Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/34352e3137352e3134302e302f32332d3234203d3e20323635363633.roa
File: 34352e3137352e3134302e302f32332d3234203d3e20323635363633.roa (raw, json)
Hash identifier: 8+nvNYsJzfwmOWe3eOfOZC/Fjlk/td84Q+SLH6Qn4D4=
Subject key identifier: 12:24:A1:0A:F3:C5:19:A0:33:AE:A4:71:67:C2:87:43:10:5F:EC:34
Certificate issuer: /CN=029141245BD9F1CE31BEF7964E181E44F17CE901
Certificate serial: 2392019AAAD3A2688149EF3506923F06A94677D9
Authority key identifier: 02:91:41:24:5B:D9:F1:CE:31:BE:F7:96:4E:18:1E:44:F1:7C:E9:01
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/029141245BD9F1CE31BEF7964E181E44F17CE901.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/34352e3137352e3134302e302f32332d3234203d3e20323635363633.roa
Signing time: Wed 04 Sep 2024 01:05:00 +0000
ROA not before: Wed 04 Sep 2024 01:00:00 +0000
ROA not after: Wed 03 Sep 2025 01:05:00 +0000
asID: 265663
IP address blocks: 45.175.140.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 20:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:92:01:9a:aa:d3:a2:68:81:49:ef:35:06:92:3f:06:a9:46:77:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=029141245BD9F1CE31BEF7964E181E44F17CE901
Validity
Not Before: Sep 4 01:00:00 2024 GMT
Not After : Sep 3 01:05:00 2025 GMT
Subject: CN=1224A10AF3C519A033AEA47167C28743105FEC34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:02:ed:3f:3c:23:7f:a2:59:8a:fd:28:16:da:
85:a9:09:5a:6f:5c:87:83:08:f1:b4:60:62:be:ef:
14:ef:68:a6:c6:6d:4b:1d:a0:9f:03:a9:db:47:9e:
91:3f:f8:a9:67:56:59:0b:e3:5a:6a:7b:7e:dd:61:
b1:5b:40:f4:ef:f2:91:46:7b:cc:e8:43:32:54:3d:
84:60:39:1c:b6:2b:05:79:85:9a:81:cc:17:c1:27:
5a:41:eb:e6:78:bc:f5:dd:20:9c:73:d8:48:ce:5d:
c1:f4:62:04:67:8b:88:d4:05:dc:53:49:fa:e7:fa:
4d:b9:ba:3b:cd:10:37:20:20:29:3d:cb:73:ee:8f:
12:42:2f:e3:7a:7f:4d:e2:25:37:8c:7a:54:52:eb:
96:14:de:58:f8:8c:2c:7b:c3:50:74:9c:a3:67:3c:
20:66:19:b8:5f:ae:fe:47:e5:fe:23:3c:20:bd:83:
52:b7:9f:ed:06:d2:c8:74:c2:6a:97:c6:5c:2f:94:
27:3a:bc:01:67:05:fb:53:f8:05:17:2e:65:ac:1f:
f8:58:fc:75:61:49:b6:05:bb:bb:f7:18:a5:37:21:
5c:f8:55:e3:b6:5b:59:b1:7e:47:0e:66:94:73:c1:
26:9c:fd:15:43:0e:9a:7a:d8:6a:b8:8f:83:2e:6e:
35:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:24:A1:0A:F3:C5:19:A0:33:AE:A4:71:67:C2:87:43:10:5F:EC:34
X509v3 Authority Key Identifier:
keyid:02:91:41:24:5B:D9:F1:CE:31:BE:F7:96:4E:18:1E:44:F1:7C:E9:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/029141245BD9F1CE31BEF7964E181E44F17CE901.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/029141245BD9F1CE31BEF7964E181E44F17CE901.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/34352e3137352e3134302e302f32332d3234203d3e20323635363633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.175.140.0/23
Signature Algorithm: sha256WithRSAEncryption
65:7a:14:e1:6b:a0:6e:8e:3f:00:1f:ac:ed:86:83:44:0c:fd:
42:68:e7:a9:ff:f0:4e:90:e5:1c:be:9d:c9:28:48:59:78:36:
92:e8:1a:b7:e5:46:e1:5c:75:61:42:71:4d:5c:e0:ac:4a:ad:
9a:34:24:b5:3b:5d:14:ca:ff:7d:5b:64:eb:93:40:9d:70:45:
9d:cc:77:ba:1a:a0:d7:6d:66:26:f6:16:4c:9d:b6:d4:6d:28:
45:25:08:cf:7b:54:01:5a:81:15:6d:a9:ae:49:46:4d:53:49:
d1:62:b4:2d:50:cf:36:6b:70:bd:3a:b8:02:7c:3f:0f:a5:5d:
4a:ca:19:3c:cc:e3:42:4a:e9:2c:6f:cc:de:03:ed:e5:b9:d2:
8d:f0:62:90:1e:ae:e9:6f:7c:2e:03:b9:59:54:36:e6:dc:69:
ea:22:04:9e:e6:f7:5a:f9:96:49:e2:33:91:86:3f:80:7e:bd:
80:f2:41:33:76:e5:6d:01:d7:3e:36:b9:bd:a1:25:f4:fe:e9:
09:8d:5f:9d:6d:57:fc:35:9d:0a:3e:87:9a:21:2e:13:26:48:
91:0a:60:65:ee:59:42:dd:d0:14:49:9d:d4:14:96:c1:b6:53:
31:d0:c5:2c:b1:d8:af:cf:27:aa:f0:e6:8a:c4:08:6d:12:dd:
f4:f0:bf:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 21:26:31 2024 by rpki-client on console-fra.rpki-client.org