Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/34352e3233352e39382e302f32332d3234203d3e20323636373737.roa
File: 34352e3233352e39382e302f32332d3234203d3e20323636373737.roa (raw, json)
Hash identifier: BoGcoSjfOanL2aNPD4bH+3e63kPRprzMGsCJX7+wzSo=
Subject key identifier: 48:60:DE:EA:EF:7B:BD:D4:01:91:A3:D5:25:AA:51:6A:A1:F3:94:97
Certificate issuer: /CN=E99008F3C333627E9F8C6939370696F7049C22EB
Certificate serial: 1144F7171DE71D116EC80715245F9F2ADB780D7C
Authority key identifier: E9:90:08:F3:C3:33:62:7E:9F:8C:69:39:37:06:96:F7:04:9C:22:EB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E99008F3C333627E9F8C6939370696F7049C22EB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/34352e3233352e39382e302f32332d3234203d3e20323636373737.roa
Signing time: Wed 02 Oct 2024 03:45:00 +0000
ROA not before: Wed 02 Oct 2024 03:40:00 +0000
ROA not after: Wed 01 Oct 2025 03:45:00 +0000
asID: 266777
IP address blocks: 45.235.98.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Oct 2024 16:35:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:44:f7:17:1d:e7:1d:11:6e:c8:07:15:24:5f:9f:2a:db:78:0d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E99008F3C333627E9F8C6939370696F7049C22EB
Validity
Not Before: Oct 2 03:40:00 2024 GMT
Not After : Oct 1 03:45:00 2025 GMT
Subject: CN=4860DEEAEF7BBDD40191A3D525AA516AA1F39497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a0:36:1e:f0:89:69:9f:52:38:46:a5:26:88:
e0:f1:f5:e3:55:53:30:7f:ec:56:7f:fa:f8:29:79:
a0:07:10:5c:42:cd:3a:e7:c5:61:db:c9:89:e7:0a:
ad:18:a3:d6:16:43:fc:8e:db:9c:1f:c9:e5:0c:e1:
50:33:23:cb:ab:bf:94:49:2b:24:a1:bf:e9:b7:0a:
64:b4:bf:62:ab:cb:8f:ab:9d:56:df:db:ca:22:d0:
ff:bb:43:45:1f:08:b8:76:72:b0:64:7c:21:1d:c7:
dd:94:fe:94:2e:44:61:05:04:fb:7a:4d:57:1c:2a:
14:49:78:56:e0:55:7b:ac:ec:0a:d7:19:54:8e:74:
5d:a1:50:5b:c0:2d:85:a4:70:84:db:ac:e4:64:6d:
d3:96:41:92:61:9c:f4:79:a9:4e:1a:7f:27:86:fc:
73:4f:97:41:e6:c5:4d:95:74:d7:18:78:f5:41:77:
cb:98:d5:28:7f:d9:26:5b:2b:1a:fe:f6:57:03:58:
ef:aa:13:d2:e3:d7:a8:5e:6e:1d:10:77:43:fd:1b:
4f:61:31:a8:80:cb:bb:cb:fd:cf:79:fa:7e:65:ab:
06:ac:5d:83:8f:b5:cd:09:a1:d7:05:52:d2:e5:b1:
20:db:9f:7e:a0:ab:2a:0a:09:94:e5:d9:dc:5b:ba:
9b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:60:DE:EA:EF:7B:BD:D4:01:91:A3:D5:25:AA:51:6A:A1:F3:94:97
X509v3 Authority Key Identifier:
keyid:E9:90:08:F3:C3:33:62:7E:9F:8C:69:39:37:06:96:F7:04:9C:22:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/E99008F3C333627E9F8C6939370696F7049C22EB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E99008F3C333627E9F8C6939370696F7049C22EB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/34352e3233352e39382e302f32332d3234203d3e20323636373737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.235.98.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:10:1c:a3:df:e3:37:1f:b7:09:a5:77:8f:27:10:12:f1:31:
ed:27:be:cc:88:84:d9:dd:a9:8e:24:cb:1a:19:59:f4:75:4e:
74:4e:0c:bc:ed:ba:82:7d:72:9e:2a:d6:be:11:af:39:7b:f9:
5b:ea:9e:c6:d7:36:a2:ef:67:c1:7a:31:40:e5:26:17:3a:19:
e8:5b:64:aa:fa:55:fa:7d:67:8c:4e:e2:b2:81:be:7c:cb:38:
15:a0:44:5a:d9:10:7b:5d:49:57:b0:66:7f:bb:bb:78:0d:c2:
32:79:12:a3:41:c9:c5:f3:01:4e:ac:79:a9:68:9e:5a:54:ca:
c7:c1:8b:c3:27:85:3a:0f:74:b5:37:ac:fe:42:9e:b2:9e:74:
be:a0:21:dc:cb:6b:90:3d:3c:13:3e:f3:0b:3b:53:a4:56:5b:
99:a8:3a:5b:91:cf:6b:07:d3:b4:4b:a9:47:1d:e6:d5:7b:fc:
7d:20:3b:d3:b7:24:af:79:57:db:0e:79:1b:bf:84:4c:3b:2e:
31:bd:65:c6:26:50:08:88:c5:6f:e2:50:f9:6b:41:c3:aa:d4:
39:7a:ed:cc:a4:90:d1:15:94:42:44:01:84:d5:bd:13:2e:c6:
71:2e:b5:71:f2:dc:16:b4:95:6a:93:1c:0e:bc:63:db:23:a8:
77:a8:5c:77
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUEUT3Fx3nHRFuyAcVJF+fKtt4DXwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk5MDA4RjNDMzMzNjI3RTlGOEM2OTM5MzcwNjk2Rjcw
NDlDMjJFQjAeFw0yNDEwMDIwMzQwMDBaFw0yNTEwMDEwMzQ1MDBaMDMxMTAvBgNV
BAMTKDQ4NjBERUVBRUY3QkJERDQwMTkxQTNENTI1QUE1MTZBQTFGMzk0OTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNoDYe8Ilpn1I4RqUmiODx9eNV
UzB/7FZ/+vgpeaAHEFxCzTrnxWHbyYnnCq0Yo9YWQ/yO25wfyeUM4VAzI8urv5RJ
KyShv+m3CmS0v2Kry4+rnVbf28oi0P+7Q0UfCLh2crBkfCEdx92U/pQuRGEFBPt6
TVccKhRJeFbgVXus7ArXGVSOdF2hUFvALYWkcITbrORkbdOWQZJhnPR5qU4afyeG
/HNPl0HmxU2VdNcYePVBd8uY1Sh/2SZbKxr+9lcDWO+qE9Lj16hebh0Qd0P9G09h
MaiAy7vL/c95+n5lqwasXYOPtc0JodcFUtLlsSDbn36gqyoKCZTl2dxbupsVAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUSGDe6u97vdQBkaPVJapRaqHzlJcwHwYDVR0j
BBgwFoAU6ZAI88MzYn6fjGk5NwaW9wScIuswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CN0VCQ0Y0MDdGNjJCQUYxMzNEQ0UwODBDMzFBRTdENEYy
Q0VGOEE2MDNBNDcyQkNFNEE3OEVCQ0E5MzJDODRFLzAvRTk5MDA4RjNDMzMzNjI3
RTlGOEM2OTM5MzcwNjk2RjcwNDlDMjJFQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FOTkwMDhGM0MzMzM2MjdFOUY4
QzY5MzkzNzA2OTZGNzA0OUMyMkVCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjdFQkNGNDA3RjYyQkFGMTMzRENFMDgwQzMxQUU3RDRGMkNFRjhBNjAz
QTQ3MkJDRTRBNzhFQkNBOTMyQzg0RS8wLzM0MzUyZTMyMzMzNTJlMzkzODJlMzAy
ZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzYzNjM3MzczNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS3rYjAN
BgkqhkiG9w0BAQsFAAOCAQEAjBAco9/jNx+3CaV3jycQEvEx7Se+zIiE2d2pjiTL
GhlZ9HVOdE4MvO26gn1ynirWvhGvOXv5W+qextc2ou9nwXoxQOUmFzoZ6FtkqvpV
+n1njE7isoG+fMs4FaBEWtkQe11JV7Bmf7u7eA3CMnkSo0HJxfMBTqx5qWieWlTK
x8GLwyeFOg90tTes/kKesp50vqAh3MtrkD08Ez7zCztTpFZbmag6W5HPawfTtEup
Rx3m1Xv8fSA707ckr3lX2w55G7+ETDsuMb1lxiZQCIjFb+JQ+WtBw6rUOXrtzKSQ
0RWUQkQBhNW9Ey7GcS61cfLcFrSVapMcDrxj2yOod6hcdw==
-----END CERTIFICATE-----
Generated at Wed Oct 2 19:23:17 2024 by rpki-client on console-fra.rpki-client.org