Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8751feff-30c2-4aaf-8803-54d8be3b004f/48bad9e5886b23c7fe1394f657464fec2987a703.roa
File: 48bad9e5886b23c7fe1394f657464fec2987a703.roa (raw, json)
Hash identifier: roWa7HUyoGJ3joZTTHlIQu0HutoZevMFCraSn90xgAU=
Subject key identifier: 98:B4:12:5A:DC:6A:0B:2D:E3:9F:6E:5F:5C:4A:3B:0B:CF:71:AE:0E
Certificate issuer: /CN=9c0799877aecf01061f13687ad43c4c362608b6a
Certificate serial: 1EA7E3
Authority key identifier: 7D:31:54:64:61:5F:C9:6E:58:0B:0A:4C:5D:D1:91:03:D4:2D:58:E9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9c0799877aecf01061f13687ad43c4c362608b6a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8751feff-30c2-4aaf-8803-54d8be3b004f/48bad9e5886b23c7fe1394f657464fec2987a703.roa
Signing time: Wed 05 Apr 2023 13:43:23 +0000
ROA not before: Tue 23 Mar 2021 14:29:36 +0000
ROA not after: Tue 24 Mar 2026 14:29:36 +0000
asID: 266781
IP address blocks: 45.233.140.0/24 maxlen: 24
45.233.141.0/24 maxlen: 24
45.233.142.0/24 maxlen: 24
2803:df20::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2009059 (0x1ea7e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0799877aecf01061f13687ad43c4c362608b6a
Validity
Not Before: Mar 23 14:29:36 2021 GMT
Not After : Mar 24 14:29:36 2026 GMT
Subject: CN=48bad9e5886b23c7fe1394f657464fec2987a703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c8:ff:15:8c:32:a5:b7:9f:5c:64:e7:fb:ec:
ef:5c:b6:50:db:a9:84:c1:72:a0:08:45:28:7b:70:
82:31:95:ac:0e:fc:71:4c:e4:57:25:5e:46:25:02:
09:9e:19:55:d6:c8:93:53:16:70:3d:94:9d:44:10:
73:95:96:04:cc:8e:e1:4e:1e:64:32:f5:b2:b3:20:
3b:db:3f:9e:56:15:c3:00:2b:ef:99:e0:d5:21:e3:
e0:48:54:df:6b:47:30:b5:58:66:e9:83:07:ed:21:
5e:ab:38:f9:4b:4e:cb:36:ce:78:4b:01:e8:7c:b2:
97:c2:62:0c:57:0b:cf:e1:78:64:48:44:53:62:eb:
f2:4f:c7:67:4c:3c:25:8f:85:70:0d:94:ce:08:5e:
7f:d7:43:29:c8:52:2d:58:05:74:c8:71:6f:0e:51:
58:b0:1c:91:0e:d3:b4:ad:85:e3:cf:42:f0:df:f7:
56:58:7f:aa:03:91:4f:46:af:a0:f0:a7:43:77:8f:
c5:39:f8:d6:03:9e:f7:cb:3f:64:2f:df:00:0c:ae:
e1:9b:4d:cd:69:58:b2:07:d5:18:10:1f:ea:89:7e:
12:1a:45:f8:86:3a:2c:ba:ef:09:45:b3:fd:65:ac:
b7:6d:48:26:d2:e4:8a:89:3a:9e:bc:77:ca:a6:59:
db:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B4:12:5A:DC:6A:0B:2D:E3:9F:6E:5F:5C:4A:3B:0B:CF:71:AE:0E
X509v3 Authority Key Identifier:
keyid:7D:31:54:64:61:5F:C9:6E:58:0B:0A:4C:5D:D1:91:03:D4:2D:58:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9c0799877aecf01061f13687ad43c4c362608b6a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8751feff-30c2-4aaf-8803-54d8be3b004f/48bad9e5886b23c7fe1394f657464fec2987a703.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8751feff-30c2-4aaf-8803-54d8be3b004f/9c0799877aecf01061f13687ad43c4c362608b6a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.233.140.0-45.233.142.255
IPv6:
2803:df20::/32
Signature Algorithm: sha256WithRSAEncryption
a5:b7:69:82:b8:bc:82:b1:e3:22:90:b3:aa:66:47:89:f6:55:
3b:1a:2b:66:b3:17:ae:c3:ec:44:78:63:9f:87:8f:f8:8c:61:
be:54:61:8a:16:28:f1:91:5d:3d:4a:21:21:98:48:38:9c:45:
ca:2a:76:be:e6:e3:88:23:0f:ca:cb:6e:00:01:c3:f1:0b:eb:
18:de:22:0a:d3:d8:aa:ef:5e:de:08:1b:e6:bb:e2:85:70:b7:
7a:98:91:a7:c3:57:1e:13:13:49:9f:ff:2f:e1:2e:dd:e0:87:
27:08:ce:2c:b4:44:c1:10:ea:05:51:01:4c:30:92:72:c4:e8:
7a:69:90:ed:77:b5:bb:64:f5:9c:6c:22:ce:6e:fc:9b:ea:20:
a4:4c:6a:21:8c:4c:64:c8:3e:d3:9f:53:85:c9:c0:18:5c:2b:
2e:ac:62:76:93:44:44:03:dc:cf:1b:2d:1b:04:c7:7c:e5:d8:
11:7c:d9:93:01:63:61:18:b3:66:27:2c:6b:03:be:6c:b1:b0:
09:b7:da:da:37:09:0f:af:e1:c0:76:67:49:28:8a:11:d6:b2:
61:0e:5c:d4:82:26:9c:b3:a3:a6:ff:da:63:20:13:1b:9b:9d:
42:b4:fe:f5:8a:93:06:40:ff:32:d8:b0:85:9f:d4:fb:de:5e:
64:cb:74:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 27 13:04:47 2023 by rpki-client on console-ams.rpki-client.org