Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d9462a8-9f3c-4527-bb46-c1e9346a9feb/2b42acea3a607e8b676f72aad4198c5b1e79f190.roa
File: 2b42acea3a607e8b676f72aad4198c5b1e79f190.roa (raw, json)
Hash identifier: sa6LYHcdfET9Zj0HiAVnfFL0eprbNTENuUlWxz4IJNA=
Subject key identifier: FE:41:0B:BB:AC:8D:CA:63:D4:3F:CF:E7:C0:FA:C9:42:4E:BD:14:AE
Certificate issuer: /CN=cbd22aa435cb28d447ede265adf51bfeaaba86c5
Certificate serial: 03E9AD
Authority key identifier: D5:25:2C:0B:0D:06:46:80:46:17:58:EC:64:B2:28:E5:4E:AC:B7:BB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbd22aa435cb28d447ede265adf51bfeaaba86c5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9d9462a8-9f3c-4527-bb46-c1e9346a9feb/2b42acea3a607e8b676f72aad4198c5b1e79f190.roa
Signing time: Wed 24 Mar 2021 14:33:10 +0000
ROA not before: Wed 24 Mar 2021 14:33:10 +0000
ROA not after: Tue 24 Mar 2026 14:33:10 +0000
asID: 266830
IP address blocks: 45.238.20.0/24 maxlen: 24
45.238.21.0/24 maxlen: 24
45.238.22.0/24 maxlen: 24
45.238.23.0/24 maxlen: 24
2803:f4a0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 256429 (0x3e9ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd22aa435cb28d447ede265adf51bfeaaba86c5
Validity
Not Before: Mar 24 14:33:10 2021 GMT
Not After : Mar 24 14:33:10 2026 GMT
Subject: CN=2b42acea3a607e8b676f72aad4198c5b1e79f190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b1:d0:a2:74:d0:88:81:39:2d:ac:f3:19:36:
d5:e3:2f:88:c5:13:9a:74:79:d8:99:d5:c3:cd:b2:
0b:ee:7c:b0:76:8d:e3:8f:18:f0:e9:5d:42:61:e4:
bf:89:c1:65:d8:07:88:6e:f1:db:62:aa:c0:0c:5a:
14:f0:09:9b:59:5b:cb:19:29:b7:a7:24:86:de:f3:
c8:ab:c5:b1:b5:28:6b:6d:86:e6:12:0a:2b:bf:ba:
29:11:7b:7b:b7:8e:4d:57:91:6e:15:32:3e:4e:d3:
de:bb:65:80:4f:e9:20:0b:5c:e0:63:87:63:c2:2e:
be:53:34:db:c7:3c:af:88:81:01:32:2f:0e:4e:0e:
4e:3d:4c:46:a7:d1:ad:d9:a6:a1:5b:96:e0:6c:dd:
a4:e0:13:ae:47:3e:4e:e7:e3:cf:f8:d0:8d:e2:01:
e5:9d:57:ae:0e:2f:07:de:e7:00:dc:36:7e:92:e7:
cd:f1:3e:8e:8a:d8:77:9e:0f:af:e4:4e:63:40:24:
5d:a8:f2:ee:cd:95:68:e2:55:0d:97:98:a5:0c:3a:
11:4f:db:16:91:5e:7d:3a:7b:0d:4d:62:31:83:5c:
74:0d:c4:eb:70:da:8a:6e:d5:8b:94:b9:c8:e8:64:
7e:39:01:47:7b:ca:b4:96:a7:09:91:78:b3:d5:ad:
77:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:41:0B:BB:AC:8D:CA:63:D4:3F:CF:E7:C0:FA:C9:42:4E:BD:14:AE
X509v3 Authority Key Identifier:
keyid:D5:25:2C:0B:0D:06:46:80:46:17:58:EC:64:B2:28:E5:4E:AC:B7:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbd22aa435cb28d447ede265adf51bfeaaba86c5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d9462a8-9f3c-4527-bb46-c1e9346a9feb/2b42acea3a607e8b676f72aad4198c5b1e79f190.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9d9462a8-9f3c-4527-bb46-c1e9346a9feb/cbd22aa435cb28d447ede265adf51bfeaaba86c5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.20.0/22
IPv6:
2803:f4a0::/32
Signature Algorithm: sha256WithRSAEncryption
7e:ec:40:91:89:8f:df:7d:18:48:59:93:51:0f:3c:fd:d8:3a:
ad:f6:61:23:6f:c6:13:95:1b:ee:b5:55:a1:7f:d2:6f:f9:4a:
10:97:de:22:3a:63:a4:ea:1e:89:14:86:fe:e4:5c:16:1e:6c:
4e:d2:c7:97:04:2f:bf:51:52:20:7b:72:c4:37:41:36:4f:fa:
d6:5c:bc:fe:97:d1:5f:92:14:62:c7:fa:38:b1:94:9e:f9:df:
ac:19:1a:af:55:cb:3b:12:50:64:97:46:f1:bd:0c:6c:e3:12:
cc:c0:f3:b6:52:82:b3:f0:b3:73:cd:74:8a:88:0f:89:f5:0e:
b6:18:e6:a1:db:dc:94:48:2e:18:30:c6:1c:a5:bc:1d:55:cf:
ab:63:d9:4e:05:d0:f8:00:29:f3:86:74:69:34:bf:49:4e:a7:
4e:36:88:47:d1:8e:de:2d:c2:0a:89:e3:a4:0b:8c:df:eb:a5:
41:44:99:80:11:2d:bd:f7:8e:a4:0b:0b:dc:02:84:b4:0e:10:
57:6f:42:25:bb:18:92:73:b1:6f:30:27:e6:1f:a2:09:69:15:
e3:ee:a6:02:1e:52:7f:80:82:94:48:ba:bd:89:8e:d9:8c:23:
0c:4c:44:d1:de:15:08:82:2d:45:58:58:a0:3d:77:56:0e:cf:
e5:fc:0e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:47 2023 by rpki-client on console-ams.rpki-client.org