Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/6ccfc70fc325175271121d08429b30ec3ca1c943.roa
File: 6ccfc70fc325175271121d08429b30ec3ca1c943.roa (raw, json)
Hash identifier: SXxGRMlKXgfvvKq0PiqgjFoyY2eedn+0aMXGH2+Y/yM=
Subject key identifier: 44:F3:BE:24:AC:81:61:DD:1D:B1:A3:3E:7F:E7:84:5B:AF:BD:38:CA
Certificate issuer: /CN=f58e9ace5695e188fe50f2a761d818e79976c086
Certificate serial: 2021A1
Authority key identifier: 3B:44:B4:FF:F3:2A:0D:D1:04:80:2C:2B:B3:16:B8:95:8B:E1:4E:CF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f58e9ace5695e188fe50f2a761d818e79976c086.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/6ccfc70fc325175271121d08429b30ec3ca1c943.roa
Signing time: Wed 07 Feb 2024 17:37:49 +0000
ROA not before: Wed 07 Feb 2024 17:37:49 +0000
ROA not after: Sat 07 Feb 2026 17:37:49 +0000
asID: 264758
IP address blocks: 45.228.220.0/24 maxlen: 24
45.228.221.0/24 maxlen: 24
45.228.222.0/24 maxlen: 24
45.228.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Feb 2024 18:49:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2105761 (0x2021a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58e9ace5695e188fe50f2a761d818e79976c086
Validity
Not Before: Feb 7 17:37:49 2024 GMT
Not After : Feb 7 17:37:49 2026 GMT
Subject: CN=6ccfc70fc325175271121d08429b30ec3ca1c943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:96:3e:cc:be:31:fe:f2:a1:2b:d0:54:47:d3:
7f:6f:f7:08:e0:96:e7:86:ae:65:c6:3d:91:9b:0b:
9e:57:dc:24:58:28:09:81:56:6e:00:a8:7d:ee:d2:
55:89:98:71:e2:57:d1:de:1b:60:c6:56:22:f1:91:
da:d8:dd:cb:a0:47:75:ac:3c:d1:96:d0:00:dc:15:
44:4e:f4:65:8c:e3:7b:e0:60:8d:9d:73:ca:a9:d0:
47:d5:c9:6c:c1:4d:be:d7:a9:1a:d7:8e:16:9b:52:
fd:b5:93:c4:94:68:77:68:2d:30:66:fc:5c:db:41:
de:c6:be:cd:81:a4:f5:3a:87:dd:0f:3e:00:12:ab:
57:a9:6e:3b:aa:0e:2f:44:cc:41:ef:61:eb:b2:a1:
d0:7f:33:fd:a7:85:09:46:c5:51:64:89:f3:81:1c:
02:fa:c2:97:ec:e4:46:60:7d:e2:7d:2a:cb:5d:9b:
52:9d:fa:58:fa:9a:0f:4c:af:43:da:1f:82:0d:4d:
16:5a:bf:cc:f5:c7:06:5d:25:c7:c7:ce:66:f3:66:
d3:09:77:40:ae:e7:2d:06:be:0d:31:fd:0a:27:a6:
4a:8b:ab:ec:72:0b:b7:1b:55:5b:99:69:e2:7c:fd:
d1:0a:a3:a8:32:d6:2b:bd:69:9e:0a:e9:ce:95:f7:
bf:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F3:BE:24:AC:81:61:DD:1D:B1:A3:3E:7F:E7:84:5B:AF:BD:38:CA
X509v3 Authority Key Identifier:
keyid:3B:44:B4:FF:F3:2A:0D:D1:04:80:2C:2B:B3:16:B8:95:8B:E1:4E:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f58e9ace5695e188fe50f2a761d818e79976c086.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/6ccfc70fc325175271121d08429b30ec3ca1c943.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/f58e9ace5695e188fe50f2a761d818e79976c086.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.220.0/22
Signature Algorithm: sha256WithRSAEncryption
71:41:8d:47:41:3b:0d:8a:62:3b:be:36:bc:9f:f5:12:bc:6e:
c3:5b:af:4e:9c:bd:9d:1d:6b:3f:33:84:3f:d5:0d:73:fb:30:
30:37:42:96:cb:6e:c0:4a:ef:29:c7:3f:5e:f9:ad:6e:e4:00:
7a:dd:61:71:df:3d:f7:b3:47:c3:4a:d9:dc:1b:39:32:a7:03:
fe:b6:f4:7d:69:81:17:f5:9c:ad:f9:31:4f:84:33:94:e2:18:
dc:69:7f:11:29:e9:50:ce:63:45:9f:0f:3e:1b:2e:64:09:35:
14:6f:03:bb:9b:31:5a:0f:bf:3f:b2:bc:f7:94:fd:f7:84:a1:
0e:6e:c1:61:3d:28:f6:f6:9d:56:fe:cb:ef:dd:eb:3e:ed:10:
6b:cc:12:4e:fe:99:49:71:b4:69:a5:c0:ef:6f:d8:9f:b7:43:
34:f5:1a:26:ae:78:2e:5a:f7:30:88:d5:01:70:eb:13:ef:00:
3c:d2:a6:e9:41:d2:e3:f0:5a:02:a9:4e:6e:a8:a2:c0:9b:7e:
a7:80:57:9a:87:b1:4b:25:cf:2f:bd:cf:66:43:dc:0b:1b:84:
23:3f:28:9b:82:20:9a:05:34:1c:b0:1f:1f:8d:e9:f0:4a:da:
2b:eb:9c:81:44:52:89:1e:36:a6:28:90:df:3e:e8:63:14:22:
e4:9b:f0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 7 23:23:04 2024 by rpki-client on console-ams.rpki-client.org