Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/969e5fb8-8b2f-4aba-b523-2f5900cbc4e8/e33cc669e6c44d5d2ac918d50380dd00ab9410dc.roa
File: e33cc669e6c44d5d2ac918d50380dd00ab9410dc.roa (raw, json)
Hash identifier: muKr5+flD2cERO6D/Bv0jBI+9r/lBWd2YSepdZ8yKS0=
Subject key identifier: C5:22:78:3D:01:32:6B:F0:A8:A7:64:C5:28:BB:B7:83:1E:1C:73:A0
Certificate issuer: /CN=713466eb5a3bd118b72f0078eea3bb990f763363
Certificate serial: 21DAE2
Authority key identifier: A0:37:CA:80:54:88:9E:DD:25:3F:14:49:0A:4D:98:1E:B3:53:D8:0B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/713466eb5a3bd118b72f0078eea3bb990f763363.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/969e5fb8-8b2f-4aba-b523-2f5900cbc4e8/e33cc669e6c44d5d2ac918d50380dd00ab9410dc.roa
Signing time: Tue 12 Sep 2023 08:30:00 +0000
ROA not before: Mon 11 Sep 2023 08:30:00 +0000
ROA not after: Wed 10 Sep 2025 08:30:00 +0000
asID: 269726
IP address blocks: 45.179.252.0/24 maxlen: 24
45.179.253.0/24 maxlen: 24
45.179.254.0/24 maxlen: 24
45.179.255.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2218722 (0x21dae2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713466eb5a3bd118b72f0078eea3bb990f763363
Validity
Not Before: Sep 11 08:30:00 2023 GMT
Not After : Sep 10 08:30:00 2025 GMT
Subject: CN=e33cc669e6c44d5d2ac918d50380dd00ab9410dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7b:08:c7:0e:35:31:9a:90:de:dd:dd:b7:db:
b5:19:9c:29:fc:ce:78:6e:0b:42:71:7f:42:5d:c3:
63:f8:ba:0c:8d:fd:5d:5e:6b:da:ed:10:54:9b:aa:
77:40:94:01:f0:50:f2:37:6e:4d:46:88:b2:92:a4:
c8:2c:83:b2:84:1b:8c:72:16:20:e2:9b:3c:2b:e2:
39:44:c9:18:dc:b3:89:35:a4:4a:04:40:45:39:cf:
5e:c8:ba:29:4b:cf:3e:44:4d:a9:d8:9a:dc:51:0f:
3f:29:34:3b:98:ed:35:2f:ba:50:8b:6f:de:3f:6a:
e3:2b:95:05:2a:b5:17:c9:7c:7d:cf:15:d8:c7:40:
cc:61:90:33:56:4c:f2:a2:f7:e4:d4:d7:0e:cb:f0:
ba:80:98:e3:62:70:8d:e7:fd:aa:00:50:26:8f:38:
56:f0:21:be:a1:7a:3f:d5:de:49:49:40:56:77:39:
72:d9:05:e8:bd:64:20:6b:4b:a5:ce:fb:2e:3b:3c:
b8:df:d6:e2:59:7e:1f:69:3a:60:6f:b8:3c:fe:06:
0c:ee:69:4c:43:f1:4f:33:c6:cb:a9:9f:2b:79:64:
be:13:cf:71:5c:12:0e:cb:08:56:d1:eb:67:a5:2e:
9a:5b:11:6d:3e:f8:17:17:c0:9e:4b:46:ef:9d:c7:
fd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:22:78:3D:01:32:6B:F0:A8:A7:64:C5:28:BB:B7:83:1E:1C:73:A0
X509v3 Authority Key Identifier:
keyid:A0:37:CA:80:54:88:9E:DD:25:3F:14:49:0A:4D:98:1E:B3:53:D8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/713466eb5a3bd118b72f0078eea3bb990f763363.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/969e5fb8-8b2f-4aba-b523-2f5900cbc4e8/e33cc669e6c44d5d2ac918d50380dd00ab9410dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/969e5fb8-8b2f-4aba-b523-2f5900cbc4e8/713466eb5a3bd118b72f0078eea3bb990f763363.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.179.252.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:70:ce:b8:18:90:dc:63:1b:0a:d7:66:c6:e4:77:91:b1:a9:
4f:38:02:f1:c2:a8:87:28:ef:8e:54:e9:7a:6c:1f:56:bc:51:
bb:dc:3b:13:cc:6f:ed:2a:12:37:ab:f0:9a:1d:98:0a:01:ab:
2e:ff:75:41:52:1f:73:5a:72:c7:0c:37:07:26:c0:08:71:7a:
b6:52:b6:d7:83:23:10:75:1b:99:87:c6:6f:f5:33:04:19:03:
5d:43:9a:b1:fc:52:4d:ce:9a:cd:5f:2f:7a:4a:05:ea:a6:7b:
5e:c1:67:d8:ba:cd:ef:4a:aa:b5:58:41:4b:bb:af:b8:86:7a:
55:18:0d:0f:6c:9e:d8:80:d9:64:d4:09:03:99:23:8f:28:a2:
de:2c:b8:e6:e2:83:c0:92:ea:98:a0:05:25:f3:55:32:2d:c2:
ae:3e:04:5a:44:f6:44:20:35:7d:4c:4e:ed:93:ce:97:6c:8b:
94:7d:8b:aa:83:b9:66:e5:d9:ab:17:86:32:9c:4d:11:42:dd:
d8:8f:7e:2e:03:dc:d1:ae:23:50:51:2d:66:bc:c6:e4:47:0c:
7b:8e:86:11:33:f1:61:62:83:16:77:49:4c:ad:47:7f:3d:14:
17:71:e5:3e:fb:ea:1d:99:8a:46:2f:99:05:e3:8e:d4:28:d4:
97:ca:85:37
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIdriMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcx
MzQ2NmViNWEzYmQxMThiNzJmMDA3OGVlYTNiYjk5MGY3NjMzNjMwHhcNMjMwOTEx
MDgzMDAwWhcNMjUwOTEwMDgzMDAwWjAzMTEwLwYDVQQDEyhlMzNjYzY2OWU2YzQ0
ZDVkMmFjOTE4ZDUwMzgwZGQwMGFiOTQxMGRjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkXsIxw41MZqQ3t3dt9u1GZwp/M54bgtCcX9CXcNj+LoMjf1d
Xmva7RBUm6p3QJQB8FDyN25NRoiykqTILIOyhBuMchYg4ps8K+I5RMkY3LOJNaRK
BEBFOc9eyLopS88+RE2p2JrcUQ8/KTQ7mO01L7pQi2/eP2rjK5UFKrUXyXx9zxXY
x0DMYZAzVkzyovfk1NcOy/C6gJjjYnCN5/2qAFAmjzhW8CG+oXo/1d5JSUBWdzly
2QXovWQga0ulzvsuOzy439biWX4faTpgb7g8/gYM7mlMQ/FPM8bLqZ8reWS+E89x
XBIOywhW0etnpS6aWxFtPvgXF8CeS0bvncf96wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFMUieD0BMmvwqKdkxSi7t4MeHHOgMB8GA1UdIwQYMBaAFKA3yoBUiJ7dJT8U
SQpNmB6zU9gLMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzEzNDY2
ZWI1YTNiZDExOGI3MmYwMDc4ZWVhM2JiOTkwZjc2MzM2My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTY5ZTVmYjgtOGIyZi00YWJhLWI1MjMtMmY1OTAw
Y2JjNGU4L2UzM2NjNjY5ZTZjNDRkNWQyYWM5MThkNTAzODBkZDAwYWI5NDEwZGMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NjllNWZiOC04YjJmLTRhYmEtYjUyMy0yZjU5
MDBjYmM0ZTgvNzEzNDY2ZWI1YTNiZDExOGI3MmYwMDc4ZWVhM2JiOTkwZjc2MzM2
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi2z/DANBgkqhkiG9w0BAQsFAAOCAQEAH3DOuBiQ3GMbCtdm
xuR3kbGpTzgC8cKohyjvjlTpemwfVrxRu9w7E8xv7SoSN6vwmh2YCgGrLv91QVIf
c1pyxww3BybACHF6tlK214MjEHUbmYfGb/UzBBkDXUOasfxSTc6azV8vekoF6qZ7
XsFn2LrN70qqtVhBS7uvuIZ6VRgND2ye2IDZZNQJA5kjjyii3iy45uKDwJLqmKAF
JfNVMi3Crj4EWkT2RCA1fUxO7ZPOl2yLlH2LqoO5ZuXZqxeGMpxNEULd2I9+LgPc
0a4jUFEtZrzG5EcMe46GETPxYWKDFndJTK1Hfz0UF3HlPvvqHZmKRi+ZBeOO1CjU
l8qFNw==
-----END CERTIFICATE-----
Generated at Fri Nov 17 05:39:06 2023 by rpki-client on console-ams.rpki-client.org