Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/1058f2e57c896029afc3a62a86ec5f93e02dcbc5.roa
File: 1058f2e57c896029afc3a62a86ec5f93e02dcbc5.roa (raw, json)
Hash identifier: Gn8o5lXVxxoZoAJciDohzNX/1Nwc3/PI0POCr4p/MVM=
Subject key identifier: C9:F3:79:C4:32:BE:C4:E0:75:C9:52:80:55:C7:F5:92:45:5B:6C:4F
Certificate issuer: /CN=f58e9ace5695e188fe50f2a761d818e79976c086
Certificate serial: 201703
Authority key identifier: 3B:44:B4:FF:F3:2A:0D:D1:04:80:2C:2B:B3:16:B8:95:8B:E1:4E:CF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f58e9ace5695e188fe50f2a761d818e79976c086.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/1058f2e57c896029afc3a62a86ec5f93e02dcbc5.roa
Signing time: Wed 07 Feb 2024 17:33:03 +0000
ROA not before: Wed 07 Feb 2024 17:33:03 +0000
ROA not after: Sat 07 Feb 2026 17:33:03 +0000
asID: 266684
IP address blocks: 45.228.220.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Feb 2024 13:38:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2103043 (0x201703)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58e9ace5695e188fe50f2a761d818e79976c086
Validity
Not Before: Feb 7 17:33:03 2024 GMT
Not After : Feb 7 17:33:03 2026 GMT
Subject: CN=1058f2e57c896029afc3a62a86ec5f93e02dcbc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b7:00:5e:fc:14:8a:8e:ff:10:d4:b8:fa:ff:
09:b1:c1:05:63:34:57:a7:5f:b2:03:0e:b4:d4:53:
75:96:6c:12:62:2f:7a:7b:c3:20:e9:8c:50:da:ff:
ee:63:18:68:9b:23:d9:c4:ff:34:d3:d6:f8:ab:87:
52:ed:77:d4:f4:5c:ab:23:e2:da:6e:f2:78:37:55:
52:87:4c:3f:3f:64:2e:c6:b9:ac:b5:ef:ff:7d:69:
2b:ba:ff:33:ff:a1:20:99:bc:1d:39:51:4e:4d:ca:
59:3a:10:be:29:18:e2:91:59:9d:aa:8e:61:7c:45:
9a:2e:88:2f:a6:d5:c0:91:0e:a6:df:fb:1c:77:2b:
fd:b9:c1:38:81:09:02:6e:4a:f0:17:0b:2f:55:cc:
a7:17:d9:1f:d0:c4:27:7b:c1:01:ed:e5:01:52:36:
51:b3:ad:55:a8:dd:22:25:7e:38:d2:79:e2:10:5e:
4a:b0:32:71:29:8c:d6:b8:3b:31:4e:3e:45:35:e1:
8a:6f:e7:6c:9f:99:7a:8c:ac:1d:96:00:37:53:a2:
52:1f:ac:24:b1:8a:28:f4:f7:3d:19:22:08:ee:3c:
44:e8:bd:c4:94:f5:13:db:35:f7:0b:f1:f9:8b:db:
b8:ce:49:bc:26:ca:7a:cd:5f:ae:33:fb:f0:fa:d1:
1e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F3:79:C4:32:BE:C4:E0:75:C9:52:80:55:C7:F5:92:45:5B:6C:4F
X509v3 Authority Key Identifier:
keyid:3B:44:B4:FF:F3:2A:0D:D1:04:80:2C:2B:B3:16:B8:95:8B:E1:4E:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f58e9ace5695e188fe50f2a761d818e79976c086.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/1058f2e57c896029afc3a62a86ec5f93e02dcbc5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/f58e9ace5695e188fe50f2a761d818e79976c086.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.220.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:ee:f9:8f:19:0c:ab:a5:fe:e6:8e:49:1f:8d:94:fa:57:28:
9a:d0:5f:35:f0:8a:2e:92:99:0e:99:ab:b7:e9:99:64:c3:aa:
8d:e2:b4:42:b4:f3:54:3b:8b:2a:54:a1:0b:43:d8:7a:0f:24:
14:d1:41:56:cd:27:bd:af:fa:e5:f3:61:04:8b:91:5a:db:75:
6a:bc:51:80:43:c0:88:91:6c:86:50:02:07:64:6f:93:c1:3d:
a6:26:ce:0e:da:ce:0f:5f:01:4a:a7:4c:b2:ce:c8:36:8d:04:
72:f0:40:5c:84:33:01:20:83:3e:b3:b7:6f:ae:64:ca:2e:ce:
e7:ee:8e:3b:59:6a:af:38:25:e4:88:2b:2b:fa:c8:f5:ff:cb:
35:8a:09:d5:e5:b1:08:46:87:dc:de:30:12:f1:18:4b:f3:01:
b8:93:d5:6f:1d:91:3a:a0:49:84:e9:0a:30:00:97:f8:3a:e5:
c0:26:25:86:e6:53:26:a7:2b:4f:9e:b7:26:df:9f:d1:c9:f2:
db:7e:b3:24:6f:33:bb:44:67:09:43:fb:d2:54:f8:1e:b8:36:
31:c2:41:73:3a:e0:63:d5:f9:e5:ab:ff:69:36:0c:7e:f9:d6:
58:f3:69:81:2b:f6:bb:34:37:79:33:80:6c:79:c8:e7:0c:b6:
9b:14:38:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 19 18:16:51 2024 by rpki-client on console-fra.rpki-client.org