Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/4857d8a13633cbfb711b408b13edac2a8e26c6ed.roa
File: 4857d8a13633cbfb711b408b13edac2a8e26c6ed.roa (raw, json)
Hash identifier: qBtmsfonukQLapuebT7ODcqv41w+2NCsrmLwxbKI/Fs=
Subject key identifier: 22:33:36:4E:3D:E2:46:4C:41:16:55:E9:32:CB:73:C5:9B:F5:C3:EF
Certificate issuer: /CN=f58e9ace5695e188fe50f2a761d818e79976c086
Certificate serial: 203891
Authority key identifier: 3B:44:B4:FF:F3:2A:0D:D1:04:80:2C:2B:B3:16:B8:95:8B:E1:4E:CF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f58e9ace5695e188fe50f2a761d818e79976c086.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/4857d8a13633cbfb711b408b13edac2a8e26c6ed.roa
Signing time: Thu 08 Feb 2024 12:31:29 +0000
ROA not before: Thu 08 Feb 2024 12:31:29 +0000
ROA not after: Sun 08 Feb 2026 12:31:29 +0000
asID: 265768
IP address blocks: 45.228.220.0/22 maxlen: 24
45.228.220.0/24 maxlen: 24
45.228.221.0/24 maxlen: 24
45.228.222.0/24 maxlen: 24
45.228.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Feb 2024 13:36:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2111633 (0x203891)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58e9ace5695e188fe50f2a761d818e79976c086
Validity
Not Before: Feb 8 12:31:29 2024 GMT
Not After : Feb 8 12:31:29 2026 GMT
Subject: CN=4857d8a13633cbfb711b408b13edac2a8e26c6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:96:da:52:69:11:b1:c4:67:75:2c:cf:bc:c5:
d6:5b:fd:df:e3:7a:63:d3:19:f6:35:c3:13:5b:ca:
c6:7e:b5:2d:a6:f2:7d:bd:10:67:27:2b:e8:35:87:
0a:76:c3:4c:4b:da:81:2c:eb:fa:d4:74:01:a1:39:
7c:08:91:2d:e5:34:ec:c1:a0:f0:03:c7:2a:e0:36:
1d:c6:9d:90:4c:00:47:a1:42:34:7e:3b:4e:89:a5:
04:84:d7:28:f6:f0:c0:2b:f8:8f:85:8c:90:87:be:
87:b1:7a:b0:b9:8a:d2:8b:9d:a8:8a:83:d2:af:31:
32:b3:0d:74:f0:8f:d5:43:d7:c7:b8:b5:ce:67:f3:
4b:91:90:7f:48:6a:a9:2a:1b:d8:69:c5:39:cb:00:
ca:60:6b:9c:67:24:f7:da:ad:36:81:58:51:1d:b1:
84:63:1a:d5:5c:d5:ab:62:42:5a:3d:ad:ec:c0:aa:
51:14:14:a9:27:e4:8c:05:59:b8:4e:4e:37:7c:a6:
d6:58:34:38:b7:8d:f2:6b:b0:31:45:02:89:44:1c:
de:83:57:0a:80:6d:d8:9d:b5:4e:ea:02:4e:bd:6c:
97:f6:35:5a:a5:90:a9:b3:3d:c3:41:4c:68:39:f9:
7c:cd:a9:96:35:fd:32:08:68:8a:29:56:68:34:e8:
a4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:33:36:4E:3D:E2:46:4C:41:16:55:E9:32:CB:73:C5:9B:F5:C3:EF
X509v3 Authority Key Identifier:
keyid:3B:44:B4:FF:F3:2A:0D:D1:04:80:2C:2B:B3:16:B8:95:8B:E1:4E:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f58e9ace5695e188fe50f2a761d818e79976c086.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/4857d8a13633cbfb711b408b13edac2a8e26c6ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/f58e9ace5695e188fe50f2a761d818e79976c086.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.220.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:a6:fc:92:96:be:f7:c3:03:7d:be:9a:e1:34:06:f8:69:3b:
1c:fd:f2:23:ea:a0:a6:d5:37:d7:1b:df:8e:81:36:ff:25:70:
46:d3:c3:f4:cb:86:dc:1d:8f:57:ba:e5:19:4a:11:ff:93:8a:
af:bb:04:5b:51:37:74:0c:f1:83:c9:dc:9c:8e:8b:6c:12:6b:
5c:4d:83:53:bf:1e:b9:54:e7:d5:57:2c:a7:fc:ef:37:4d:2e:
ea:2d:56:db:be:47:00:bf:59:80:6b:b1:89:41:1f:62:5c:1b:
49:3c:3c:e2:2c:91:3d:a8:af:9b:fe:05:d7:d8:9e:21:6a:2c:
35:b6:94:0d:67:af:02:07:2b:c4:d0:a4:fb:74:f3:62:19:f1:
ae:60:fd:5a:5b:dd:76:2e:09:97:2c:fb:ad:bd:4c:37:2f:f7:
d5:7e:58:df:50:b3:47:e2:f2:d8:67:71:3d:fa:a2:2d:41:a2:
de:9c:88:c0:35:3d:f1:59:bf:06:12:cb:8b:73:e5:aa:59:3b:
bf:aa:49:d0:11:25:9e:f1:d2:ee:50:67:ad:16:16:14:49:7f:
50:e6:d1:49:6c:44:37:27:09:81:1f:09:08:80:31:63:af:ed:
b8:89:60:5f:bd:3f:48:f0:b0:db:06:43:ca:21:0c:5b:62:a5:
3a:64:35:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 19 18:02:49 2024 by rpki-client on console-ams.rpki-client.org