Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7dd5ae62-24ad-4276-be5c-e5410b1d42d2/7ddbdc98408c00965ba9009eb33f01b3f88ed819.roa
File: 7ddbdc98408c00965ba9009eb33f01b3f88ed819.roa (raw, json)
Hash identifier: 9InMCvFiawnuwrq6oguhRFTGAgfGOYGJGGjtSTOtti8=
Subject key identifier: 6B:F8:C4:4B:D5:FC:0E:31:0F:AC:2C:5C:70:68:3F:67:47:FB:E5:8A
Certificate issuer: /CN=363d27b2e0e1ef390647383d7ba029d58848034b
Certificate serial: 0CD14D
Authority key identifier: C3:6E:4D:A2:77:1D:D4:FE:C0:0B:E6:E9:78:C2:1D:B4:0C:6B:97:BA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/363d27b2e0e1ef390647383d7ba029d58848034b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7dd5ae62-24ad-4276-be5c-e5410b1d42d2/7ddbdc98408c00965ba9009eb33f01b3f88ed819.roa
Signing time: Wed 24 Mar 2021 14:41:05 +0000
ROA not before: Wed 24 Mar 2021 14:41:05 +0000
ROA not after: Tue 24 Mar 2026 14:41:05 +0000
asID: 264825
IP address blocks: 45.230.240.0/24 maxlen: 24
45.230.241.0/24 maxlen: 24
45.230.242.0/24 maxlen: 24
45.230.243.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 840013 (0xcd14d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363d27b2e0e1ef390647383d7ba029d58848034b
Validity
Not Before: Mar 24 14:41:05 2021 GMT
Not After : Mar 24 14:41:05 2026 GMT
Subject: CN=7ddbdc98408c00965ba9009eb33f01b3f88ed819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:50:51:a9:f7:10:1c:40:b4:cb:cc:9f:e5:d9:
0c:0f:3c:7f:23:b4:7a:cd:5a:13:b2:bc:68:fe:dd:
5f:02:b0:1f:62:66:72:3a:94:f3:04:86:1a:63:a3:
01:7e:fd:1a:f4:82:21:3f:c5:c6:11:f3:05:e2:b9:
99:3c:1e:29:86:22:b4:b4:2a:3c:e9:57:c3:ce:9e:
d9:ff:b7:ce:24:e5:8c:07:96:c8:4a:f0:da:db:c6:
6b:09:28:6c:16:05:92:77:de:ff:2e:2a:53:2a:04:
dc:bd:af:e0:73:01:2f:b2:9f:aa:e3:9e:50:5e:dc:
c9:83:74:22:ce:2a:26:94:18:4e:60:da:76:f8:b3:
fe:5e:11:7b:c6:56:da:04:e4:f0:56:c3:64:c1:05:
4c:65:f1:ec:77:c5:ce:f6:f9:cb:e5:81:36:01:10:
e6:9f:19:c4:59:6c:2c:1e:88:63:9d:8b:37:67:cb:
45:d8:1d:5e:3d:e0:28:6a:d2:1a:e3:c2:c8:f0:db:
a1:44:96:64:ec:e1:3e:e9:49:86:8b:6a:ed:f8:30:
21:1b:e2:69:1d:6f:59:a5:8e:27:e4:c0:88:87:34:
62:64:2b:c6:e6:8c:8b:5d:2e:09:31:bb:72:5f:2a:
1d:cd:5b:83:60:3b:8f:ba:0d:95:2b:51:de:90:a5:
5a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F8:C4:4B:D5:FC:0E:31:0F:AC:2C:5C:70:68:3F:67:47:FB:E5:8A
X509v3 Authority Key Identifier:
keyid:C3:6E:4D:A2:77:1D:D4:FE:C0:0B:E6:E9:78:C2:1D:B4:0C:6B:97:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/363d27b2e0e1ef390647383d7ba029d58848034b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7dd5ae62-24ad-4276-be5c-e5410b1d42d2/7ddbdc98408c00965ba9009eb33f01b3f88ed819.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7dd5ae62-24ad-4276-be5c-e5410b1d42d2/363d27b2e0e1ef390647383d7ba029d58848034b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.230.240.0/22
Signature Algorithm: sha256WithRSAEncryption
61:56:7e:1b:17:f7:e6:e3:a2:ba:aa:40:10:30:13:8a:2b:e6:
09:5d:a8:64:18:de:65:f9:03:11:e4:68:13:b8:55:77:35:ac:
d6:b1:57:ed:63:3c:dd:19:68:6e:9c:d8:43:87:bd:f9:c8:c4:
78:27:43:00:30:e3:ef:32:86:00:12:8c:73:04:e7:62:cd:22:
5e:6b:94:b1:ad:54:a9:39:2b:79:d2:a0:12:b6:a3:49:9a:ec:
32:89:e3:b8:e6:c6:c6:2e:89:59:4a:e8:6c:db:b6:e7:58:0f:
97:fe:aa:35:ce:f5:c3:86:d0:cd:f4:4a:d9:ef:5c:2b:d5:6a:
aa:3b:b6:74:8e:1e:c1:f2:e0:da:7d:80:cb:19:92:96:f5:09:
62:b8:5f:f1:3a:cf:b6:b1:15:2d:ee:3e:a9:11:98:d1:25:34:
e1:09:af:f1:94:c2:8b:c1:00:89:11:cf:1f:73:96:57:d9:91:
77:29:dc:d2:4f:e1:79:70:de:3f:07:4e:b6:c9:ad:59:f5:cf:
35:ea:40:a9:bb:d5:36:ea:a4:f9:b5:92:7b:97:95:1c:b6:a9:
4e:10:92:2b:a9:26:a5:52:81:f8:b5:0a:97:d6:7d:14:98:99:
76:5c:e0:65:44:ec:97:b0:2e:82:37:90:2f:9b:29:0f:5f:f1:
b6:52:44:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:25 2023 by rpki-client on console-fra.rpki-client.org