Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a815ce32-f0b4-4b96-8fdf-a0c4a7796f03/d23d943dee570e07bfcfcee5b963417a69ff2039.roa
File: d23d943dee570e07bfcfcee5b963417a69ff2039.roa (raw, json)
Hash identifier: hPuHhNGX3xAyaOgM/GGAnXlPrx55dyvVzKNql+RhQVA=
Subject key identifier: 97:79:62:41:3F:CD:64:97:A8:47:CE:37:82:BF:67:E4:9C:46:5E:C1
Certificate issuer: /CN=264594ab0a87e9fe0523de21ba1d3eda8a994014
Certificate serial: 1618DF
Authority key identifier: 7A:CD:C2:A7:9D:3E:91:CF:5B:35:93:D4:9B:D2:E5:BC:C6:E3:85:0D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/264594ab0a87e9fe0523de21ba1d3eda8a994014.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a815ce32-f0b4-4b96-8fdf-a0c4a7796f03/d23d943dee570e07bfcfcee5b963417a69ff2039.roa
Signing time: Wed 06 Sep 2023 20:17:55 +0000
ROA not before: Tue 05 Sep 2023 20:17:55 +0000
ROA not after: Sat 06 Sep 2025 20:17:55 +0000
asID: 207688
IP address blocks: 45.180.21.0/24 maxlen: 24
45.182.189.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1448159 (0x1618df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=264594ab0a87e9fe0523de21ba1d3eda8a994014
Validity
Not Before: Sep 5 20:17:55 2023 GMT
Not After : Sep 6 20:17:55 2025 GMT
Subject: CN=d23d943dee570e07bfcfcee5b963417a69ff2039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:dc:bc:54:e7:5b:01:18:bd:60:fa:c1:ba:31:
24:45:85:fb:9a:86:b9:3c:56:45:a6:59:b5:f3:44:
88:e1:60:30:07:49:37:91:dd:00:df:1b:40:1f:12:
0b:ce:3f:6f:f2:d4:16:10:47:f6:13:8f:6d:14:6d:
d6:ff:74:4f:b9:25:9d:8d:36:30:ee:67:86:e7:d7:
5e:e3:78:2d:99:a9:8b:52:68:c0:93:cf:16:f2:2e:
6a:89:ed:37:c4:4c:15:98:4f:c7:ae:ce:3f:c8:7c:
5b:b3:8e:0e:8d:cd:ee:85:26:6c:11:db:a7:b0:fd:
c2:6e:fe:e2:4b:70:47:44:60:ab:f4:a3:4e:80:df:
70:0a:cc:71:97:8f:ac:1d:f3:52:fa:c1:e1:8e:4c:
ce:91:51:88:f0:70:15:d6:78:f8:c9:58:c5:ad:d5:
4d:a4:87:49:92:29:98:c2:6c:36:e8:62:79:e5:e5:
07:3d:89:64:c6:ff:b9:40:88:05:19:26:d4:68:35:
3b:1c:d4:f2:1d:ad:17:ad:64:ce:90:7e:7c:fa:12:
53:40:db:69:56:7a:91:d9:09:db:1d:f3:30:c7:0b:
64:08:09:ce:08:5f:34:50:03:9d:63:fa:ad:84:62:
89:c4:98:c4:a4:d3:4b:91:51:b3:61:69:c7:4c:d3:
16:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:79:62:41:3F:CD:64:97:A8:47:CE:37:82:BF:67:E4:9C:46:5E:C1
X509v3 Authority Key Identifier:
keyid:7A:CD:C2:A7:9D:3E:91:CF:5B:35:93:D4:9B:D2:E5:BC:C6:E3:85:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/264594ab0a87e9fe0523de21ba1d3eda8a994014.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a815ce32-f0b4-4b96-8fdf-a0c4a7796f03/d23d943dee570e07bfcfcee5b963417a69ff2039.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a815ce32-f0b4-4b96-8fdf-a0c4a7796f03/264594ab0a87e9fe0523de21ba1d3eda8a994014.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.180.21.0/24
45.182.189.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:94:93:59:8a:3c:0b:21:98:9e:52:13:9d:0a:76:ad:d0:78:
71:53:64:40:82:c1:dd:2e:96:d6:b0:46:f6:16:41:62:4a:96:
9d:26:aa:f0:a6:9f:d0:e6:0c:b7:bf:1e:af:1e:20:b2:f3:ab:
dc:80:81:eb:75:19:e6:44:9d:97:ff:46:3b:f9:62:88:d3:2f:
d3:7c:30:95:ec:ba:53:77:30:8f:b3:bc:d5:26:c8:3b:3d:9d:
a3:49:26:8c:8a:f1:b5:09:78:dd:4f:08:85:0d:a3:8a:21:72:
38:15:0e:5b:f0:ec:e7:ab:ba:75:c9:29:d5:38:5b:9a:36:b6:
52:77:1d:9b:62:93:59:6c:e6:ec:53:9b:91:bb:11:3f:c1:ed:
44:32:34:09:02:d0:7b:b1:d6:a0:f4:df:65:ea:db:94:55:41:
7a:cc:dc:81:d1:fc:ee:1c:d5:31:46:fd:31:52:3c:66:59:07:
dd:97:eb:cd:bb:40:94:57:30:6f:a7:24:52:9f:9e:73:e8:f3:
56:0f:75:0b:5c:fa:a6:01:82:cd:7b:01:87:ff:d1:1e:0d:00:
43:18:33:f0:9d:db:3c:5a:d5:91:c2:94:e0:e7:2b:3e:f4:73:
cd:e8:f3:ee:65:f0:d3:a7:c3:bd:84:6b:b7:b1:8e:79:33:46:
1b:57:b5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 28 16:33:52 2023 by rpki-client on console-fra.rpki-client.org