Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/eba53d3d677cf4661f7860796cceccac1b0fd389.roa
File: eba53d3d677cf4661f7860796cceccac1b0fd389.roa (raw, json)
Hash identifier: 3H7jJRd9LsDDr+MmCqppTPx3inlkZsSrVm9d7Wpg8DA=
Subject key identifier: BC:F1:C3:ED:93:2F:2E:89:25:2D:E0:B2:98:5C:9D:F8:CA:88:9F:C1
Certificate issuer: /CN=cbe7d2b83c34a0dd403c92689aedd57f0a182b5d
Certificate serial: 174080
Authority key identifier: 86:D3:3F:22:62:AB:D4:D9:E6:7D:0C:BC:33:FB:72:F6:1D:CD:CD:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/eba53d3d677cf4661f7860796cceccac1b0fd389.roa
Signing time: Mon 18 Jul 2022 19:42:22 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 266668
IP address blocks: 45.228.188.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1523840 (0x174080)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe7d2b83c34a0dd403c92689aedd57f0a182b5d
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=eba53d3d677cf4661f7860796cceccac1b0fd389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f4:5c:33:d1:77:32:a4:50:c4:bc:82:63:d4:
75:03:4f:b0:ac:36:05:3a:1a:28:03:79:6e:45:04:
56:0a:13:6c:1c:26:cd:e1:d6:46:7d:b4:75:fe:ea:
48:c1:59:09:9e:39:dd:d7:0a:dd:ac:51:da:d3:8f:
9d:af:b1:54:d1:bb:1a:36:f4:21:8a:3f:d9:3d:de:
bd:0a:6b:49:05:d8:11:68:0b:50:5a:55:69:0a:01:
5e:68:94:f3:12:f9:46:c6:5f:55:42:a0:55:2c:6c:
fc:e0:02:0d:13:e4:cb:33:21:db:e3:06:cd:95:71:
4d:71:d6:b9:46:25:93:24:d7:cd:f6:7a:3b:d1:d2:
b3:74:dc:32:16:1a:12:e0:0e:e2:ad:9a:94:fc:65:
4c:7d:4c:5f:71:65:64:7b:1c:93:5b:b8:4a:09:6e:
81:75:96:66:c5:dd:00:66:25:09:e6:72:aa:60:bd:
c7:81:25:03:e9:17:e3:6a:39:f0:fc:1e:5c:e8:ef:
33:1c:02:4a:d2:83:5b:9f:86:08:c5:f2:be:2c:df:
5a:45:2f:cb:ea:8e:86:dd:d0:e4:66:b4:33:6e:98:
66:85:98:41:2c:7f:2c:66:87:5e:24:97:0f:8b:f7:
b1:35:69:fd:24:a9:06:db:12:96:ee:5f:6f:30:50:
38:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F1:C3:ED:93:2F:2E:89:25:2D:E0:B2:98:5C:9D:F8:CA:88:9F:C1
X509v3 Authority Key Identifier:
keyid:86:D3:3F:22:62:AB:D4:D9:E6:7D:0C:BC:33:FB:72:F6:1D:CD:CD:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/eba53d3d677cf4661f7860796cceccac1b0fd389.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.188.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:2b:df:29:56:57:a6:c7:51:21:b7:ad:12:e1:fb:67:d3:32:
8c:f9:54:40:d9:d7:fd:81:14:8e:49:f8:85:a0:02:b4:72:88:
66:d2:25:b0:ca:93:fe:8b:eb:d2:ba:b2:76:b6:ef:e5:3e:d0:
04:65:07:21:d1:7e:2e:bf:0e:b9:f3:c3:6b:e0:8a:8c:6f:b2:
7e:06:21:7b:6a:cc:f7:1f:aa:4a:84:69:d4:24:09:d4:f6:60:
92:73:14:fd:fa:3b:0d:ba:00:6f:e3:a3:b8:6d:b9:3e:a5:a3:
6b:bc:77:f4:d6:12:30:93:fa:d6:f5:0d:d7:96:8b:1a:97:84:
cd:e0:79:ce:d4:7e:c5:c2:d9:ae:97:6b:50:86:e4:f1:98:b5:
ea:3e:09:28:18:c2:f8:87:45:ca:f7:b7:e8:94:f0:f5:dc:89:
2d:66:3b:80:3a:1d:af:c7:ef:c6:72:57:f4:16:2f:c8:77:af:
ff:4b:5c:1d:72:e8:4a:cf:bd:c4:a0:fd:0f:83:8d:68:29:03:
f3:31:ff:c8:b5:a9:52:e5:c9:b3:45:c3:d6:71:c8:a4:7f:b6:
be:1d:62:f4:93:ff:77:f2:c0:27:cd:3d:e1:ac:d4:12:62:5f:
80:9e:2c:75:3c:c5:1d:d2:75:c3:56:eb:63:cc:d3:bd:fb:3d:
c5:75:a1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 19 21:15:12 2023 by rpki-client on console-fra.rpki-client.org