Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/861ddb87-6391-43b0-a917-a4915b7be15e/d1cab631e59d3cda644e3387639c4b7ff1c8de2c.roa
File: d1cab631e59d3cda644e3387639c4b7ff1c8de2c.roa (raw, json)
Hash identifier: 5BlmvwuBfd4iTeJ/R7Lj1/cwCeGMOGgYXUPCN9wlZ+c=
Subject key identifier: C6:5E:8D:26:D3:5C:81:2E:6A:18:B7:7F:31:54:03:7B:E8:4F:C5:37
Certificate issuer: /CN=a48360de513a5e0e321240da777f72d0ee049213
Certificate serial: 0522
Authority key identifier: 9B:7E:83:E1:BE:D4:E1:31:65:E2:FE:5C:18:C8:A4:44:A8:8A:13:FB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a48360de513a5e0e321240da777f72d0ee049213.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/861ddb87-6391-43b0-a917-a4915b7be15e/d1cab631e59d3cda644e3387639c4b7ff1c8de2c.roa
Signing time: Tue 02 Nov 2021 15:37:00 +0000
ROA not before: Tue 02 Nov 2021 03:00:00 +0000
ROA not after: Thu 02 Nov 2023 03:00:00 +0000
asID: 267715
IP address blocks: 45.165.152.0/24 maxlen: 24
2803:99a0::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1314 (0x522)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a48360de513a5e0e321240da777f72d0ee049213
Validity
Not Before: Nov 2 03:00:00 2021 GMT
Not After : Nov 2 03:00:00 2023 GMT
Subject: CN=d1cab631e59d3cda644e3387639c4b7ff1c8de2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:42:ad:0a:ca:eb:b3:bf:8c:7b:7f:01:46:a5:
0b:8e:52:d8:d6:7d:48:55:c5:da:b9:11:38:d1:43:
59:b8:1b:85:71:37:58:93:3f:fa:cb:03:b5:96:24:
af:14:79:cc:20:e0:d8:42:70:14:c4:48:d3:01:60:
a8:76:c5:05:79:86:d7:95:d9:69:0a:5b:86:e4:73:
86:62:a0:9e:2c:ce:e0:f1:a1:5e:fe:2f:d3:26:ed:
43:d3:f3:6b:57:0e:ad:02:01:66:d4:2e:e2:88:f8:
d6:e7:78:dd:d4:ff:fa:61:e3:bf:e7:ca:61:3f:3e:
5a:8a:66:6e:bc:a8:28:7b:99:ba:49:42:de:de:3a:
5c:cf:08:24:57:71:f2:9b:d8:31:a0:c2:0f:77:74:
20:39:f1:64:eb:86:2e:3e:6c:f1:79:e7:99:8b:d8:
72:c4:0d:e8:2b:67:01:02:d9:9c:bf:03:f8:85:52:
10:45:3e:3f:6f:01:c4:57:76:fe:4c:4c:dc:34:92:
9a:4c:7d:80:9e:3b:7c:8e:b2:14:50:8a:2f:3c:e6:
97:e1:9d:14:e6:d7:be:33:c9:da:20:83:d9:6f:76:
20:f9:43:66:0a:f3:73:64:be:f3:8a:a7:97:03:5f:
ea:76:dd:ae:52:a5:89:0b:fe:14:4b:de:6d:c5:a9:
cb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5E:8D:26:D3:5C:81:2E:6A:18:B7:7F:31:54:03:7B:E8:4F:C5:37
X509v3 Authority Key Identifier:
keyid:9B:7E:83:E1:BE:D4:E1:31:65:E2:FE:5C:18:C8:A4:44:A8:8A:13:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a48360de513a5e0e321240da777f72d0ee049213.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/861ddb87-6391-43b0-a917-a4915b7be15e/d1cab631e59d3cda644e3387639c4b7ff1c8de2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/861ddb87-6391-43b0-a917-a4915b7be15e/a48360de513a5e0e321240da777f72d0ee049213.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.165.152.0/24
IPv6:
2803:99a0::/32
Signature Algorithm: sha256WithRSAEncryption
64:0f:0d:86:ff:99:76:12:4d:d9:0f:88:4b:e7:fc:60:e5:16:
5f:da:bd:f1:a9:28:91:7b:6f:a3:fd:e5:a9:01:5c:d5:cc:dd:
8d:fa:2f:10:6b:45:1d:b4:68:bc:6a:45:65:70:b7:15:41:5e:
15:3d:c4:c0:ee:8b:04:2b:17:63:e5:9c:04:5e:9d:ad:2f:c7:
2a:58:98:16:a3:88:c0:f3:df:2f:bd:d5:a1:8a:d9:f4:ae:1f:
d5:f7:8f:df:5d:dd:ab:17:e6:63:ca:f9:ef:2a:84:8b:83:79:
ad:f5:bc:c3:15:76:9b:95:f4:cd:84:91:c7:04:8b:fe:0e:08:
11:d9:c1:cc:54:09:41:45:3a:fd:a5:71:ac:55:3b:69:58:30:
96:8a:fc:ec:54:aa:ea:04:99:ce:1f:f2:1d:7b:45:5f:a3:92:
f2:a3:bb:ee:cc:82:0d:79:02:db:da:d5:96:0d:ab:74:04:0e:
14:b6:8c:95:4f:21:e3:a0:c2:fa:7c:1c:83:82:78:be:a2:2f:
35:25:28:87:fa:13:1c:27:d9:ba:ac:a8:61:bf:c7:08:f4:d6:
97:a6:e6:b2:82:5c:43:63:17:31:82:e4:16:dd:8e:63:9e:72:
57:7c:f2:02:48:04:ed:f8:a6:8f:c8:9c:53:cb:1e:6a:6c:90:
26:55:5b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 1 08:10:55 2023 by rpki-client on console-fra.rpki-client.org