Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a09f418b-f058-47d0-b923-0965eee9c3dd/3c47b0b67aed67aa031058cd8356426972dfe4a0.roa
File: 3c47b0b67aed67aa031058cd8356426972dfe4a0.roa (raw, json)
Hash identifier: HPoWGaSytkJ/fXnQYkBxLZlFd+8PEipaT1Ut4CyQbPM=
Subject key identifier: 02:44:A0:EE:F4:F9:62:95:66:84:43:66:27:9D:76:75:66:6B:DB:84
Certificate issuer: /CN=e968e7767f9eef64694a8a23c6caf72aa6d20432
Certificate serial: 0C402C
Authority key identifier: 40:6E:FE:B9:69:C9:C0:8C:26:82:93:5E:51:2D:8E:1C:35:0B:35:93
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e968e7767f9eef64694a8a23c6caf72aa6d20432.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a09f418b-f058-47d0-b923-0965eee9c3dd/3c47b0b67aed67aa031058cd8356426972dfe4a0.roa
Signing time: Wed 24 Mar 2021 14:45:26 +0000
ROA not before: Wed 24 Mar 2021 14:45:26 +0000
ROA not after: Tue 24 Mar 2026 14:45:26 +0000
asID: 265867
IP address blocks: 45.225.70.0/23 maxlen: 24
45.225.74.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 802860 (0xc402c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e968e7767f9eef64694a8a23c6caf72aa6d20432
Validity
Not Before: Mar 24 14:45:26 2021 GMT
Not After : Mar 24 14:45:26 2026 GMT
Subject: CN=3c47b0b67aed67aa031058cd8356426972dfe4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:35:10:a0:8a:71:31:16:94:38:9c:64:7c:5c:
ca:ea:dc:bf:ac:33:ce:7f:22:4b:20:9a:12:9a:f3:
15:db:f9:32:6c:f3:7c:c7:5d:4c:db:c8:54:14:74:
ae:52:31:13:1e:3b:c3:cb:52:f2:8c:cd:5e:39:19:
23:3f:5d:d0:56:19:01:79:7e:46:1d:65:04:5a:3a:
ac:09:77:a9:57:94:09:8a:21:f5:0e:1c:41:d4:28:
85:18:32:62:60:e8:86:87:db:66:76:a2:89:0d:fe:
49:e9:ef:de:34:b6:7d:ce:59:b5:6b:39:49:a5:e8:
b1:df:f6:29:a3:be:94:c7:42:0c:e4:ea:ed:72:71:
9e:bd:be:12:87:e3:ab:89:a6:7c:21:e6:67:64:ca:
2f:40:33:61:c6:52:da:97:af:6f:fe:44:c6:ef:cb:
d3:79:55:5e:22:00:82:11:07:73:b9:50:91:4b:2a:
61:83:1e:ea:d0:8b:ab:08:33:1d:39:80:3a:23:f3:
91:a6:d0:fd:b6:87:a2:91:4e:81:51:2e:a8:ec:5f:
14:0a:e9:8d:f2:c4:b5:18:6c:be:58:6f:ed:3f:39:
97:1e:33:24:38:1c:55:b6:02:32:d7:ad:39:e3:b6:
ac:97:d8:0d:4b:ba:ce:05:8f:df:02:09:7f:76:41:
fd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:44:A0:EE:F4:F9:62:95:66:84:43:66:27:9D:76:75:66:6B:DB:84
X509v3 Authority Key Identifier:
keyid:40:6E:FE:B9:69:C9:C0:8C:26:82:93:5E:51:2D:8E:1C:35:0B:35:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e968e7767f9eef64694a8a23c6caf72aa6d20432.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a09f418b-f058-47d0-b923-0965eee9c3dd/3c47b0b67aed67aa031058cd8356426972dfe4a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a09f418b-f058-47d0-b923-0965eee9c3dd/e968e7767f9eef64694a8a23c6caf72aa6d20432.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.70.0/23
45.225.74.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:db:d1:e8:ba:6e:04:7c:6e:e0:59:1c:0d:a0:dc:1d:bb:2e:
e3:8b:ec:2e:7b:a6:ab:03:07:26:46:8d:6e:ab:54:e5:89:6b:
2f:b9:5c:11:91:e1:a3:b3:05:3a:aa:bc:ce:af:f3:9e:7d:da:
f3:54:34:1c:5f:1e:b1:17:dd:a7:ed:42:3c:de:6c:03:5f:0c:
60:7e:b0:db:f3:83:8b:5e:d3:e1:7e:45:4e:77:d8:12:75:47:
bf:9c:a2:e6:b2:a9:e9:b8:91:c2:bc:bc:be:7f:c8:c6:7e:f1:
99:36:7f:7f:8a:97:97:aa:0e:3f:e1:b8:40:44:0f:01:d0:38:
2a:4b:e8:df:b0:61:5e:38:94:e5:94:03:00:58:c4:c0:19:02:
7f:e8:67:7b:5c:cd:d9:f1:5e:43:1e:05:22:3d:e3:15:9a:08:
db:cc:99:f4:02:02:55:d7:93:90:cc:2d:fc:e7:56:cf:a8:e3:
34:2f:4d:83:1f:d8:9b:54:24:91:30:41:d4:20:f3:82:2c:6e:
75:c4:19:bf:27:98:17:35:5c:46:ba:e2:f3:14:3e:eb:71:e9:
44:55:6f:c9:8e:79:54:98:cb:44:6c:2f:20:c4:a0:80:83:af:
b8:77:47:e6:a9:b9:13:fc:fd:62:88:ce:a5:64:9b:40:ef:3b:
63:e9:71:99
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDDEAsMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU5
NjhlNzc2N2Y5ZWVmNjQ2OTRhOGEyM2M2Y2FmNzJhYTZkMjA0MzIwHhcNMjEwMzI0
MTQ0NTI2WhcNMjYwMzI0MTQ0NTI2WjAzMTEwLwYDVQQDEygzYzQ3YjBiNjdhZWQ2
N2FhMDMxMDU4Y2Q4MzU2NDI2OTcyZGZlNGEwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoDUQoIpxMRaUOJxkfFzK6ty/rDPOfyJLIJoSmvMV2/kybPN8
x11M28hUFHSuUjETHjvDy1LyjM1eORkjP13QVhkBeX5GHWUEWjqsCXepV5QJiiH1
DhxB1CiFGDJiYOiGh9tmdqKJDf5J6e/eNLZ9zlm1azlJpeix3/Ypo76Ux0IM5Ort
cnGevb4Sh+OriaZ8IeZnZMovQDNhxlLal69v/kTG78vTeVVeIgCCEQdzuVCRSyph
gx7q0IurCDMdOYA6I/ORptD9toeikU6BUS6o7F8UCumN8sS1GGy+WG/tPzmXHjMk
OBxVtgIy160547asl9gNS7rOBY/fAgl/dkH9lQIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFAJEoO70+WKVZoRDZieddnVma9uEMB8GA1UdIwQYMBaAFEBu/rlpycCMJoKT
XlEtjhw1CzWTMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTk2OGU3
NzY3ZjllZWY2NDY5NGE4YTIzYzZjYWY3MmFhNmQyMDQzMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTA5ZjQxOGItZjA1OC00N2QwLWI5MjMtMDk2NWVl
ZTljM2RkLzNjNDdiMGI2N2FlZDY3YWEwMzEwNThjZDgzNTY0MjY5NzJkZmU0YTAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMDlmNDE4Yi1mMDU4LTQ3ZDAtYjkyMy0wOTY1
ZWVlOWMzZGQvZTk2OGU3NzY3ZjllZWY2NDY5NGE4YTIzYzZjYWY3MmFhNmQyMDQz
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAS3hRgMEAC3hSjANBgkqhkiG9w0BAQsFAAOCAQEALdvR6Lpu
BHxu4FkcDaDcHbsu44vsLnumqwMHJkaNbqtU5YlrL7lcEZHho7MFOqq8zq/znn3a
81Q0HF8esRfdp+1CPN5sA18MYH6w2/ODi17T4X5FTnfYEnVHv5yi5rKp6biRwry8
vn/Ixn7xmTZ/f4qXl6oOP+G4QEQPAdA4Kkvo37BhXjiU5ZQDAFjEwBkCf+hne1zN
2fFeQx4FIj3jFZoI28yZ9AICVdeTkMwt/OdWz6jjNC9Ngx/Ym1QkkTBB1CDzgixu
dcQZvyeYFzVcRrri8xQ+63HpRFVvyY55VJjLRGwvIMSggIOvuHdH5qm5E/z9YojO
pWSbQO87Y+lxmQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:34 2023 by rpki-client on console-fra.rpki-client.org