Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/925470c820c6dd9f498dc68e7e168671fbd3f455.roa
File: 925470c820c6dd9f498dc68e7e168671fbd3f455.roa (raw, json)
Hash identifier: 6XgIgLDkc3S+b/pY1/yFw3kSDC9X0UvvzpTlxLxRYI4=
Subject key identifier: D9:14:2E:F7:1A:98:F2:C9:ED:2F:76:9D:9B:39:39:14:7E:D2:DC:3B
Certificate issuer: /CN=f58e9ace5695e188fe50f2a761d818e79976c086
Certificate serial: 202D41
Authority key identifier: 3B:44:B4:FF:F3:2A:0D:D1:04:80:2C:2B:B3:16:B8:95:8B:E1:4E:CF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f58e9ace5695e188fe50f2a761d818e79976c086.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/925470c820c6dd9f498dc68e7e168671fbd3f455.roa
Signing time: Wed 07 Feb 2024 18:09:54 +0000
ROA not before: Wed 07 Feb 2024 18:09:53 +0000
ROA not after: Sat 07 Feb 2026 18:09:53 +0000
asID: 265768
IP address blocks: 45.228.220.0/22 maxlen: 24
45.228.220.0/23 maxlen: 23
45.228.222.0/23 maxlen: 23
45.228.220.0/24 maxlen: 24
45.228.221.0/24 maxlen: 24
45.228.222.0/24 maxlen: 24
45.228.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Feb 2024 12:31:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2108737 (0x202d41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58e9ace5695e188fe50f2a761d818e79976c086
Validity
Not Before: Feb 7 18:09:53 2024 GMT
Not After : Feb 7 18:09:53 2026 GMT
Subject: CN=925470c820c6dd9f498dc68e7e168671fbd3f455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e9:b9:5c:1d:01:f2:87:1a:02:65:a9:7a:9a:
f2:28:a0:c2:3a:4c:60:b0:06:d0:a4:be:06:9d:61:
78:12:f7:1b:cc:0a:23:f5:7a:97:7b:2c:64:89:48:
16:0a:8b:5c:91:aa:cd:14:77:60:18:fe:72:82:fb:
c0:a1:82:bb:d8:66:07:b7:85:ca:35:5a:0a:4c:2d:
a3:72:d3:2a:f9:9b:db:e4:fc:96:ba:c5:25:a1:23:
ba:14:d8:5f:18:7c:0a:a2:a8:0d:78:f4:a4:d9:f2:
2a:0a:3e:42:32:d8:ad:e9:f0:b0:a0:5c:ba:db:1d:
7c:01:90:52:69:57:62:2d:ad:97:67:0c:08:d9:30:
22:94:3d:65:f5:7c:86:15:df:36:18:84:69:2f:35:
98:96:1a:ee:bb:d6:a4:54:47:7d:33:dd:e3:c3:f8:
32:d3:e3:43:1d:64:7d:98:c8:66:7f:d6:31:b3:73:
9c:47:21:3d:ac:08:9f:d9:18:96:09:91:ba:f6:6a:
41:d3:22:dc:c2:f0:0f:e5:04:19:8d:2a:9b:91:13:
5b:56:85:19:6a:0c:4a:e0:33:40:4a:1f:30:7b:a9:
dc:76:fd:9d:eb:2c:a6:82:61:67:ca:c2:60:53:eb:
b5:c6:7f:cd:ca:28:eb:00:57:c1:ab:c0:1d:ec:61:
d4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:14:2E:F7:1A:98:F2:C9:ED:2F:76:9D:9B:39:39:14:7E:D2:DC:3B
X509v3 Authority Key Identifier:
keyid:3B:44:B4:FF:F3:2A:0D:D1:04:80:2C:2B:B3:16:B8:95:8B:E1:4E:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f58e9ace5695e188fe50f2a761d818e79976c086.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/925470c820c6dd9f498dc68e7e168671fbd3f455.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/f58e9ace5695e188fe50f2a761d818e79976c086.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.220.0/22
Signature Algorithm: sha256WithRSAEncryption
48:da:1f:c2:90:75:35:3f:32:33:0c:28:0d:94:f5:a4:ac:af:
0e:68:13:c4:bf:95:4e:34:45:e0:86:8c:0c:a6:55:4c:ff:7f:
aa:61:6b:f4:fe:95:9d:f2:6d:31:d9:e7:46:f4:7d:3d:7c:a8:
59:e4:ad:1e:d1:25:71:5d:48:92:27:91:cb:93:13:3b:37:7d:
8c:dd:0f:b7:43:f8:96:26:f9:99:de:cc:89:a1:c6:90:f4:02:
f7:4e:50:29:3a:bc:b4:86:fa:96:d2:81:90:c6:92:66:a8:d7:
49:0d:52:13:8d:58:84:e7:57:32:06:42:7d:9f:94:63:c3:f3:
d5:2a:3c:08:32:4d:7f:8a:1d:d2:96:6a:57:2d:90:ff:84:38:
6b:97:2f:bc:a5:98:2c:59:d9:35:83:1c:22:9f:c8:54:31:09:
12:08:0b:5a:c4:08:88:42:49:f5:80:c7:1c:4a:6e:fb:99:a3:
1d:09:34:17:a7:3a:40:8b:b7:2c:85:2a:11:43:14:b3:a1:a0:
2f:70:09:67:63:99:a4:bf:ba:92:43:60:d0:49:66:88:af:64:
b2:ab:04:f4:58:f2:9d:90:b6:05:32:e2:c2:f3:88:6f:01:a0:
9d:a6:03:15:b2:79:2d:02:8a:90:27:87:e5:03:24:db:b8:b3:
6b:bb:00:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 8 16:50:22 2024 by rpki-client on console-ams.rpki-client.org