Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c1b6343-8bfa-413f-ab09-7afd7836cc6e/4335936aafeb27ddf68aae9b5f39b86478d3968d.roa
File: 4335936aafeb27ddf68aae9b5f39b86478d3968d.roa (raw, json)
Hash identifier: uapGVh9UToIvbmS3oWDrAV7qXeASQuiER2atsfKnwPk=
Subject key identifier: 59:41:6B:AA:0B:7D:41:22:3A:11:A2:17:CE:65:7A:AC:F5:4F:84:08
Certificate issuer: /CN=79714d073f4d520d9dfb9d6d8ac625b3c9a02caf
Certificate serial: 1C3F68
Authority key identifier: 5F:99:72:18:43:B5:F9:7D:54:A4:6C:88:6D:8F:1A:BC:45:75:4A:BF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79714d073f4d520d9dfb9d6d8ac625b3c9a02caf.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8c1b6343-8bfa-413f-ab09-7afd7836cc6e/4335936aafeb27ddf68aae9b5f39b86478d3968d.roa
Signing time: Tue 03 Jan 2023 18:34:06 +0000
ROA not before: Mon 02 Jan 2023 18:33:47 +0000
ROA not after: Fri 03 Jan 2025 18:33:47 +0000
asID: 267811
IP address blocks: 45.169.140.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1851240 (0x1c3f68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79714d073f4d520d9dfb9d6d8ac625b3c9a02caf
Validity
Not Before: Jan 2 18:33:47 2023 GMT
Not After : Jan 3 18:33:47 2025 GMT
Subject: CN=4335936aafeb27ddf68aae9b5f39b86478d3968d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d9:26:82:7c:bd:bd:10:f7:b8:06:55:79:79:
19:b0:6c:89:15:24:73:8f:df:c0:59:a7:aa:94:78:
0e:8e:ae:30:65:9e:a3:12:d2:ef:25:27:b8:c1:58:
0e:2c:66:88:05:9f:55:73:1b:4f:6a:44:22:41:dd:
a2:55:c9:97:a9:0c:11:79:6b:e2:f6:50:31:65:02:
9d:3b:e7:bd:1d:1b:22:3f:04:ac:ba:79:d9:39:16:
f7:2a:a7:c8:9d:36:75:76:bd:ac:28:53:da:0e:29:
85:7f:15:7a:bc:75:74:81:99:1c:8f:55:5e:b5:26:
ef:d2:75:02:9e:d4:84:f3:fd:03:16:65:48:37:60:
05:43:f5:7c:4d:58:66:3e:6d:d0:66:8b:5e:64:2c:
7a:85:9e:ac:da:a2:91:36:19:a6:02:22:5b:13:29:
39:6d:07:19:ce:62:f0:0a:41:63:c7:7f:9e:14:80:
e5:99:bf:e1:29:f7:23:1e:2e:06:8f:53:c1:81:a4:
15:6f:c2:6c:d5:8b:5d:9e:02:e3:bf:b0:14:c1:44:
c1:98:df:7f:13:e6:01:fb:75:71:55:86:6b:49:51:
df:ca:77:03:27:b3:23:d3:14:8d:0f:15:f3:d6:9d:
b0:62:d9:56:a4:c1:a8:e9:c0:f5:8e:71:c6:9f:bf:
50:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:41:6B:AA:0B:7D:41:22:3A:11:A2:17:CE:65:7A:AC:F5:4F:84:08
X509v3 Authority Key Identifier:
keyid:5F:99:72:18:43:B5:F9:7D:54:A4:6C:88:6D:8F:1A:BC:45:75:4A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79714d073f4d520d9dfb9d6d8ac625b3c9a02caf.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c1b6343-8bfa-413f-ab09-7afd7836cc6e/4335936aafeb27ddf68aae9b5f39b86478d3968d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8c1b6343-8bfa-413f-ab09-7afd7836cc6e/79714d073f4d520d9dfb9d6d8ac625b3c9a02caf.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.169.140.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:67:a8:6a:e6:37:eb:b5:9b:81:78:4b:68:f9:52:b6:6f:9c:
50:d6:48:7a:6b:11:7c:1b:6e:e9:ab:ac:f1:95:e8:b0:44:29:
f1:56:86:ee:f5:d7:ac:93:ae:ab:73:4b:c2:e2:dc:de:ce:5e:
0a:8c:06:1a:dd:27:50:f4:61:d9:88:d4:9b:24:86:4d:55:97:
a9:72:8a:e4:5c:f3:42:6b:73:de:8c:14:da:8b:94:f3:13:32:
2f:78:20:97:41:5c:c4:9f:9b:b9:8a:2f:1c:39:7a:8c:ad:17:
6a:b6:2c:0f:a4:f5:e2:35:81:74:a1:65:f9:fb:b5:7d:28:08:
a2:7d:a9:10:db:db:ae:e2:55:dc:0e:a1:8c:d7:f2:fd:d8:ae:
0d:73:c4:77:5d:12:06:37:5e:60:7a:63:66:e2:9d:d3:9e:d6:
f1:88:9f:ca:a1:73:1d:78:67:41:a4:32:f4:c2:1c:6a:53:f2:
b5:c6:c4:4a:9a:7a:50:66:66:df:99:44:ff:e1:03:e5:54:f6:
cf:c4:5e:e4:5a:87:96:86:99:1c:5a:5d:25:0d:53:98:41:3e:
41:17:c9:80:40:d8:42:f0:19:ae:36:a2:77:75:f0:d9:28:41:
32:4e:fb:c6:30:b4:ee:e0:81:b7:e8:74:3a:d2:24:2a:4b:21:
9c:8d:35:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 18:46:47 2023 by rpki-client on console-ams.rpki-client.org