Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/feddfad73df7bcf8c6075e24eb79caa939f44831.roa
File: feddfad73df7bcf8c6075e24eb79caa939f44831.roa (raw, json)
Hash identifier: NGa7StQ1Ol1JRjr3LaY6Lue21nC4W+prdQLH4oCHsEM=
Subject key identifier: 0B:02:97:C2:E3:83:FF:38:14:2E:DD:1E:7A:C8:28:25:02:B2:3D:7C
Certificate issuer: /CN=464aaf9d70c216551b1b619bc4c8573c3b3e1b52
Certificate serial: 08754E
Authority key identifier: 84:A6:F0:56:F6:32:74:33:FF:4F:DC:50:D9:F3:B2:D8:C5:CF:FE:9B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/feddfad73df7bcf8c6075e24eb79caa939f44831.roa
Signing time: Thu 15 Sep 2022 04:15:42 +0000
ROA not before: Wed 06 Oct 2021 03:00:00 +0000
ROA not after: Mon 15 Jan 2024 03:00:00 +0000
asID: 26506
IP address blocks: 45.227.89.0/24 maxlen: 24
2801:114:7::/48 maxlen: 48
2801:114:8::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 14 Jan 2024 07:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 554318 (0x8754e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464aaf9d70c216551b1b619bc4c8573c3b3e1b52
Validity
Not Before: Oct 6 03:00:00 2021 GMT
Not After : Jan 15 03:00:00 2024 GMT
Subject: CN=feddfad73df7bcf8c6075e24eb79caa939f44831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9f:66:c1:31:44:b7:c7:c2:3a:4b:46:36:92:
a4:c7:e9:7d:93:f5:ee:ce:6c:9f:66:af:1b:20:77:
60:7c:5a:ba:ba:29:d1:aa:26:21:f1:51:d0:99:e9:
94:fc:5a:2c:1d:c0:c5:b8:99:78:58:86:04:f3:b6:
3e:02:fc:37:2e:a0:23:ed:90:b0:30:e9:9d:40:e5:
81:81:23:ab:97:b0:36:9c:2a:17:b4:33:4a:21:f7:
f0:4a:e5:fe:10:ed:3b:ef:e1:2f:22:83:97:b2:67:
86:71:5d:1e:e3:4f:d1:05:2c:0c:ef:91:65:4f:ee:
61:41:8a:fd:3a:40:40:2b:60:33:f6:4f:99:ec:e1:
19:a4:e9:40:a7:2e:82:f6:6c:e6:ea:54:f5:7c:71:
05:6e:af:0b:24:9b:cf:de:ee:8e:ad:cd:7c:ea:f6:
96:33:32:29:5c:a0:cd:12:da:38:a1:d8:e3:9c:4d:
b7:6b:70:be:15:49:aa:4c:c9:3c:e7:e2:23:ce:7a:
47:55:3c:7c:a5:cd:cf:14:a2:0c:27:0d:81:0a:9f:
89:e9:1f:46:a8:58:47:c5:47:b8:32:11:05:46:85:
01:09:60:fc:02:3f:9e:fe:d6:e5:49:5c:82:8f:8c:
30:59:cf:69:80:e0:ce:81:89:ce:45:3b:5e:40:24:
48:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:02:97:C2:E3:83:FF:38:14:2E:DD:1E:7A:C8:28:25:02:B2:3D:7C
X509v3 Authority Key Identifier:
keyid:84:A6:F0:56:F6:32:74:33:FF:4F:DC:50:D9:F3:B2:D8:C5:CF:FE:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/feddfad73df7bcf8c6075e24eb79caa939f44831.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.227.89.0/24
IPv6:
2801:114:7::-2801:114:8:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
6a:f9:00:5f:0a:89:82:bf:c4:a2:41:2b:99:67:31:6e:1d:f9:
7e:3e:7b:27:19:bf:d0:fb:bb:eb:ce:6a:72:91:9d:36:ed:fe:
23:ec:52:9c:4d:4d:ba:26:2b:29:84:45:06:41:e9:45:ff:ae:
33:f9:6e:58:a0:24:c7:22:14:a7:6f:97:ce:fe:56:18:a2:9b:
7d:9c:eb:0c:0e:4e:de:76:fe:48:98:6c:4a:cc:84:5b:4a:3d:
95:69:f4:0c:ce:ca:8d:cb:c6:69:fa:2b:79:96:74:f4:09:c4:
65:61:ac:3c:05:9f:4c:92:12:01:c8:5f:a0:1c:26:04:0a:56:
45:a0:9e:42:60:b6:e8:95:e3:89:c0:20:23:8e:6e:d6:16:c6:
55:fc:d4:39:a5:cd:2c:f4:54:94:61:93:2d:7c:ac:61:6f:37:
84:1d:31:c1:c8:b9:32:eb:80:bc:6f:dd:84:e8:96:b2:95:36:
ca:b8:57:44:c5:33:7f:48:fe:e5:da:1f:c5:a9:be:8c:1e:da:
f1:d7:23:f5:f9:46:de:ef:23:65:fd:04:d6:85:78:92:2e:4b:
08:21:79:0c:2c:86:4a:7d:bd:18:95:e3:82:cf:36:33:44:23:
57:f6:69:dc:10:4e:21:25:7c:2b:7e:9c:3f:1c:9b:19:3c:b3:
ef:e9:6f:77
-----BEGIN CERTIFICATE-----
MIIFXDCCBESgAwIBAgIDCHVOMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ2
NGFhZjlkNzBjMjE2NTUxYjFiNjE5YmM0Yzg1NzNjM2IzZTFiNTIwHhcNMjExMDA2
MDMwMDAwWhcNMjQwMTE1MDMwMDAwWjAzMTEwLwYDVQQDEyhmZWRkZmFkNzNkZjdi
Y2Y4YzYwNzVlMjRlYjc5Y2FhOTM5ZjQ0ODMxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkJ9mwTFEt8fCOktGNpKkx+l9k/XuzmyfZq8bIHdgfFq6uinR
qiYh8VHQmemU/FosHcDFuJl4WIYE87Y+Avw3LqAj7ZCwMOmdQOWBgSOrl7A2nCoX
tDNKIffwSuX+EO077+EvIoOXsmeGcV0e40/RBSwM75FlT+5hQYr9OkBAK2Az9k+Z
7OEZpOlApy6C9mzm6lT1fHEFbq8LJJvP3u6Orc186vaWMzIpXKDNEto4odjjnE23
a3C+FUmqTMk85+IjznpHVTx8pc3PFKIMJw2BCp+J6R9GqFhHxUe4MhEFRoUBCWD8
Aj+e/tblSVyCj4wwWc9pgODOgYnORTteQCRI5wIDAQABo4ICdzCCAnMwHQYDVR0O
BBYEFAsCl8Ljg/84FC7dHnrIKCUCsj18MB8GA1UdIwQYMBaAFISm8Fb2MnQz/0/c
UNnzstjFz/6bMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDY0YWFm
OWQ3MGMyMTY1NTFiMWI2MTliYzRjODU3M2MzYjNlMWI1Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvN2VhZmY4OWEtODU3YS00ODcwLTgxMmMtN2E1NzRk
ZTE2YjI2L2ZlZGRmYWQ3M2RmN2JjZjhjNjA3NWUyNGViNzljYWE5MzlmNDQ4MzEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83ZWFmZjg5YS04NTdhLTQ4NzAtODEyYy03YTU3
NGRlMTZiMjYvNDY0YWFmOWQ3MGMyMTY1NTFiMWI2MTliYzRjODU3M2MzYjNlMWI1
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA7BggrBgEFBQcBBwEB/wQs
MCowDAQCAAEwBgMEAC3jWTAaBAIAAjAUMBIDBwAoAQEUAAcDBwAoAQEUAAgwDQYJ
KoZIhvcNAQELBQADggEBAGr5AF8KiYK/xKJBK5lnMW4d+X4+eycZv9D7u+vOanKR
nTbt/iPsUpxNTbomKymERQZB6UX/rjP5bligJMciFKdvl87+Vhiim32c6wwOTt52
/kiYbErMhFtKPZVp9AzOyo3Lxmn6K3mWdPQJxGVhrDwFn0ySEgHIX6AcJgQKVkWg
nkJgtuiV44nAICOObtYWxlX81DmlzSz0VJRhky18rGFvN4QdMcHIuTLrgLxv3YTo
lrKVNsq4V0TFM39I/uXaH8Wpvowe2vHXI/X5Rt7vI2X9BNaFeJIuSwgheQwshkp9
vRiV44LPNjNEI1f2adwQTiElfCt+nD8cmxk8s+/pb3c=
-----END CERTIFICATE-----
Generated at Sun Jan 14 08:37:02 2024 by rpki-client on console-ams.rpki-client.org