Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/81049f88-bd42-4cae-b6ff-905071ba89e2/7815c4a50573666545dc15f631da1c852acb4cd9.roa
File: 7815c4a50573666545dc15f631da1c852acb4cd9.roa (raw, json)
Hash identifier: OasUQzevxBLIJ/J1MJbphbHvfiEZohMtNSqW5YrcC5o=
Subject key identifier: E6:DC:88:4E:40:C6:F0:5D:D6:75:71:FA:92:18:3C:5A:60:1D:32:78
Certificate issuer: /CN=dd138b8ca95e6a9f9b4da79a251cae5840e1b370
Certificate serial: 0CE1
Authority key identifier: 6E:61:07:E7:A9:6D:EA:C6:DC:86:C2:37:4C:5F:81:94:43:A6:D2:0F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd138b8ca95e6a9f9b4da79a251cae5840e1b370.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/81049f88-bd42-4cae-b6ff-905071ba89e2/7815c4a50573666545dc15f631da1c852acb4cd9.roa
Signing time: Tue 14 Feb 2023 13:20:06 +0000
ROA not before: Mon 13 Feb 2023 13:18:15 +0000
ROA not after: Fri 14 Feb 2025 13:18:15 +0000
asID: 267706
IP address blocks: 45.164.228.0/24 maxlen: 24
45.164.229.0/24 maxlen: 24
45.164.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Apr 2024 13:05:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3297 (0xce1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd138b8ca95e6a9f9b4da79a251cae5840e1b370
Validity
Not Before: Feb 13 13:18:15 2023 GMT
Not After : Feb 14 13:18:15 2025 GMT
Subject: CN=7815c4a50573666545dc15f631da1c852acb4cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:30:0e:1e:e9:80:05:27:9d:0f:89:cb:f7:65:
5e:a7:ae:7e:05:cb:e7:c0:57:cb:99:a6:e9:96:78:
2e:34:74:db:c1:23:bd:fb:5f:78:28:b7:22:c3:8c:
0d:d9:eb:31:91:18:75:fd:3c:17:c1:a2:fd:a3:f4:
f6:c8:6b:78:bb:2d:fc:3a:a7:2f:27:4e:96:76:ac:
0d:7b:37:d1:7f:bd:94:b3:e1:8e:41:3c:c7:19:8c:
7c:b4:90:5f:27:de:a5:dc:b6:d5:5f:da:57:6f:f5:
7e:3c:0f:6f:4e:09:6d:73:37:07:e1:5f:58:5e:c8:
b1:02:4e:b3:ad:5e:3c:24:48:8a:19:a8:35:20:0d:
1e:87:d8:5a:87:ab:9d:bd:20:17:06:7c:35:fb:ec:
f3:2a:ab:47:d4:4d:14:83:3a:0a:ba:3d:49:c8:ba:
2f:69:e8:c3:53:70:7c:98:ba:e3:95:eb:a2:ee:40:
a4:2c:27:7f:79:0a:a9:85:ff:19:c8:8d:ef:ae:40:
c0:1f:80:a1:d6:58:36:8b:47:3c:6a:46:76:e3:0f:
2b:3b:ea:05:a4:6e:2e:61:87:df:fb:95:de:00:d3:
74:29:3f:93:b0:6a:ca:ed:ed:2d:15:fb:9b:f5:f0:
75:b2:cd:5a:ef:a5:07:73:10:a1:28:d7:67:33:03:
81:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DC:88:4E:40:C6:F0:5D:D6:75:71:FA:92:18:3C:5A:60:1D:32:78
X509v3 Authority Key Identifier:
keyid:6E:61:07:E7:A9:6D:EA:C6:DC:86:C2:37:4C:5F:81:94:43:A6:D2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd138b8ca95e6a9f9b4da79a251cae5840e1b370.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/81049f88-bd42-4cae-b6ff-905071ba89e2/7815c4a50573666545dc15f631da1c852acb4cd9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/81049f88-bd42-4cae-b6ff-905071ba89e2/dd138b8ca95e6a9f9b4da79a251cae5840e1b370.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.164.228.0-45.164.230.255
Signature Algorithm: sha256WithRSAEncryption
2d:57:61:b7:89:fb:62:c1:23:a1:16:d0:34:d8:f1:57:3f:9f:
a0:b3:a7:64:2d:0e:c1:85:81:c7:b1:b4:fb:74:b3:7a:b1:e3:
77:65:c9:60:61:85:f7:e8:70:31:6d:66:e6:3c:77:29:58:5c:
75:34:2c:bb:05:f7:44:62:6b:77:3b:6f:60:98:87:1d:2f:ac:
f4:72:dd:45:41:bf:8c:c0:a4:fa:fc:6b:cb:4a:57:2d:16:22:
56:27:04:65:e0:da:77:ad:11:23:d2:64:fa:62:16:ea:34:04:
b5:a0:7b:ec:82:65:11:85:b9:f9:ca:9c:30:c7:bb:ca:1e:6c:
9e:ce:e6:96:db:e7:8f:ff:c6:10:ff:2f:11:e7:ef:13:08:b9:
3f:51:6c:dc:eb:98:db:7f:7a:53:b4:74:66:74:82:f0:de:11:
75:9b:f0:f9:a0:f2:5f:f1:41:04:f3:84:f9:6f:44:08:4b:50:
4c:dc:6e:5c:42:c3:e9:47:56:66:5b:49:3c:08:51:f9:44:c4:
ec:e4:c0:ea:7e:fd:36:0f:34:5d:65:f4:c2:c8:9f:c6:33:ab:
b1:8d:13:2c:1b:ef:28:c8:eb:38:25:5b:5c:d0:a9:5f:00:22:
13:1c:af:41:42:56:4f:d9:46:a6:4f:eb:ff:39:2b:d1:0c:a2:
dd:92:cb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 9 18:16:41 2024 by rpki-client on console-ams.rpki-client.org