Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/9d7e60a436864f73885348812c0f12f2bae19a11.roa
File: 9d7e60a436864f73885348812c0f12f2bae19a11.roa (raw, json)
Hash identifier: oTk5qSv2J0rpG7WfLG7WZ76vCs5bGVJ1VYQuFIhCGMU=
Subject key identifier: 54:92:E3:F5:2A:D1:79:EC:69:13:C2:3C:75:9E:94:1C:2B:A3:D5:B1
Certificate issuer: /CN=f58e9ace5695e188fe50f2a761d818e79976c086
Certificate serial: 20266D
Authority key identifier: 3B:44:B4:FF:F3:2A:0D:D1:04:80:2C:2B:B3:16:B8:95:8B:E1:4E:CF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f58e9ace5695e188fe50f2a761d818e79976c086.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/9d7e60a436864f73885348812c0f12f2bae19a11.roa
Signing time: Wed 07 Feb 2024 17:37:51 +0000
ROA not before: Wed 07 Feb 2024 17:37:51 +0000
ROA not after: Sat 07 Feb 2026 17:37:51 +0000
asID: 264758
IP address blocks: 45.228.220.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Feb 2024 18:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2106989 (0x20266d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58e9ace5695e188fe50f2a761d818e79976c086
Validity
Not Before: Feb 7 17:37:51 2024 GMT
Not After : Feb 7 17:37:51 2026 GMT
Subject: CN=9d7e60a436864f73885348812c0f12f2bae19a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3c:ca:86:54:26:14:f4:97:f2:e2:32:6b:d5:
b6:a6:9a:73:5f:eb:31:e3:52:21:98:f6:ee:0d:42:
2a:59:9a:ca:eb:39:93:81:2f:79:07:3a:0c:dd:a9:
ba:e9:6f:53:e1:e5:bb:b6:5f:14:eb:c1:85:13:ae:
7f:16:35:9d:d9:c4:7f:73:1b:e1:1e:03:71:3f:e1:
43:f9:47:11:bf:72:15:81:f9:20:f4:4d:f8:b0:c0:
a9:fb:fd:be:b4:ad:09:a5:78:77:6d:e6:6c:1a:c4:
87:bd:d3:e3:f5:47:8c:b1:16:be:05:41:54:21:d9:
cb:c1:c5:8b:38:82:c1:2f:0b:e9:83:5f:a8:c3:2a:
fa:5b:70:98:c1:d7:ed:47:33:c9:78:b1:97:39:58:
a2:d9:4a:44:68:02:4f:32:d9:b8:f0:10:79:bb:58:
45:48:41:73:fb:66:d9:9a:34:e3:c7:d8:f1:05:d2:
0e:18:7e:e7:7a:88:62:13:8b:c5:ff:25:db:20:f0:
6e:e6:aa:80:79:ad:44:65:e0:12:d4:32:9e:27:60:
90:5b:47:cd:55:c6:f6:9d:a3:36:1b:14:7a:a8:9f:
40:8e:77:c4:e8:9d:89:68:42:62:01:42:c5:dd:05:
9f:fe:da:ef:7c:11:9b:2f:f2:9a:8d:60:08:31:5d:
07:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:92:E3:F5:2A:D1:79:EC:69:13:C2:3C:75:9E:94:1C:2B:A3:D5:B1
X509v3 Authority Key Identifier:
keyid:3B:44:B4:FF:F3:2A:0D:D1:04:80:2C:2B:B3:16:B8:95:8B:E1:4E:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f58e9ace5695e188fe50f2a761d818e79976c086.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/9d7e60a436864f73885348812c0f12f2bae19a11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/85fc2657-9dd5-4e18-a043-c1ed96730bf8/f58e9ace5695e188fe50f2a761d818e79976c086.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.220.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:37:62:89:1b:89:65:2c:d9:3c:24:d4:3b:c5:8d:0e:28:dd:
56:75:ce:7f:49:eb:7d:86:67:08:9d:4d:3a:50:31:97:40:c1:
05:a3:74:23:2a:f5:2c:ee:37:2a:3c:82:0d:13:0b:bd:37:a4:
9a:60:07:a2:bf:ce:3e:c9:eb:78:c5:b6:e7:ca:1b:e1:c8:63:
0b:60:66:bc:b3:e7:1e:88:3e:e7:6e:9b:8c:81:f8:67:79:de:
f3:ec:2b:46:82:3e:cd:50:82:2c:c7:77:e2:d5:41:97:3e:6b:
92:19:b6:a0:63:14:86:7c:87:bf:74:6a:9b:74:35:a9:e3:ba:
aa:86:40:14:14:8c:0d:25:46:71:0f:7b:fa:02:a0:82:d6:17:
54:f8:f5:5a:76:4a:20:80:39:82:ba:d6:43:7e:2d:49:52:be:
d5:c6:df:63:39:d3:e9:1e:24:a3:9f:fc:3c:a0:b9:8d:1a:bb:
9a:5b:79:bd:c1:17:ec:5b:03:24:bb:6a:a4:4f:c8:3d:c0:3e:
b4:21:04:81:6f:34:52:6f:21:b5:d3:c7:62:d1:40:73:0f:ae:
89:9f:8c:3f:43:3b:ff:6d:6d:d1:41:2f:12:9c:09:55:03:f9:
0f:c3:e7:e8:41:4f:ff:25:b8:36:fc:e3:3f:6a:ca:db:82:de:
30:62:7a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 7 23:05:26 2024 by rpki-client on console-fra.rpki-client.org