Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8f25130c-f8ab-420e-b4f4-5572317f8b4f/9668dffa5f89ed5886ae7399d1179e19c6777c17.roa
File: 9668dffa5f89ed5886ae7399d1179e19c6777c17.roa (raw, json)
Hash identifier: MrMuT/qc6mLQh3r29CN0PiiQIfj/D3S+6SGnYIFvDp0=
Subject key identifier: 17:C9:05:1B:C5:B9:19:FA:A7:91:18:52:5F:50:24:03:23:B3:FA:38
Certificate issuer: /CN=fd09ab3ff908b2be526716abb2521fca7891bc8b
Certificate serial: 094592
Authority key identifier: D2:94:A9:E7:83:86:FB:61:0A:1A:51:FE:1D:14:72:AD:FD:07:36:6A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd09ab3ff908b2be526716abb2521fca7891bc8b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8f25130c-f8ab-420e-b4f4-5572317f8b4f/9668dffa5f89ed5886ae7399d1179e19c6777c17.roa
Signing time: Fri 16 Sep 2022 03:26:29 +0000
ROA not before: Thu 09 Sep 2021 03:00:00 +0000
ROA not after: Sat 09 Sep 2023 03:00:00 +0000
asID: 266743
IP address blocks: 45.230.204.0/22 maxlen: 22
45.230.204.0/24 maxlen: 24
45.230.205.0/24 maxlen: 24
45.230.206.0/24 maxlen: 24
45.230.207.0/24 maxlen: 24
2803:6b20::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 607634 (0x94592)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd09ab3ff908b2be526716abb2521fca7891bc8b
Validity
Not Before: Sep 9 03:00:00 2021 GMT
Not After : Sep 9 03:00:00 2023 GMT
Subject: CN=9668dffa5f89ed5886ae7399d1179e19c6777c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:93:a8:43:0a:5b:89:63:1e:b8:3e:6b:7a:6d:
ae:c4:0c:ba:f7:39:00:05:78:e6:91:77:cb:34:ba:
d4:6d:f1:79:16:5d:b6:a5:1f:c9:1d:7d:b7:c6:ca:
5b:ad:a8:b2:55:88:97:30:5b:93:09:6d:55:f7:88:
76:5c:b1:34:f0:a1:f5:1e:3d:a9:3d:d0:43:5d:4b:
30:37:9c:4f:bb:17:fd:7b:87:67:cb:a8:0f:ae:31:
48:ad:2a:82:91:39:d7:2d:7e:d7:7c:83:9e:fc:a5:
fc:e6:2c:bc:fd:21:67:1b:f2:a1:62:8c:8f:c4:ee:
3e:70:6d:9a:b5:fd:d3:59:7d:a6:be:0b:e7:55:9f:
76:97:4c:9b:41:d9:ae:ce:03:93:fe:35:1e:87:8e:
ba:75:81:78:fb:de:88:a9:91:6a:c3:75:58:b7:88:
6c:77:5c:cb:f0:7e:ee:ff:09:23:d9:50:e1:47:3e:
4b:e6:e7:26:36:ad:85:35:51:a7:a2:57:1a:a9:9e:
7e:27:7d:d8:39:22:f4:bd:9e:9e:ad:1b:c4:3b:90:
64:1d:51:02:f9:ca:b3:9e:89:00:7e:db:70:fb:86:
6d:af:22:26:a4:52:52:7e:75:43:5a:99:68:d1:b3:
e3:32:b7:3e:d3:a7:f1:78:e8:ab:ff:bf:fe:94:5b:
63:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C9:05:1B:C5:B9:19:FA:A7:91:18:52:5F:50:24:03:23:B3:FA:38
X509v3 Authority Key Identifier:
keyid:D2:94:A9:E7:83:86:FB:61:0A:1A:51:FE:1D:14:72:AD:FD:07:36:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd09ab3ff908b2be526716abb2521fca7891bc8b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8f25130c-f8ab-420e-b4f4-5572317f8b4f/9668dffa5f89ed5886ae7399d1179e19c6777c17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8f25130c-f8ab-420e-b4f4-5572317f8b4f/fd09ab3ff908b2be526716abb2521fca7891bc8b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.230.204.0/22
IPv6:
2803:6b20::/32
Signature Algorithm: sha256WithRSAEncryption
06:13:6a:c6:28:67:9f:86:a7:64:25:c6:2b:d6:17:c8:4c:6b:
24:33:7f:36:58:c3:cf:18:2a:82:b6:40:b3:bf:f0:9d:4e:36:
d0:ef:6f:7b:df:49:a3:95:4a:cc:3a:39:93:b0:27:07:74:a3:
a0:cd:66:45:01:b8:ff:9c:f6:0c:82:f6:b2:ad:f0:81:fd:76:
13:94:03:93:c5:87:48:b4:e8:71:78:81:0a:9d:ca:3a:5d:3e:
ce:8c:89:1b:9f:da:20:68:c9:43:ec:ae:a5:b5:66:b1:a0:4e:
83:a9:b4:69:7f:24:76:53:80:09:b0:6b:3f:1a:80:12:8a:ae:
26:6f:3d:5f:19:d4:e8:0c:de:fd:0e:b9:9c:b3:32:9f:f5:5e:
33:80:4f:3c:70:59:b2:78:ca:85:f1:b6:6e:1d:3d:3e:75:df:
29:06:4a:b9:c3:2e:bf:86:c6:11:bf:4f:4e:2b:c8:44:06:e8:
2e:95:89:97:97:0a:52:da:e7:39:22:29:e2:a0:41:5e:3a:5d:
2d:d9:d1:49:0b:11:c8:79:a6:65:16:47:c9:70:1b:b9:54:c2:
f7:21:d8:6c:43:0d:a7:5a:27:e4:9b:97:ce:a0:d3:8f:ff:48:
70:30:63:65:93:4f:d1:71:9b:ae:92:63:a5:35:2d:26:0b:6b:
5c:b9:15:3a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDCUWSMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZk
MDlhYjNmZjkwOGIyYmU1MjY3MTZhYmIyNTIxZmNhNzg5MWJjOGIwHhcNMjEwOTA5
MDMwMDAwWhcNMjMwOTA5MDMwMDAwWjAzMTEwLwYDVQQDEyg5NjY4ZGZmYTVmODll
ZDU4ODZhZTczOTlkMTE3OWUxOWM2Nzc3YzE3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtpOoQwpbiWMeuD5rem2uxAy69zkABXjmkXfLNLrUbfF5Fl22
pR/JHX23xspbraiyVYiXMFuTCW1V94h2XLE08KH1Hj2pPdBDXUswN5xPuxf9e4dn
y6gPrjFIrSqCkTnXLX7XfIOe/KX85iy8/SFnG/KhYoyPxO4+cG2atf3TWX2mvgvn
VZ92l0ybQdmuzgOT/jUeh466dYF4+96IqZFqw3VYt4hsd1zL8H7u/wkj2VDhRz5L
5ucmNq2FNVGnolcaqZ5+J33YOSL0vZ6erRvEO5BkHVEC+cqznokAfttw+4ZtryIm
pFJSfnVDWplo0bPjMrc+06fxeOir/7/+lFtjrwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFBfJBRvFuRn6p5EYUl9QJAMjs/o4MB8GA1UdIwQYMBaAFNKUqeeDhvthChpR
/h0Ucq39BzZqMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmQwOWFi
M2ZmOTA4YjJiZTUyNjcxNmFiYjI1MjFmY2E3ODkxYmM4Yi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOGYyNTEzMGMtZjhhYi00MjBlLWI0ZjQtNTU3MjMx
N2Y4YjRmLzk2NjhkZmZhNWY4OWVkNTg4NmFlNzM5OWQxMTc5ZTE5YzY3NzdjMTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84ZjI1MTMwYy1mOGFiLTQyMGUtYjRmNC01NTcy
MzE3ZjhiNGYvZmQwOWFiM2ZmOTA4YjJiZTUyNjcxNmFiYjI1MjFmY2E3ODkxYmM4
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi3mzDANBAIAAjAHAwUAKANrIDANBgkqhkiG9w0BAQsFAAOC
AQEABhNqxihnn4anZCXGK9YXyExrJDN/NljDzxgqgrZAs7/wnU420O9ve99Jo5VK
zDo5k7AnB3SjoM1mRQG4/5z2DIL2sq3wgf12E5QDk8WHSLTocXiBCp3KOl0+zoyJ
G5/aIGjJQ+yupbVmsaBOg6m0aX8kdlOACbBrPxqAEoquJm89XxnU6Aze/Q65nLMy
n/VeM4BPPHBZsnjKhfG2bh09PnXfKQZKucMuv4bGEb9PTivIRAboLpWJl5cKUtrn
OSIp4qBBXjpdLdnRSQsRyHmmZRZHyXAbuVTC9yHYbEMNp1on5JuXzqDTj/9IcDBj
ZZNP0XGbrpJjpTUtJgtrXLkVOg==
-----END CERTIFICATE-----
Generated at Fri Sep 8 09:06:12 2023 by rpki-client on console-fra.rpki-client.org