Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/a552f7d48fe5d72a2e87b071d9451d1fe44139ec.roa
File: a552f7d48fe5d72a2e87b071d9451d1fe44139ec.roa (raw, json)
Hash identifier: HOi2BoVYe7M83Jkf26abe5nvU0dVlTvcxz76E4nn+tY=
Subject key identifier: DE:1D:A8:B6:6B:68:96:7C:42:80:27:4C:CE:50:88:F2:C2:CC:A5:4C
Certificate issuer: /CN=cbe7d2b83c34a0dd403c92689aedd57f0a182b5d
Certificate serial: 1C48E3
Authority key identifier: 86:D3:3F:22:62:AB:D4:D9:E6:7D:0C:BC:33:FB:72:F6:1D:CD:CD:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/a552f7d48fe5d72a2e87b071d9451d1fe44139ec.roa
Signing time: Tue 31 Jan 2023 17:34:45 +0000
ROA not before: Mon 30 Jan 2023 17:34:16 +0000
ROA not after: Fri 31 Jan 2025 17:34:16 +0000
asID: 266668
IP address blocks: 45.228.191.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1853667 (0x1c48e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe7d2b83c34a0dd403c92689aedd57f0a182b5d
Validity
Not Before: Jan 30 17:34:16 2023 GMT
Not After : Jan 31 17:34:16 2025 GMT
Subject: CN=a552f7d48fe5d72a2e87b071d9451d1fe44139ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:44:f9:80:a3:4f:d2:64:f1:2e:70:b4:13:d9:
8e:0d:29:e4:2b:1b:57:fc:15:27:21:d3:92:4b:40:
ce:13:20:d1:a0:57:3c:27:a5:48:33:98:e6:1f:63:
8f:65:b0:19:22:14:66:ff:00:5b:f3:8b:38:4b:9d:
61:d2:05:fb:14:36:71:b6:7e:2c:fb:36:0d:e1:1e:
f7:49:86:e9:96:08:8c:4e:cf:b2:83:3f:e8:6f:18:
9e:4d:23:ce:75:ec:72:93:5f:2d:69:f3:64:d0:8e:
be:6c:64:3e:9b:6e:1c:d4:1c:95:ee:9e:fe:40:17:
99:d4:32:2b:9c:01:39:78:df:4f:e1:c6:37:83:6f:
19:af:85:6b:0a:6e:8f:49:24:92:28:9b:aa:05:ab:
8d:54:91:25:ae:0a:b0:13:62:f1:82:7f:db:7a:9a:
4e:65:45:e8:a0:95:e8:b7:30:07:d2:ec:00:94:42:
14:be:32:cb:57:87:5b:9c:25:66:ce:05:df:48:8b:
ff:5f:0e:7c:af:d3:af:c7:9a:74:75:e4:42:97:3a:
4a:4d:e2:30:8d:61:3e:63:2b:e0:f1:0b:06:59:dd:
df:5a:6a:bd:ee:ac:b7:37:35:b6:90:9a:6c:10:81:
8c:f3:8e:1f:98:15:ae:6f:b9:e8:b0:5c:8a:99:06:
95:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:1D:A8:B6:6B:68:96:7C:42:80:27:4C:CE:50:88:F2:C2:CC:A5:4C
X509v3 Authority Key Identifier:
keyid:86:D3:3F:22:62:AB:D4:D9:E6:7D:0C:BC:33:FB:72:F6:1D:CD:CD:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/a552f7d48fe5d72a2e87b071d9451d1fe44139ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.191.0/24
Signature Algorithm: sha256WithRSAEncryption
30:fb:77:92:31:2c:66:cb:53:1f:73:92:1a:05:29:51:e0:56:
24:c8:2d:23:96:d7:7d:26:f6:af:41:c1:35:ad:3b:12:a9:f6:
c8:35:58:5e:24:ef:f3:5a:eb:ca:1b:a3:1f:47:3e:0d:fb:46:
b2:69:1e:f7:40:cd:48:92:e0:51:02:5a:2c:d5:45:9e:64:1b:
cc:57:b8:b0:36:cb:88:5f:30:18:8f:50:82:28:b2:75:0f:9e:
92:96:3a:08:d9:22:a4:98:fd:fe:89:4b:55:ff:80:73:9d:cf:
bb:ee:f4:87:5d:a5:97:24:c6:c1:8c:97:fd:d8:3f:59:56:e5:
fe:40:a4:af:12:a0:97:be:22:64:bb:fa:db:bf:4a:c0:0b:0c:
6b:f2:f0:e4:3a:4b:1d:89:23:09:79:eb:bf:41:0c:b0:88:b9:
60:f4:45:c3:af:e9:e6:c6:71:14:33:87:24:5f:1d:c5:a8:e3:
8c:85:b7:91:84:3b:01:a1:27:60:18:19:8c:3c:ca:2a:10:e7:
5c:df:03:e7:1a:c6:32:af:d3:80:a8:7f:be:11:21:8a:52:c0:
54:a1:52:aa:39:69:e5:02:0e:ab:1b:d9:06:50:b7:0c:c2:f9:
76:4e:f5:29:cb:43:b5:1c:47:10:f3:8d:22:a0:b2:a6:27:39:
9f:bf:de:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 19 20:55:48 2023 by rpki-client on console-ams.rpki-client.org