Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/807fa197-0f4e-4c02-9bf1-fa08f6c31161/29ff41c571abb0671d275299accd6be995cb62a5.roa
File: 29ff41c571abb0671d275299accd6be995cb62a5.roa (raw, json)
Hash identifier: ZSIHuiD9oCcnlU0HVj8C2BWnHSTRxiPZwBCxY69r1jY=
Subject key identifier: 1F:78:24:B0:39:28:6A:2C:25:8C:AF:D6:B9:B2:1B:FF:D4:4C:9D:28
Certificate issuer: /CN=52123ef187606a1f9e354af3d71983ad0a3cd822
Certificate serial: 0CD267
Authority key identifier: F3:C0:32:AD:9D:33:B2:C0:86:87:52:69:91:75:D2:40:F9:68:E8:85
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/52123ef187606a1f9e354af3d71983ad0a3cd822.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/807fa197-0f4e-4c02-9bf1-fa08f6c31161/29ff41c571abb0671d275299accd6be995cb62a5.roa
Signing time: Wed 24 Mar 2021 14:33:41 +0000
ROA not before: Wed 24 Mar 2021 14:33:41 +0000
ROA not after: Tue 24 Mar 2026 14:33:41 +0000
asID: 266795
IP address blocks: 45.236.88.0/24 maxlen: 24
45.236.89.0/24 maxlen: 24
45.236.90.0/24 maxlen: 24
45.236.91.0/24 maxlen: 24
2803:d0a0::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 840295 (0xcd267)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52123ef187606a1f9e354af3d71983ad0a3cd822
Validity
Not Before: Mar 24 14:33:41 2021 GMT
Not After : Mar 24 14:33:41 2026 GMT
Subject: CN=29ff41c571abb0671d275299accd6be995cb62a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:14:3c:dc:de:6a:09:3c:4e:7f:aa:56:57:82:
70:96:3e:42:83:37:66:2d:08:5c:bb:72:1d:50:bc:
fb:96:7d:78:9e:8f:39:1f:67:97:2d:a7:a0:8c:5f:
70:5a:aa:02:12:fa:0f:76:95:71:b7:d3:5c:3b:39:
dd:2d:44:ba:bb:7c:0f:ea:4b:1e:f9:7e:ef:06:17:
4e:c0:f1:63:fe:5c:18:e8:a3:ac:fd:e3:4d:76:3b:
18:7c:e5:ea:05:da:b0:a9:ed:5d:04:89:94:d0:ca:
e2:2c:c4:64:d4:56:17:0f:a7:d9:82:5c:51:a5:0d:
1f:4e:05:d1:37:f4:0e:78:b6:bf:3d:70:ae:46:9c:
a9:8d:34:78:95:4c:e9:0e:fa:83:68:ef:9e:cb:28:
65:6e:00:da:5b:1f:51:ab:78:12:14:48:d2:4f:e4:
56:42:2d:a2:d0:e7:70:95:fe:27:36:78:5f:2b:d9:
db:04:bc:30:ed:5a:88:82:06:d0:48:48:6a:80:65:
cf:a0:ae:bf:50:ed:b5:7a:70:5d:a8:00:b7:9c:ab:
a7:1b:3b:cf:51:f0:24:a5:b0:92:c7:dc:1c:38:3c:
bb:b3:10:ec:17:37:bf:67:9b:e4:9f:86:3d:6e:b1:
93:4f:32:13:49:2c:a1:91:54:41:fb:66:35:ba:bc:
2c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:78:24:B0:39:28:6A:2C:25:8C:AF:D6:B9:B2:1B:FF:D4:4C:9D:28
X509v3 Authority Key Identifier:
keyid:F3:C0:32:AD:9D:33:B2:C0:86:87:52:69:91:75:D2:40:F9:68:E8:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/52123ef187606a1f9e354af3d71983ad0a3cd822.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/807fa197-0f4e-4c02-9bf1-fa08f6c31161/29ff41c571abb0671d275299accd6be995cb62a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/807fa197-0f4e-4c02-9bf1-fa08f6c31161/52123ef187606a1f9e354af3d71983ad0a3cd822.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.236.88.0/22
IPv6:
2803:d0a0::/32
Signature Algorithm: sha256WithRSAEncryption
39:8c:e3:1e:e4:8a:6b:85:e7:22:50:9b:31:64:10:a7:f0:24:
07:47:26:95:63:80:17:45:f6:33:42:4c:a9:c7:9a:8d:3d:ea:
ef:a6:16:95:8d:c2:b8:1d:a8:45:0e:a2:bd:5a:10:fc:d9:24:
11:05:e4:d1:a4:fa:af:1a:2e:d4:68:9d:ff:4b:7b:4b:61:72:
a8:e3:b6:e8:5a:9c:ee:7d:78:62:db:6c:d8:6b:f9:d4:db:bc:
cc:7e:a9:fc:1c:76:c9:da:44:97:52:86:00:a5:97:b5:8d:3a:
e8:3d:14:b6:99:b9:f7:a5:ec:c2:9b:43:38:d8:f0:ac:b4:fe:
52:ac:84:21:b8:bb:cd:10:5f:2a:cc:12:f5:de:26:fb:35:57:
95:5a:18:31:54:27:00:9b:9a:54:07:b3:46:d0:de:b5:76:8a:
50:47:bb:6b:6c:33:af:1e:16:3c:d3:7f:86:39:42:21:17:3f:
80:c3:0c:68:41:1e:1f:57:23:f6:83:06:c4:07:b2:82:8a:e4:
c6:5d:e2:8e:24:9f:98:40:f8:ff:75:b5:a8:95:31:1d:d1:42:
1d:ba:db:3d:12:62:1f:a5:23:47:bf:37:f9:ee:b5:ee:6f:e3:
39:d5:9c:5f:07:26:dd:4f:1b:61:06:5c:f3:f8:dc:86:84:57:
71:b6:cb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:40 2023 by rpki-client on console-ams.rpki-client.org