Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8f25130c-f8ab-420e-b4f4-5572317f8b4f/d442661dbd1dd068756de578077fa6a4c84ff396.roa
File: d442661dbd1dd068756de578077fa6a4c84ff396.roa (raw, json)
Hash identifier: BtqRr6OEDevIBmn41Lh/KnWgc67BF09V/PlX/Y4B31c=
Subject key identifier: CD:B5:E9:B3:A2:ED:B7:ED:0E:5F:6C:27:3C:47:74:22:C8:80:CA:9C
Certificate issuer: /CN=fd09ab3ff908b2be526716abb2521fca7891bc8b
Certificate serial: 050B
Authority key identifier: D2:94:A9:E7:83:86:FB:61:0A:1A:51:FE:1D:14:72:AD:FD:07:36:6A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd09ab3ff908b2be526716abb2521fca7891bc8b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8f25130c-f8ab-420e-b4f4-5572317f8b4f/d442661dbd1dd068756de578077fa6a4c84ff396.roa
Signing time: Thu 09 Sep 2021 16:35:58 +0000
ROA not before: Thu 09 Sep 2021 03:00:00 +0000
ROA not after: Sat 09 Sep 2023 03:00:00 +0000
asID: 266743
IP address blocks: 45.230.204.0/22 maxlen: 22
2803:6b20::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1291 (0x50b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd09ab3ff908b2be526716abb2521fca7891bc8b
Validity
Not Before: Sep 9 03:00:00 2021 GMT
Not After : Sep 9 03:00:00 2023 GMT
Subject: CN=d442661dbd1dd068756de578077fa6a4c84ff396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:71:e1:20:8b:ab:60:26:1f:c8:58:81:05:62:
b6:82:1a:26:7b:32:a5:76:0f:9b:24:1c:7e:7b:33:
7a:59:7e:71:a3:43:0f:20:c2:03:9f:5a:37:fd:d6:
2c:91:df:6c:c8:0e:1b:21:3f:ff:07:1e:9f:41:df:
2f:56:63:da:8c:0c:82:ed:a3:81:a8:ff:17:6f:ff:
ca:69:79:83:48:d1:95:4b:ac:c6:10:e0:48:5e:c3:
60:88:76:b6:8f:5a:47:f1:0a:c8:34:ca:1b:ed:a4:
cd:21:f4:1d:78:82:79:69:88:4f:ef:1e:21:cf:71:
4a:15:45:7f:8d:4b:bc:d8:82:a4:11:0d:7b:04:96:
8c:74:be:cc:62:54:88:a5:33:a8:a2:3e:fd:16:73:
a3:3c:aa:c8:fb:40:1d:79:fb:57:f4:01:a0:8b:95:
c2:c0:be:1d:cc:49:43:da:b5:da:5e:8a:56:0a:38:
44:b4:72:47:56:c6:de:0a:25:f3:8a:8c:b3:ff:a6:
a7:83:75:68:d7:99:29:1c:6a:31:52:58:44:2b:6f:
19:85:34:24:19:b8:fb:ff:cf:c9:b5:16:4e:c0:d6:
d5:32:28:d0:23:0a:91:80:17:bd:86:a9:d2:22:39:
ac:be:22:6b:3a:58:f5:d2:a3:62:1f:3c:ee:1e:a2:
5e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B5:E9:B3:A2:ED:B7:ED:0E:5F:6C:27:3C:47:74:22:C8:80:CA:9C
X509v3 Authority Key Identifier:
keyid:D2:94:A9:E7:83:86:FB:61:0A:1A:51:FE:1D:14:72:AD:FD:07:36:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd09ab3ff908b2be526716abb2521fca7891bc8b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8f25130c-f8ab-420e-b4f4-5572317f8b4f/d442661dbd1dd068756de578077fa6a4c84ff396.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8f25130c-f8ab-420e-b4f4-5572317f8b4f/fd09ab3ff908b2be526716abb2521fca7891bc8b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.230.204.0/22
IPv6:
2803:6b20::/32
Signature Algorithm: sha256WithRSAEncryption
9c:78:81:e4:88:52:8a:c3:25:b8:6b:fa:06:66:3d:eb:81:01:
af:4f:f2:d4:b2:d6:69:97:d6:4b:65:31:00:4b:41:b6:a0:68:
ad:7e:2d:92:6f:b7:62:21:a4:77:cc:ac:10:c6:4a:d3:ff:6f:
47:2b:1e:0a:de:e3:c7:1a:70:c6:f8:b1:df:a1:31:bf:ba:89:
53:1a:60:2d:89:fe:64:b2:91:d2:d6:51:2f:10:41:c2:47:d6:
2f:0a:a0:98:a4:3e:1c:51:4a:81:a4:6b:cd:0d:61:b9:0c:c8:
d0:fb:ff:58:ab:c9:b5:b7:5d:d3:e0:a9:0b:5b:6d:73:d4:25:
d9:2d:b8:e2:be:fb:a8:6f:2d:2e:36:0c:29:7b:b6:d2:1f:1a:
87:88:54:20:3d:41:f6:e1:8c:64:e1:b2:85:68:a8:1e:a4:c1:
c8:b3:99:69:7a:8c:a0:26:1d:e9:7e:86:bc:ce:64:1b:39:03:
cc:7a:61:f2:19:71:11:87:c0:7e:19:cf:a4:9b:d1:55:c4:1f:
59:0f:9c:4c:4f:2a:1f:0e:f4:38:3b:38:22:fe:9a:64:69:29:
c3:01:06:fd:9a:0f:9b:b4:41:7f:fc:71:ab:1a:f5:db:78:38:
6d:fd:d4:fa:df:83:42:c4:91:5e:fd:b7:1e:5c:31:ca:b9:93:
53:00:37:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:45 2023 by rpki-client on console-ams.rpki-client.org