Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b4810948-d2be-4ff7-a49d-9518f1732a5a/9de718f618fd5bad744c678ab585e62b3a2b1283.roa
File: 9de718f618fd5bad744c678ab585e62b3a2b1283.roa (raw, json)
Hash identifier: SamJ3Vm7b3rv/OuCgMkbB2KH/9gbBkCO5/Ibx51QMcw=
Subject key identifier: C9:35:09:4C:EA:69:03:3B:E3:D7:79:0F:E0:C0:6C:FD:F0:F7:4B:1F
Certificate issuer: /CN=74ceb21261d995f6744c5614710320d1ad4b79f6
Certificate serial: 26D88A
Authority key identifier: FA:E5:7E:91:CE:52:47:08:AB:10:B2:16:82:17:A8:91:B8:38:C0:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74ceb21261d995f6744c5614710320d1ad4b79f6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b4810948-d2be-4ff7-a49d-9518f1732a5a/9de718f618fd5bad744c678ab585e62b3a2b1283.roa
Signing time: Thu 08 Feb 2024 00:31:37 +0000
ROA not before: Thu 08 Feb 2024 00:31:36 +0000
ROA not after: Sun 08 Feb 2026 00:31:36 +0000
asID: 266706
IP address blocks: 45.229.188.0/23 maxlen: 24
45.229.188.0/23 maxlen: 24
45.229.190.0/24 maxlen: 24
2803:bd20::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 08 Feb 2024 15:08:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2545802 (0x26d88a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74ceb21261d995f6744c5614710320d1ad4b79f6
Validity
Not Before: Feb 8 00:31:36 2024 GMT
Not After : Feb 8 00:31:36 2026 GMT
Subject: CN=9de718f618fd5bad744c678ab585e62b3a2b1283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7b:43:03:39:2b:04:a1:55:79:19:c0:e3:44:
4d:d3:c4:94:f0:ff:b9:18:25:c0:93:92:54:9b:e8:
ed:80:f1:6a:58:7c:4d:0e:5d:ba:50:8c:6d:5f:e9:
e4:c7:af:0e:6a:26:8f:d2:11:b9:a9:d2:ac:be:4e:
84:c6:8b:5b:b3:db:49:c5:7a:06:66:00:f0:db:28:
da:3c:82:80:af:ac:fa:d1:6e:65:07:fc:7e:58:e5:
34:cf:31:04:51:1e:dc:6e:1e:8f:8d:43:0a:f4:4b:
fb:2d:81:bf:af:5e:ee:a0:4e:84:a2:99:cc:e1:f3:
ae:c5:44:b0:e2:98:b8:a0:a8:30:33:be:bf:7b:f9:
dc:aa:9f:ff:5c:11:60:1e:e3:2b:3f:c0:39:10:8c:
52:ee:c7:71:38:02:ab:1b:be:8c:c2:1c:33:c3:68:
d4:86:0a:4f:8e:f4:c0:bf:99:71:44:cf:82:fe:b9:
91:dd:ed:51:f5:f1:5e:ea:4f:e2:45:49:7b:d0:89:
b7:12:60:7b:22:6a:3e:7c:1d:94:b9:44:15:53:e6:
4c:39:66:c1:6b:d2:af:31:5b:5a:66:3f:7d:c3:e7:
2c:79:31:cf:9d:f3:dc:21:be:ca:c6:70:c2:a3:06:
87:a9:4b:39:b4:5e:e5:cb:79:bc:2c:83:89:d5:8d:
49:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:35:09:4C:EA:69:03:3B:E3:D7:79:0F:E0:C0:6C:FD:F0:F7:4B:1F
X509v3 Authority Key Identifier:
keyid:FA:E5:7E:91:CE:52:47:08:AB:10:B2:16:82:17:A8:91:B8:38:C0:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74ceb21261d995f6744c5614710320d1ad4b79f6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b4810948-d2be-4ff7-a49d-9518f1732a5a/9de718f618fd5bad744c678ab585e62b3a2b1283.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b4810948-d2be-4ff7-a49d-9518f1732a5a/74ceb21261d995f6744c5614710320d1ad4b79f6.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.229.188.0-45.229.190.255
IPv6:
2803:bd20::/32
Signature Algorithm: sha256WithRSAEncryption
0c:01:cb:15:85:b6:b9:9e:ae:17:d5:9f:19:2b:ac:62:26:bf:
03:77:e2:a9:30:7b:57:b3:7b:6c:f7:2d:fa:6c:ec:42:2e:bf:
57:fa:14:b4:6d:fb:6a:e7:57:31:1e:77:f6:62:ba:a7:41:6f:
0b:a0:17:46:95:52:65:c0:5b:87:ff:4d:e6:d6:0f:b3:70:86:
3e:88:c2:90:a5:cf:5d:66:87:07:24:87:05:fc:46:8b:e0:80:
10:c5:35:62:97:58:76:ce:bf:ba:ce:be:c8:e1:72:53:4f:05:
42:98:ea:51:18:68:7d:60:e0:15:00:2c:34:4f:cc:0c:74:86:
bd:a6:b8:29:da:d7:ef:c7:37:a2:34:9a:ed:bb:20:5b:ca:78:
f1:0d:89:08:74:a1:1e:71:c6:67:a3:76:e7:50:33:db:e6:b6:
1c:d4:2e:3d:2e:e3:4c:8c:0d:9e:33:b5:59:d4:0f:27:50:83:
94:0c:83:33:ca:c1:ae:d1:13:11:a5:e0:c5:c3:5e:72:4a:d3:
86:93:4c:ff:47:b2:55:f9:16:41:f5:35:b4:09:b6:bf:0a:47:
5c:5a:4c:58:e7:19:4b:95:d0:99:1a:67:f9:f3:af:f2:3a:69:
8a:6e:40:b1:d1:4c:35:79:6f:2a:3c:e3:ce:3e:0d:3f:85:66:
5e:68:e4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 8 19:56:11 2024 by rpki-client on console-fra.rpki-client.org