Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a4bf8ec3-6539-4028-8b9a-0c7bde955789/20e603ac5021d3253766290489376cd3aff2998e.roa
File: 20e603ac5021d3253766290489376cd3aff2998e.roa (raw, json)
Hash identifier: 1i++bHXKZkdY+KsoJs1vZkWBkuIgwfCzQ9JfBuemah4=
Subject key identifier: 5E:D6:32:32:84:7C:31:48:E4:CB:7C:0A:96:3A:4B:1A:9E:44:EA:F1
Certificate issuer: /CN=9d586db69acc08f54288edff4f9498f226daa7cc
Certificate serial: 0E289A
Authority key identifier: 78:5A:06:46:66:21:9A:5F:38:33:E2:75:5C:7A:3D:08:4E:A7:23:7F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d586db69acc08f54288edff4f9498f226daa7cc.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a4bf8ec3-6539-4028-8b9a-0c7bde955789/20e603ac5021d3253766290489376cd3aff2998e.roa
Signing time: Tue 22 Jun 2021 13:54:54 +0000
ROA not before: Tue 22 Jun 2021 03:00:00 +0000
ROA not after: Thu 22 Jun 2023 03:00:00 +0000
asID: 267738
IP address blocks: 45.167.168.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 927898 (0xe289a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d586db69acc08f54288edff4f9498f226daa7cc
Validity
Not Before: Jun 22 03:00:00 2021 GMT
Not After : Jun 22 03:00:00 2023 GMT
Subject: CN=20e603ac5021d3253766290489376cd3aff2998e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:52:ff:e7:68:22:23:ad:b9:39:d2:73:c2:05:
cb:05:6d:6c:3c:68:cb:11:1a:8e:49:1c:f6:21:b6:
8d:b0:95:35:22:44:e5:a5:49:27:56:bc:09:14:d7:
7e:2e:24:46:5f:63:6f:cc:25:30:f9:4a:68:19:0f:
c5:30:83:e5:38:ff:f2:0c:31:36:3d:88:57:c7:1b:
a7:05:f8:7b:24:a4:03:88:2f:55:6a:aa:09:ef:f0:
98:2a:01:dd:24:22:9c:70:09:90:c9:88:85:a0:b4:
f1:46:73:da:14:ff:43:f2:c9:81:0c:8e:e0:41:b3:
60:4a:f9:30:58:bc:97:3b:2d:b0:91:fd:63:e9:73:
49:88:0d:7b:ac:7e:34:f7:30:eb:e5:e4:f9:2b:71:
66:33:78:5d:17:82:e8:12:dc:37:a7:87:d6:a3:39:
17:d3:04:50:be:64:26:d3:5e:01:0c:52:c5:60:85:
e6:bf:da:a8:48:40:10:0f:34:e5:26:9e:12:ed:1e:
de:24:0d:46:82:49:60:7b:9b:53:ec:84:3e:16:ed:
82:4b:e0:3d:6f:91:28:03:e7:36:12:42:d5:4d:e0:
a9:9b:a8:5f:ac:be:64:43:54:42:75:f2:7f:ff:92:
1e:a6:93:dc:11:50:33:98:47:7b:9e:d6:9e:20:f4:
07:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D6:32:32:84:7C:31:48:E4:CB:7C:0A:96:3A:4B:1A:9E:44:EA:F1
X509v3 Authority Key Identifier:
keyid:78:5A:06:46:66:21:9A:5F:38:33:E2:75:5C:7A:3D:08:4E:A7:23:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d586db69acc08f54288edff4f9498f226daa7cc.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a4bf8ec3-6539-4028-8b9a-0c7bde955789/20e603ac5021d3253766290489376cd3aff2998e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a4bf8ec3-6539-4028-8b9a-0c7bde955789/9d586db69acc08f54288edff4f9498f226daa7cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.167.168.0/22
Signature Algorithm: sha256WithRSAEncryption
13:ca:c0:a1:ca:ff:0a:50:36:76:c2:c5:3a:cc:7f:e5:00:15:
56:ea:7c:bf:4c:e5:2a:d9:f7:6c:8a:62:32:bc:05:7a:19:b3:
31:25:b5:8b:e3:33:f0:81:01:63:77:76:5a:10:94:0f:ed:45:
5e:2b:5b:3f:c1:d9:e6:25:1a:da:63:c4:b9:5d:54:73:22:79:
db:92:8d:7d:ee:1a:d2:31:7b:f6:e0:b3:f2:9f:2c:c6:23:30:
f7:3e:ab:0a:25:0d:fc:53:2a:e9:b9:a4:05:42:31:31:20:b2:
ed:90:6f:97:56:7e:0f:d8:a5:28:d6:61:f2:98:8b:ec:f1:ec:
93:35:11:57:42:eb:b0:3b:3e:3c:e6:98:a2:c2:22:5a:eb:39:
9f:66:24:cc:62:87:be:17:ae:8f:17:6b:fa:83:30:38:bf:57:
fd:af:df:54:ef:ab:aa:76:88:1c:f7:42:68:75:87:c9:d7:06:
75:4e:41:ac:0c:bd:7d:41:ba:63:7c:1b:04:04:9d:2a:8a:89:
18:69:2d:39:6e:eb:6d:49:bd:4c:99:9f:9a:74:31:e8:74:ed:
6b:e0:43:ca:da:99:9d:76:ee:f2:5d:94:82:bb:80:45:9d:fc:
6e:ff:97:20:90:41:57:4b:e0:0e:6e:14:e1:8c:f7:08:c8:77:
6d:dd:42:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:35 2023 by rpki-client on console-fra.rpki-client.org