Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ae2df660-f1f0-4f8d-9cf7-4c2c5380d66b/8b610e23f35c3063cdd9940fcef35b55235e0f2e.roa
File: 8b610e23f35c3063cdd9940fcef35b55235e0f2e.roa (raw, json)
Hash identifier: zFPEwzzGY1yqmwJC+nGfH5+jzHHP2mDJXu7xdt5qlMk=
Subject key identifier: 3B:81:B7:4A:28:AE:B1:FD:0A:C3:23:53:0E:7D:A6:00:1F:C2:5D:21
Certificate issuer: /CN=ffe3fd2c8ac809faeccd1418ff8bd562608b32ba
Certificate serial: 266BFA
Authority key identifier: 9E:F4:8C:1C:F2:16:3A:C1:1C:8D:20:6B:64:75:98:C5:B8:C6:0C:F5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ffe3fd2c8ac809faeccd1418ff8bd562608b32ba.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ae2df660-f1f0-4f8d-9cf7-4c2c5380d66b/8b610e23f35c3063cdd9940fcef35b55235e0f2e.roa
Signing time: Thu 07 Mar 2024 04:50:43 +0000
ROA not before: Thu 07 Mar 2024 04:50:43 +0000
ROA not after: Sat 07 Mar 2026 04:50:43 +0000
asID: 14754
IP address blocks: 45.186.108.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 07 Mar 2024 05:29:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2518010 (0x266bfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe3fd2c8ac809faeccd1418ff8bd562608b32ba
Validity
Not Before: Mar 7 04:50:43 2024 GMT
Not After : Mar 7 04:50:43 2026 GMT
Subject: CN=8b610e23f35c3063cdd9940fcef35b55235e0f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5e:7c:e8:e9:bd:51:bf:95:db:4e:86:55:b9:
53:a2:77:0b:13:64:43:fc:1c:16:99:86:7b:f7:e9:
38:34:ed:34:dd:6c:37:c4:70:ec:95:8b:15:24:de:
36:f6:18:3e:3f:7a:3c:03:fb:f2:b8:db:1e:09:95:
1b:44:fe:c3:ab:3a:04:69:8b:b9:55:5b:06:83:ec:
aa:b6:ae:14:98:92:8e:02:7b:ab:51:12:ef:e3:96:
4b:d3:ec:70:ef:84:57:22:e8:5c:3e:09:bf:86:e3:
db:c6:49:2c:7e:15:93:48:5e:91:da:89:83:3e:67:
48:a3:5e:06:15:e9:84:aa:9e:bb:ba:a1:11:4e:5f:
0b:d9:ca:bb:b2:4b:56:56:c8:f9:50:1c:7c:a9:ea:
38:ae:a3:4c:43:c1:11:74:34:36:3a:d7:ea:66:2e:
14:f0:7e:3e:47:a5:39:0c:42:51:83:ed:c9:1d:67:
70:ea:a1:9d:c6:e0:6a:4c:b2:d7:0e:70:7f:13:56:
7f:3d:ca:56:59:76:3a:0f:42:3e:27:aa:bb:72:be:
15:b8:f7:64:7e:94:a0:e0:f5:d9:ea:40:9f:d7:98:
7a:61:74:67:52:58:fe:cd:6c:94:7d:3a:6d:02:a2:
47:66:fd:5c:86:52:25:cc:06:99:67:ab:55:b2:20:
81:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:81:B7:4A:28:AE:B1:FD:0A:C3:23:53:0E:7D:A6:00:1F:C2:5D:21
X509v3 Authority Key Identifier:
keyid:9E:F4:8C:1C:F2:16:3A:C1:1C:8D:20:6B:64:75:98:C5:B8:C6:0C:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ffe3fd2c8ac809faeccd1418ff8bd562608b32ba.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ae2df660-f1f0-4f8d-9cf7-4c2c5380d66b/8b610e23f35c3063cdd9940fcef35b55235e0f2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ae2df660-f1f0-4f8d-9cf7-4c2c5380d66b/ffe3fd2c8ac809faeccd1418ff8bd562608b32ba.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.186.108.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:55:60:e3:46:9a:46:da:4d:46:35:ce:7d:d3:60:81:dc:84:
52:6c:78:49:c0:46:54:a4:7b:48:d3:0c:29:09:34:5a:fe:b6:
7a:e2:4b:f3:41:d0:bf:1a:e2:47:35:b7:e5:55:be:72:26:7b:
a9:a2:b3:b9:f7:a2:fb:3c:db:6d:f0:7a:75:85:39:a3:23:11:
07:82:0f:bf:d4:f2:8c:b8:e0:8d:b4:1f:e6:e8:23:dd:ef:7d:
2c:65:3f:9f:84:98:20:69:07:c6:d7:1d:b2:51:55:0a:13:ad:
66:b8:20:c7:1f:a3:13:83:f6:03:05:33:73:bf:50:fb:15:80:
6b:a7:15:3f:d1:b5:59:47:f2:67:94:46:a3:5a:ee:e7:cf:5d:
a7:ae:77:18:66:58:c5:e6:b1:e6:2d:78:3b:33:0b:37:da:07:
ca:f2:b1:6f:0e:ce:c1:77:04:f2:74:28:d3:28:eb:43:52:d8:
d3:10:92:db:26:39:31:40:67:fd:2d:75:a2:73:2d:df:f1:2f:
d3:59:29:b9:65:16:f7:be:34:2d:a1:56:e9:bc:85:c0:d6:fd:
5f:71:36:2a:9e:be:33:a7:d8:0d:a0:db:c4:66:7e:79:04:14:
3b:7a:58:f1:b6:76:8c:d7:92:f3:c6:dc:6d:f1:b6:74:8c:31:
0d:1e:71:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 7 06:15:11 2024 by rpki-client on console-ams.rpki-client.org