Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D864BF39BD20D25B5A821D28360C7C495DBFB17567EA2CD59FF68CDD007CAF40/0/34352e3232342e3131382e302f32342d3234203d3e20323634383336.roa
File: 34352e3232342e3131382e302f32342d3234203d3e20323634383336.roa (raw, json)
Hash identifier: DKkgkUhr7DY+JUnvLQCSpXiv1wvK8kQsuIY/uaXQlDU=
Subject key identifier: 5A:13:E8:19:7B:0C:91:7D:2C:EC:FE:0D:CD:60:7D:26:A7:A7:7C:B8
Certificate issuer: /CN=3995180FA9FF9A6C4E022983421515BB8415A6D5
Certificate serial: 486B2A1311B29F754A80418D5C8B5873A9EF0693
Authority key identifier: 39:95:18:0F:A9:FF:9A:6C:4E:02:29:83:42:15:15:BB:84:15:A6:D5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3995180FA9FF9A6C4E022983421515BB8415A6D5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D864BF39BD20D25B5A821D28360C7C495DBFB17567EA2CD59FF68CDD007CAF40/0/34352e3232342e3131382e302f32342d3234203d3e20323634383336.roa
Signing time: Tue 05 Mar 2024 17:51:48 +0000
ROA not before: Tue 05 Mar 2024 17:46:48 +0000
ROA not after: Tue 04 Mar 2025 17:51:48 +0000
asID: 264836
IP address blocks: 45.224.118.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 May 2024 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:6b:2a:13:11:b2:9f:75:4a:80:41:8d:5c:8b:58:73:a9:ef:06:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3995180FA9FF9A6C4E022983421515BB8415A6D5
Validity
Not Before: Mar 5 17:46:48 2024 GMT
Not After : Mar 4 17:51:48 2025 GMT
Subject: CN=5A13E8197B0C917D2CECFE0DCD607D26A7A77CB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d0:60:73:89:b6:d4:66:df:cb:d0:27:d5:7f:
96:33:02:df:f0:05:48:32:c7:ce:12:25:7f:e8:7c:
2d:76:13:56:72:eb:9d:5a:22:57:19:95:e4:6c:8d:
24:ef:a0:2f:c7:d1:3b:50:c3:e8:00:5d:e8:7f:5e:
0c:ef:44:88:85:67:46:2b:0f:2d:80:e4:e0:9f:c5:
ee:54:e0:33:b3:ad:27:21:bc:2a:4b:60:89:00:51:
a9:47:36:d1:73:2f:22:a6:c1:4a:78:03:61:81:80:
0c:1b:db:49:2b:bf:da:f5:09:b4:ab:f2:4c:1b:70:
b5:b2:f6:e7:c2:0b:fb:a2:a4:e7:f3:54:f1:40:d1:
cf:64:d0:40:3c:f4:b1:3f:d0:0f:93:e5:b4:7e:bc:
76:cb:7c:10:1c:9c:06:b6:87:28:45:bc:33:26:d6:
12:c3:5b:58:65:ef:b8:74:a3:6e:cb:57:1e:1f:93:
b6:3b:43:d5:43:a8:b2:a8:d9:de:c5:20:7d:b5:5d:
a8:69:95:cc:40:7d:0b:3a:9e:13:de:f1:0d:75:32:
e0:45:57:e1:cb:e3:70:ff:dc:a8:2a:f5:e3:56:2b:
31:40:53:df:ec:cf:04:08:4a:9c:69:ef:6c:22:ba:
94:4f:71:7f:81:83:77:03:f3:a3:21:0f:83:6c:94:
58:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:13:E8:19:7B:0C:91:7D:2C:EC:FE:0D:CD:60:7D:26:A7:A7:7C:B8
X509v3 Authority Key Identifier:
keyid:39:95:18:0F:A9:FF:9A:6C:4E:02:29:83:42:15:15:BB:84:15:A6:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D864BF39BD20D25B5A821D28360C7C495DBFB17567EA2CD59FF68CDD007CAF40/0/3995180FA9FF9A6C4E022983421515BB8415A6D5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3995180FA9FF9A6C4E022983421515BB8415A6D5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D864BF39BD20D25B5A821D28360C7C495DBFB17567EA2CD59FF68CDD007CAF40/0/34352e3232342e3131382e302f32342d3234203d3e20323634383336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.224.118.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:1b:d1:ba:77:48:69:80:8f:17:70:ee:1b:8d:85:b8:4a:17:
8c:1b:cf:26:0e:c7:a4:2b:6f:9e:e5:65:0c:0e:b0:72:85:7a:
04:3d:8d:7e:9c:34:61:f9:31:58:b4:d4:a4:aa:6e:36:eb:33:
35:9a:7b:91:d3:5a:a4:c0:07:b5:a4:bd:6e:64:1a:17:a1:e5:
29:cc:5f:b1:71:b1:08:49:38:c1:62:de:ea:f3:50:aa:ca:0c:
97:f0:d7:1c:a8:97:49:26:41:15:3d:68:bd:3f:bd:26:45:53:
85:42:11:bd:f7:1c:8a:5c:7b:74:cc:ce:92:ab:2d:e2:9b:bc:
af:44:88:0e:99:2a:e8:31:f6:14:87:1f:7f:b8:4c:59:44:c4:
68:51:9e:d3:6f:8f:1c:3b:b6:28:c1:d1:56:bd:bc:d1:e1:8b:
fa:06:a3:76:f6:80:47:17:d7:1d:04:30:2d:18:8b:ed:8a:01:
cd:45:d6:28:93:bc:7c:d2:3e:29:e9:5a:7d:ad:2c:dd:62:4e:
f5:9c:ea:12:7f:a3:77:d0:dd:cb:e9:95:79:d8:a5:26:de:7d:
0c:5b:08:60:f7:de:f0:40:bf:9c:fe:63:5d:fd:42:c4:08:6c:
64:c4:d7:b6:1e:f0:0f:3d:c0:8b:b3:bc:46:27:91:ac:23:7f:
a2:86:64:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-ams.rpki-client.org