Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8068fa13-8860-4973-8a2c-ba8a6a5cdc84/74112dbdcd7605f2c0cf1ddbe39a23a96987c395.roa
File: 74112dbdcd7605f2c0cf1ddbe39a23a96987c395.roa (raw, json)
Hash identifier: 9eQk3GWoKCBaJkEzdBHe/SLdRv7Zr4uUtvsSXzBbPzk=
Subject key identifier: 24:EC:2D:6F:B7:47:55:40:24:A2:D8:B0:1A:96:0A:E7:5A:14:EF:55
Certificate issuer: /CN=3ac089c221d0dbc870f89217c46c6a8f5a357910
Certificate serial: 090A6F
Authority key identifier: 7E:49:79:C6:A7:F2:88:DE:EC:27:AF:FB:FB:A1:28:5A:8F:7E:1B:11
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ac089c221d0dbc870f89217c46c6a8f5a357910.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8068fa13-8860-4973-8a2c-ba8a6a5cdc84/74112dbdcd7605f2c0cf1ddbe39a23a96987c395.roa
Signing time: Thu 17 Feb 2022 14:48:15 +0000
ROA not before: Thu 17 Feb 2022 03:00:00 +0000
ROA not after: Sat 17 Feb 2024 03:00:00 +0000
asID: 271843
IP address blocks: 45.162.132.0/24 maxlen: 24
45.162.133.0/24 maxlen: 24
45.162.134.0/24 maxlen: 24
2803:f810::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 16 Feb 2024 07:30:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 592495 (0x90a6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac089c221d0dbc870f89217c46c6a8f5a357910
Validity
Not Before: Feb 17 03:00:00 2022 GMT
Not After : Feb 17 03:00:00 2024 GMT
Subject: CN=74112dbdcd7605f2c0cf1ddbe39a23a96987c395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:81:6f:5f:3f:ac:1d:70:4d:f2:50:72:d6:e3:
ff:55:29:59:a1:5a:7e:88:d0:d3:c0:07:a5:b6:93:
88:07:af:0a:74:15:69:9f:ed:4f:b5:41:1a:92:e3:
8b:d5:31:3a:9a:37:b3:b5:97:f1:06:3b:38:80:8c:
cc:0a:fe:fc:99:8a:ef:10:d6:9d:be:63:73:63:de:
b6:15:2b:c4:54:bd:31:0b:b5:85:dc:2c:fe:07:eb:
4e:e1:2c:0f:af:9d:0a:ce:cc:82:f4:79:65:42:00:
f3:3d:22:cc:97:e5:b0:66:25:a2:8e:58:46:5d:03:
7b:33:2c:90:73:f6:3b:19:e5:bb:07:30:ae:de:aa:
2a:28:41:95:77:6f:09:27:bc:09:5e:5c:cc:9e:30:
bc:62:08:3a:43:00:7b:25:0f:db:3e:aa:bc:3c:91:
71:2f:78:49:bc:5d:85:fc:2c:45:38:13:dd:07:7d:
5b:6b:40:c4:54:7d:95:c2:34:11:0a:59:ab:9b:8a:
3a:c6:04:67:2d:34:ce:3c:5a:d8:47:2a:9f:6f:d4:
b4:8d:9b:f7:0a:7b:12:f0:1f:87:29:41:e4:d6:08:
7d:a2:1c:09:b4:a3:b6:a5:13:65:4a:e9:b0:e9:1c:
fa:7f:7b:dc:dd:9b:41:4b:8d:03:70:7f:ad:db:21:
68:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:EC:2D:6F:B7:47:55:40:24:A2:D8:B0:1A:96:0A:E7:5A:14:EF:55
X509v3 Authority Key Identifier:
keyid:7E:49:79:C6:A7:F2:88:DE:EC:27:AF:FB:FB:A1:28:5A:8F:7E:1B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ac089c221d0dbc870f89217c46c6a8f5a357910.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8068fa13-8860-4973-8a2c-ba8a6a5cdc84/74112dbdcd7605f2c0cf1ddbe39a23a96987c395.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8068fa13-8860-4973-8a2c-ba8a6a5cdc84/3ac089c221d0dbc870f89217c46c6a8f5a357910.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.162.132.0-45.162.134.255
IPv6:
2803:f810::/32
Signature Algorithm: sha256WithRSAEncryption
40:fa:dd:03:f1:58:df:1a:d3:c7:ea:2e:37:35:53:13:f1:d1:
75:e9:30:87:fa:cd:55:b3:46:1e:f2:d6:ba:cc:b2:51:84:af:
c5:99:f7:0e:a7:ec:59:04:c7:0f:6d:15:bb:7d:50:30:68:7b:
e1:9b:56:34:99:80:37:c1:48:da:c9:0c:0a:68:78:62:ac:7c:
51:cf:f8:fa:97:de:0f:ea:98:ba:a2:3d:46:11:d6:a7:ad:bd:
4f:ab:b0:27:f1:f9:bf:05:45:f9:04:13:d0:4c:78:99:a7:8b:
6d:03:bb:87:7b:64:7b:74:4e:ec:e3:00:bc:27:91:26:20:d8:
3d:99:f6:5b:25:ab:20:87:b7:b3:3a:7a:04:b2:dd:3f:61:2d:
bb:fe:a2:3a:e8:44:b6:33:34:69:61:e3:25:1b:c8:c1:f9:de:
5a:cb:a2:72:58:a4:a7:00:59:ae:20:42:7d:11:e3:df:7f:0f:
b1:67:81:ac:21:5f:ab:4d:b3:1b:0b:37:95:63:b8:82:75:8f:
32:6b:96:9d:47:6d:4a:ff:79:f6:a8:1a:1d:7d:02:85:06:39:
0b:c1:d6:05:9b:86:3a:d1:be:92:68:20:9a:b6:d8:5d:86:75:
72:05:ad:7b:5c:ca:10:c8:24:fc:45:b4:9e:37:5b:7f:93:b5:
8d:f8:68:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 16 09:57:32 2024 by rpki-client on console-ams.rpki-client.org