Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/85745477-cf2f-4c9b-bbc1-366019d6950c/f85edeb8f1d3bbdbcc706f1b152b1f2765642dea.roa
File: f85edeb8f1d3bbdbcc706f1b152b1f2765642dea.roa (raw, json)
Hash identifier: F9AHY8mWxvTMoex8ED70zqakEgKBDBwXGcJjhuHstT4=
Subject key identifier: 5E:00:67:EE:88:7C:73:29:17:01:77:3B:55:69:85:4A:84:03:B7:00
Certificate issuer: /CN=10c38b9181161ced9b3aca715f10eb6f09968296
Certificate serial: 0B40FA
Authority key identifier: 32:4D:86:3A:FF:AF:AC:1D:7E:B0:AC:0A:5D:8D:43:65:EE:3B:C0:17
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/10c38b9181161ced9b3aca715f10eb6f09968296.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/85745477-cf2f-4c9b-bbc1-366019d6950c/f85edeb8f1d3bbdbcc706f1b152b1f2765642dea.roa
Signing time: Wed 24 Mar 2021 14:39:26 +0000
ROA not before: Wed 24 Mar 2021 14:39:26 +0000
ROA not after: Tue 24 Mar 2026 14:39:26 +0000
asID: 61468
IP address blocks: 45.184.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 737530 (0xb40fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10c38b9181161ced9b3aca715f10eb6f09968296
Validity
Not Before: Mar 24 14:39:26 2021 GMT
Not After : Mar 24 14:39:26 2026 GMT
Subject: CN=f85edeb8f1d3bbdbcc706f1b152b1f2765642dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cb:f8:e7:92:6b:f1:91:fc:19:f6:61:76:2d:
bc:ec:7a:de:f6:bc:62:3d:e5:5a:17:71:a7:e7:b0:
a2:9e:a8:2e:ae:d3:9d:13:17:8a:d2:b6:be:6c:70:
58:3b:85:44:c9:a7:7f:54:3d:95:9b:2c:3c:e5:c0:
37:06:7e:1d:e1:78:63:ca:a1:48:8d:4f:eb:28:e0:
5c:0d:4f:c9:f8:2d:d4:39:a0:d5:42:c5:5e:48:6b:
9e:c4:0a:96:ac:9d:bc:95:d6:b6:0a:09:28:6c:99:
ee:6d:f5:3c:ed:67:66:7e:91:bd:47:48:db:13:ce:
73:90:ea:46:67:71:a8:78:43:1e:b2:19:3c:be:5e:
73:fc:b8:86:8d:1b:1f:33:02:41:11:20:6c:e1:97:
46:a1:09:92:0c:fe:bf:53:9c:ae:28:33:15:04:fc:
e9:de:b4:dc:2a:57:4f:ca:bd:1e:d8:fd:08:e9:b7:
56:68:4a:7f:60:d3:22:48:aa:22:7a:e5:95:62:48:
be:38:27:6e:f2:fa:4b:fb:aa:d2:3e:7f:99:51:c5:
11:df:ab:28:41:14:7b:a8:a4:46:2b:6c:01:7c:52:
f9:b3:d2:f9:c4:10:ba:2c:00:bf:24:2b:32:12:c2:
5d:3a:66:32:01:ed:59:47:fd:46:28:28:22:c7:61:
1e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:00:67:EE:88:7C:73:29:17:01:77:3B:55:69:85:4A:84:03:B7:00
X509v3 Authority Key Identifier:
keyid:32:4D:86:3A:FF:AF:AC:1D:7E:B0:AC:0A:5D:8D:43:65:EE:3B:C0:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/10c38b9181161ced9b3aca715f10eb6f09968296.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/85745477-cf2f-4c9b-bbc1-366019d6950c/f85edeb8f1d3bbdbcc706f1b152b1f2765642dea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/85745477-cf2f-4c9b-bbc1-366019d6950c/10c38b9181161ced9b3aca715f10eb6f09968296.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.184.102.0/24
Signature Algorithm: sha256WithRSAEncryption
63:fa:25:bc:90:d3:fa:4e:01:c9:63:e5:df:54:48:6a:77:e9:
31:34:88:19:c5:a8:db:62:66:3e:23:4c:13:01:8f:60:43:0b:
54:2f:16:78:a8:61:c3:47:a6:7a:76:4d:99:5f:06:25:39:87:
9f:a6:cd:82:f4:fc:9c:b2:70:0b:85:db:d9:cc:49:ec:9c:c1:
4f:75:4c:16:ae:d9:b9:3c:1c:8e:a0:42:39:1a:24:00:b9:58:
67:b6:1d:19:86:93:e3:42:b6:4e:f8:71:b0:87:c9:39:e1:e9:
be:03:73:a7:2c:c1:c1:c3:3d:33:40:f2:91:33:06:6c:be:f1:
39:4a:67:4a:eb:4b:95:99:2a:92:1b:e1:0d:8c:54:b8:fd:33:
06:9a:36:e9:15:ea:23:f0:be:c9:cd:86:15:d7:a0:9a:2d:7e:
49:2d:bb:cc:c2:69:0a:c8:80:eb:a1:a7:bf:17:25:cc:98:0e:
c0:fe:20:41:16:17:55:95:9c:07:89:ba:26:b4:7b:a1:05:f2:
67:12:b5:a0:36:fc:a6:5f:b6:53:f4:d1:d9:59:82:3a:0b:fe:
99:f5:93:a7:2c:18:6f:7b:93:03:62:64:b4:15:8e:0b:f0:7c:
a0:a1:a7:91:c2:e2:d4:65:d5:b0:aa:40:1b:62:72:23:c8:17:
24:0c:ce:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 4 21:38:10 2024 by rpki-client on console-ams.rpki-client.org