Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8944f36b-2325-44ed-b803-7566ee057cd8/488f69d399724b8acc200617abe8d056337bc1b8.roa
File: 488f69d399724b8acc200617abe8d056337bc1b8.roa (raw, json)
Hash identifier: +oKplkMMCysy+CvwAkEB21ieMTjhkWEOt+rNMKHUeuY=
Subject key identifier: BD:6F:16:67:89:3E:32:AF:95:04:EA:4A:66:7B:5D:F9:BF:45:95:D9
Certificate issuer: /CN=fc3eb9c806dfd203fdb6fc49031057505a0c6f13
Certificate serial: 0C50D1
Authority key identifier: 2F:9B:B8:0D:9F:F8:55:8E:F5:47:19:FF:D0:B2:4C:5C:6B:29:4B:14
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc3eb9c806dfd203fdb6fc49031057505a0c6f13.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8944f36b-2325-44ed-b803-7566ee057cd8/488f69d399724b8acc200617abe8d056337bc1b8.roa
Signing time: Wed 24 Mar 2021 14:39:53 +0000
ROA not before: Wed 24 Mar 2021 14:39:51 +0000
ROA not after: Tue 24 Mar 2026 14:39:51 +0000
asID: 266783
IP address blocks: 45.235.12.0/24 maxlen: 24
45.235.13.0/24 maxlen: 24
45.235.14.0/24 maxlen: 24
45.235.15.0/24 maxlen: 24
2803:bf20::/32 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 Feb 2024 07:54:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 807121 (0xc50d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc3eb9c806dfd203fdb6fc49031057505a0c6f13
Validity
Not Before: Mar 24 14:39:51 2021 GMT
Not After : Mar 24 14:39:51 2026 GMT
Subject: CN=488f69d399724b8acc200617abe8d056337bc1b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7b:15:66:fd:12:7e:79:03:72:e4:ae:c4:72:
27:77:9d:8f:11:e5:00:7a:18:6b:33:1c:ff:9f:54:
38:9f:aa:d6:0f:d0:aa:8e:4c:40:72:17:c9:54:a2:
29:d5:57:69:54:6e:a9:90:66:a4:15:01:18:a8:20:
9c:61:6f:18:30:c9:c8:de:3d:c3:8d:f8:e8:27:d2:
4d:25:81:2a:d1:77:c2:6d:65:09:35:c0:f2:78:09:
bb:1f:84:14:5b:ef:f4:64:4b:2e:36:30:fc:90:86:
60:6f:10:e3:05:7b:bb:e6:e4:09:04:6b:da:e4:b5:
c9:33:ac:7a:da:89:0c:e6:1c:7c:23:3e:47:e1:bd:
ec:1d:8b:04:37:1b:d6:35:53:f4:04:b4:cc:8f:bd:
3b:a4:c9:3c:2c:76:4d:da:45:4c:39:8a:bb:bb:c7:
c5:0a:c2:8d:30:e6:db:39:7d:d2:86:0c:8f:4b:1c:
fe:35:25:7a:b4:96:38:ef:e1:ea:52:e1:fc:bd:81:
e4:ab:67:88:92:ab:8f:34:7f:f3:ad:83:7a:62:a4:
ac:2d:ca:28:f0:20:04:4b:d0:6f:a5:92:59:9f:0e:
f9:15:27:85:d2:78:24:d1:41:4e:b4:65:c7:0e:5d:
97:8b:32:9a:65:e1:62:03:e8:7c:43:74:d0:36:fb:
74:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6F:16:67:89:3E:32:AF:95:04:EA:4A:66:7B:5D:F9:BF:45:95:D9
X509v3 Authority Key Identifier:
keyid:2F:9B:B8:0D:9F:F8:55:8E:F5:47:19:FF:D0:B2:4C:5C:6B:29:4B:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc3eb9c806dfd203fdb6fc49031057505a0c6f13.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8944f36b-2325-44ed-b803-7566ee057cd8/488f69d399724b8acc200617abe8d056337bc1b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8944f36b-2325-44ed-b803-7566ee057cd8/fc3eb9c806dfd203fdb6fc49031057505a0c6f13.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.235.12.0/22
IPv6:
2803:bf20::/32
Signature Algorithm: sha256WithRSAEncryption
08:bd:1b:0e:ee:3b:19:4b:e6:f4:7a:31:3e:90:b8:d4:56:dd:
dc:99:96:84:27:22:0c:6a:7e:7f:de:75:bc:58:84:b8:7a:11:
97:cf:43:23:74:43:9f:17:5f:45:49:e1:2a:b5:b7:f5:8c:62:
7c:ce:c2:d1:67:f4:c6:b1:d9:82:0a:08:51:a5:ab:e2:84:da:
c4:54:90:df:33:6c:a4:d5:f3:5b:9e:a7:6c:2f:0d:3d:85:ea:
69:8c:39:78:9c:b6:b5:18:c9:b4:7a:77:b6:07:46:d8:5a:28:
47:1b:ec:d8:f1:b0:c3:80:df:23:89:07:2e:b7:7d:79:72:8f:
e3:33:e6:68:be:f5:ca:8e:0c:32:ff:4e:96:c1:26:c4:24:bd:
67:be:de:1b:07:6b:2c:5d:9d:92:5d:a3:92:d6:fd:9f:a4:22:
7e:b4:a2:92:c2:c7:31:c1:28:ca:7a:f5:3a:99:94:9a:0f:18:
e1:cb:0f:71:37:40:39:31:89:48:94:eb:bd:ec:b2:ac:97:85:
6e:02:09:26:eb:07:b5:92:b7:ac:ba:e3:fd:40:e0:8f:26:9b:
85:82:fe:84:94:5b:e3:e2:cd:37:3c:3a:92:88:ca:79:92:3b:
a4:59:dd:bc:69:e1:8a:62:6f:29:48:8c:02:cc:4d:fb:cf:43:
fe:7a:c7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 23 10:44:34 2024 by rpki-client on console-ams.rpki-client.org