Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/22a52ecd4b418e3fd1d5c7914f37cb72b54cd6b1.roa
File: 22a52ecd4b418e3fd1d5c7914f37cb72b54cd6b1.roa (raw, json)
Hash identifier: yPL64i38WTAWGiDmt0cVb/vW/KfPVmu8zC9KKHphRnY=
Subject key identifier: 69:00:68:BE:8B:17:31:A2:75:80:B7:D6:2B:CE:31:D8:60:CD:0B:DE
Certificate issuer: /CN=464aaf9d70c216551b1b619bc4c8573c3b3e1b52
Certificate serial: 142825
Authority key identifier: 84:A6:F0:56:F6:32:74:33:FF:4F:DC:50:D9:F3:B2:D8:C5:CF:FE:9B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/22a52ecd4b418e3fd1d5c7914f37cb72b54cd6b1.roa
Signing time: Sun 14 Jan 2024 07:30:04 +0000
ROA not before: Sun 14 Jan 2024 07:30:04 +0000
ROA not after: Tue 13 Jan 2026 07:30:04 +0000
asID: 26506
IP address blocks: 45.227.89.0/24 maxlen: 24
2801:114:7::/48 maxlen: 48
2801:114:8::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 02 Feb 2024 03:20:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1320997 (0x142825)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464aaf9d70c216551b1b619bc4c8573c3b3e1b52
Validity
Not Before: Jan 14 07:30:04 2024 GMT
Not After : Jan 13 07:30:04 2026 GMT
Subject: CN=22a52ecd4b418e3fd1d5c7914f37cb72b54cd6b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4c:fa:62:c5:42:d2:6e:46:3c:96:05:22:32:
9c:7c:12:06:e7:87:74:70:07:52:e0:f1:81:ba:43:
88:7f:2f:34:e2:7e:8a:4b:85:1b:26:bd:54:e7:db:
af:e2:dd:3c:93:44:d7:56:d8:af:29:f1:88:d5:fe:
92:1d:2f:1f:2f:03:de:ac:6b:e7:80:92:55:69:31:
f2:69:bc:d7:f0:36:c6:66:9f:91:75:f9:eb:d2:30:
fe:e4:55:25:09:66:43:98:f6:22:c6:b1:d2:d5:e6:
aa:24:1c:bc:7f:0b:49:06:ad:27:02:f3:b9:4e:4a:
a1:97:3f:80:73:d6:85:86:ae:02:d1:9c:28:d8:5d:
1d:bf:9f:88:48:8e:f0:f9:5d:0a:1b:44:f8:6d:aa:
9a:a8:1e:dc:b3:3a:8e:cb:eb:fd:f1:7f:04:5f:4a:
d8:f4:1d:eb:7f:5b:a2:5f:a5:da:36:fd:90:f3:57:
49:b5:a2:a8:37:eb:37:e8:ed:cc:63:74:8c:c7:c9:
59:29:06:6e:19:75:de:fe:70:22:1d:0b:a8:5d:d5:
86:ff:18:a2:57:34:d6:42:53:76:bd:9e:32:b8:7c:
fb:37:2c:10:a4:f9:74:92:71:14:d9:2a:b0:6f:4b:
d2:dd:c6:78:43:29:b3:9d:94:db:b7:26:e4:9e:c5:
4c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:00:68:BE:8B:17:31:A2:75:80:B7:D6:2B:CE:31:D8:60:CD:0B:DE
X509v3 Authority Key Identifier:
keyid:84:A6:F0:56:F6:32:74:33:FF:4F:DC:50:D9:F3:B2:D8:C5:CF:FE:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/22a52ecd4b418e3fd1d5c7914f37cb72b54cd6b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.227.89.0/24
IPv6:
2801:114:7::-2801:114:8:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1d:60:3b:fc:14:f5:4a:4d:74:86:0b:7f:fd:91:de:44:fa:4b:
f9:57:4b:42:88:0a:46:cb:a4:94:7e:9a:ae:3b:c6:f3:f3:10:
68:4a:6e:90:c9:42:12:b7:e3:6c:b8:0c:ae:c0:e8:6b:72:67:
93:dd:06:70:bb:e1:f0:9c:f0:8a:ba:48:8e:b0:0d:89:11:8f:
22:06:1c:3b:7f:b4:80:b4:bf:b8:5d:33:f6:98:fc:cb:4c:0f:
5f:c8:40:12:6e:76:ba:b9:1a:c4:44:bb:3b:af:85:87:9f:0e:
fd:d8:c7:5a:eb:36:95:ad:f9:e6:65:20:aa:74:1e:5a:32:1c:
6c:81:15:d6:11:5b:56:c1:5e:b1:37:4d:cf:f5:91:6d:57:48:
04:8f:e4:d3:0a:47:0d:68:71:20:18:a3:ba:6f:db:31:21:01:
9c:46:ad:bd:52:d0:a5:3f:6b:8e:1b:c3:88:03:5c:d4:7c:ee:
b2:2c:24:61:e0:cd:22:14:1b:21:69:53:5f:59:a5:fe:df:42:
02:98:b6:ff:7f:59:dd:8b:94:bb:01:b6:bb:c3:67:11:2e:b7:
77:be:2e:e7:2b:00:4f:c9:d9:7e:a5:f1:b7:05:0e:ae:57:0f:
18:cf:95:9f:d5:f2:0e:27:dd:66:1b:df:8c:32:51:24:05:9b:
62:e3:99:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 2 04:25:09 2024 by rpki-client on console-ams.rpki-client.org