:47:74:39:53:e1:
24:03:29:ca:5a:a4:df:e5:a6:66:74:bc:13:f1:62:
62:7a:79:73:dd:f3:b0:17:f8:ef:c7:9d:09:e6:2d:
c7:9f:a5:e9:c8:bc:57:f0:e3:e7:9a:f5:fc:2e:00:
26:3c:51:24:fc:d9:ba:42:d4:47:cb:e9:33:00:82:
e4:89:ea:3e:48:b7:81:4c:00:91:a2:e3:c2:9b:4e:
36:69:f0:37:26:bf:12:02:cb:04:ad:d5:38:06:44:
f5:93:b6:fe:ab:1d:0a:fc:16:1f:61:16:c8:6a:31:
f7:9f:bf:bf:78:c2:d0:1d:27:58:45:dd:99:a8:49:
18:4d:9d:f6:85:3e:e1:1a:98:60:ec:d5:69:31:c7:
75:39:fd:fd:97:13:89:e3:0f:cb:ae:c3:b3:82:be:
c7:9e:dc:c3:05:20:67:05:2c:4f:cb:a2:d4:ec:65:
5c:34:39:c6:7d:83:ac:b1:62:4e:38:78:06:62:09:
52:d9:75:54:9b:f6:39:27:c4:73:d7:5b:19:93:4c:
52:0b:6d:93:74:f4:d7:9a:9e:4e:08:ac:c1:fb:7d:
c9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:50:10:FF:5A:FD:69:40:87:16:06:C4:91:30:D1:1B:D4:85:30:5E
X509v3 Authority Key Identifier:
keyid:C3:6E:4D:A2:77:1D:D4:FE:C0:0B:E6:E9:78:C2:1D:B4:0C:6B:97:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/363d27b2e0e1ef390647383d7ba029d58848034b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7dd5ae62-24ad-4276-be5c-e5410b1d42d2/3ab2e821280ebf69e7ea6def192da59feb1344ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7dd5ae62-24ad-4276-be5c-e5410b1d42d2/363d27b2e0e1ef390647383d7ba029d58848034b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.230.240.0/22
Signature Algorithm: sha256WithRSAEncryption
26:c9:f8:0c:ec:27:15:ec:90:3d:9b:2a:52:fd:26:d0:ae:96:
d0:eb:21:c7:20:74:c2:98:6c:88:4f:54:46:58:1b:b4:c5:03:
20:dc:3a:4d:35:a7:4c:b3:1f:f4:51:6c:46:ac:1d:38:de:ce:
05:14:54:d4:c1:7d:a4:bf:ab:27:3c:27:66:56:4d:f6:29:63:
c8:4b:87:ff:36:c2:6c:3c:d6:4f:e0:0f:bd:7f:33:88:d0:60:
ec:63:b0:1c:ee:56:29:bb:d5:7e:a4:8c:eb:ef:25:61:ba:d3:
e6:bb:22:ec:4d:5c:0b:25:d1:38:90:77:d1:4c:81:88:44:7e:
33:02:f5:a1:fd:c5:85:6a:dd:c6:0c:f3:70:2f:93:a4:3a:72:
7d:42:83:05:1e:37:72:05:03:f0:4f:c8:6e:21:e0:62:a4:06:
67:18:8e:79:24:a8:af:e5:96:c8:c9:15:f5:0c:88:6d:3e:b9:
e6:73:f1:4e:0b:cb:de:08:84:99:ca:23:43:1c:e4:d2:ef:9a:
67:3e:26:af:9f:14:bc:dc:9c:ae:d0:b0:8f:5b:cd:ca:85:3b:
0b:f7:4b:19:82:91:27:21:0f:87:74:86:75:c8:1e:58:e0:e7:
cb:10:bf:73:2a:14:fd:d3:40:e6:18:b7:62:c2:66:45:00:ac:
94:13:ae:9a
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDNSDMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDM2
M2QyN2IyZTBlMWVmMzkwNjQ3MzgzZDdiYTAyOWQ1ODg0ODAzNGIwHhcNMjEwMzI0
MTQ0MTA1WhcNMjYwMzI0MTQ0MTA1WjAzMTEwLwYDVQQDEygzYWIyZTgyMTI4MGVi
ZjY5ZTdlYTZkZWYxOTJkYTU5ZmViMTM0NGNlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAstCURxYkrJEA0KuoajDY/M3rpJAcZYho4tbT14IfxVgWkcOY
+vHFR3Q5U+EkAynKWqTf5aZmdLwT8WJienlz3fOwF/jvx50J5i3Hn6XpyLxX8OPn
mvX8LgAmPFEk/Nm6QtRHy+kzAILkieo+SLeBTACRouPCm042afA3Jr8SAssErdU4
BkT1k7b+qx0K/BYfYRbIajH3n7+/eMLQHSdYRd2ZqEkYTZ32hT7hGphg7NVpMcd1
Of39lxOJ4w/LrsOzgr7HntzDBSBnBSxPy6LU7GVcNDnGfYOssWJOOHgGYglS2XVU
m/Y5J8Rz11sZk0xSC22TdPTXmp5OCKzB+33JzQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFEVQEP9a/WlAhxYGxJEw0RvUhTBeMB8GA1UdIwQYMBaAFMNuTaJ3HdT+wAvm
6XjCHbQMa5e6MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzYzZDI3
YjJlMGUxZWYzOTA2NDczODNkN2JhMDI5ZDU4ODQ4MDM0Yi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvN2RkNWFlNjItMjRhZC00Mjc2LWJlNWMtZTU0MTBi
MWQ0MmQyLzNhYjJlODIxMjgwZWJmNjllN2VhNmRlZjE5MmRhNTlmZWIxMzQ0Y2Uu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83ZGQ1YWU2Mi0yNGFkLTQyNzYtYmU1Yy1lNTQx
MGIxZDQyZDIvMzYzZDI3YjJlMGUxZWYzOTA2NDczODNkN2JhMDI5ZDU4ODQ4MDM0
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi3m8DANBgkqhkiG9w0BAQsFAAOCAQEAJsn4DOwnFeyQPZsq
Uv0m0K6W0OshxyB0wphsiE9URlgbtMUDINw6TTWnTLMf9FFsRqwdON7OBRRU1MF9
pL+rJzwnZlZN9iljyEuH/zbCbDzWT+APvX8ziNBg7GOwHO5WKbvVfqSM6+8lYbrT
5rsi7E1cCyXROJB30UyBiER+MwL1of3FhWrdxgzzcC+TpDpyfUKDBR43cgUD8E/I
biHgYqQGZxiOeSSor+WWyMkV9QyIbT655nPxTgvL3giEmcojQxzk0u+aZz4mr58U
vNycrtCwj1vNyoU7C/dLGYKRJyEPh3SGdcgeWODnyxC/cyoU/dNA5hi3YsJmRQCs
lBOumg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:40 2023 by rpki-client on console-ams.rpki-client.org