Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/23d251ed33b4223d079c12ec59b0942d9f4296f8.roa
File: 23d251ed33b4223d079c12ec59b0942d9f4296f8.roa (raw, json)
Hash identifier: GMRPKdHlAs3Nzr/Ye5/725m6qBadgXD2KxkBb7TJB9g=
Subject key identifier: C0:AE:C1:FD:76:F4:05:A2:4A:9D:BB:76:54:E8:61:0A:1A:24:C1:F3
Certificate issuer: /CN=cbe7d2b83c34a0dd403c92689aedd57f0a182b5d
Certificate serial: 1C4020
Authority key identifier: 86:D3:3F:22:62:AB:D4:D9:E6:7D:0C:BC:33:FB:72:F6:1D:CD:CD:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/23d251ed33b4223d079c12ec59b0942d9f4296f8.roa
Signing time: Tue 31 Jan 2023 17:33:10 +0000
ROA not before: Mon 30 Jan 2023 17:32:41 +0000
ROA not after: Fri 31 Jan 2025 17:32:41 +0000
asID: 266668
IP address blocks: 45.228.188.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1851424 (0x1c4020)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe7d2b83c34a0dd403c92689aedd57f0a182b5d
Validity
Not Before: Jan 30 17:32:41 2023 GMT
Not After : Jan 31 17:32:41 2025 GMT
Subject: CN=23d251ed33b4223d079c12ec59b0942d9f4296f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9e:b0:8a:80:6b:34:1d:ed:6e:77:a9:45:06:
84:7f:28:fe:55:c0:de:55:f5:98:8a:e3:c7:83:ac:
29:6a:49:c4:50:90:85:07:01:5f:96:b6:f9:35:a4:
1b:c5:8b:e6:e5:c6:92:41:13:59:51:01:4d:46:a9:
05:65:9a:3d:37:e2:91:02:f9:ae:68:50:ac:3b:82:
31:8a:59:e2:1f:58:87:a5:45:d2:e7:eb:00:af:dc:
0a:74:57:d8:92:d8:23:40:8e:ac:0d:c6:5c:47:50:
68:08:e0:a7:b5:7f:8c:3b:9c:24:66:fe:5d:ec:d7:
67:ba:d9:0e:66:90:ae:8f:33:44:bf:73:54:c1:a5:
73:66:b3:ba:15:ab:c0:77:97:2b:d1:69:29:1d:71:
f4:1d:b1:42:42:20:ef:8f:f7:30:dc:7e:b2:0c:f7:
72:4a:7b:49:56:8c:a9:60:a2:5b:98:d0:df:e5:b4:
24:0b:93:48:b1:69:0f:76:12:1d:05:c3:98:81:79:
90:96:0b:48:ac:20:38:55:58:c9:39:39:91:44:69:
80:b7:1b:82:c9:09:27:df:9a:9d:42:7f:ca:dd:99:
0f:c8:0e:2d:61:d8:41:82:e0:85:ee:d3:2d:8f:11:
fe:bd:ca:12:26:d3:34:d3:5c:df:e3:f6:a1:99:62:
b7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:AE:C1:FD:76:F4:05:A2:4A:9D:BB:76:54:E8:61:0A:1A:24:C1:F3
X509v3 Authority Key Identifier:
keyid:86:D3:3F:22:62:AB:D4:D9:E6:7D:0C:BC:33:FB:72:F6:1D:CD:CD:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/23d251ed33b4223d079c12ec59b0942d9f4296f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.188.0/24
Signature Algorithm: sha256WithRSAEncryption
31:8f:75:bd:39:c1:f6:35:38:05:c2:57:a7:7a:38:47:82:73:
f8:49:dd:1b:4d:40:37:5d:eb:75:f7:0b:80:e5:3c:7d:45:a2:
2a:f6:56:ee:1e:18:1b:dd:c4:9f:32:ac:72:1b:01:d6:1d:14:
ad:ba:56:f6:55:fa:83:49:eb:5b:94:0d:7a:a4:90:ac:08:37:
0a:88:a7:22:b8:5b:2f:eb:87:4d:b2:4d:5b:52:bf:a5:50:41:
1b:0a:56:e7:fd:72:de:cd:01:4e:56:e6:50:c6:05:a8:18:70:
cb:ea:0e:80:b6:62:cb:a9:c6:8d:c9:bc:70:e1:4a:ee:76:20:
75:55:f6:49:e1:dc:75:75:9f:58:59:c8:77:3a:8c:b9:aa:0b:
a3:51:ec:4c:de:a0:3f:fd:e5:ab:3f:7f:80:b9:d9:c2:b1:80:
aa:81:4a:67:1f:f3:3a:db:01:71:07:10:0c:f4:77:85:1f:dd:
96:d4:9a:53:7c:0e:f6:79:c0:cc:56:97:1d:f9:94:be:5e:98:
f6:45:6b:f4:7e:fb:14:1d:71:5a:c1:c1:a4:1d:f2:41:05:43:
89:7a:9e:04:fe:48:1f:ec:77:65:11:35:24:e4:f9:1c:d3:e9:
c1:7f:74:bd:40:5c:f3:0c:63:95:5d:b1:08:5f:45:5d:a2:ca:
90:f3:8a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 19 21:15:12 2023 by rpki-client on console-fra.rpki-client.org