Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b4810948-d2be-4ff7-a49d-9518f1732a5a/fa114465b39368bb91fb4f3e32cc2bf72a950e48.roa
File: fa114465b39368bb91fb4f3e32cc2bf72a950e48.roa (raw, json)
Hash identifier: uG3g5NScjdCCW5wQaau8qgf7hwpkXhf9CEehb/Aht1w=
Subject key identifier: 50:A3:D1:5B:8D:28:A2:9A:9C:01:18:0D:32:C9:56:1E:68:4F:29:0C
Certificate issuer: /CN=74ceb21261d995f6744c5614710320d1ad4b79f6
Certificate serial: 23705E
Authority key identifier: FA:E5:7E:91:CE:52:47:08:AB:10:B2:16:82:17:A8:91:B8:38:C0:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74ceb21261d995f6744c5614710320d1ad4b79f6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b4810948-d2be-4ff7-a49d-9518f1732a5a/fa114465b39368bb91fb4f3e32cc2bf72a950e48.roa
Signing time: Fri 15 Sep 2023 08:30:02 +0000
ROA not before: Thu 14 Sep 2023 08:30:02 +0000
ROA not after: Sat 13 Sep 2025 08:30:02 +0000
asID: 266706
IP address blocks: 45.229.188.0/24 maxlen: 24
45.229.189.0/24 maxlen: 24
45.229.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Feb 2024 00:31:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2322526 (0x23705e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74ceb21261d995f6744c5614710320d1ad4b79f6
Validity
Not Before: Sep 14 08:30:02 2023 GMT
Not After : Sep 13 08:30:02 2025 GMT
Subject: CN=fa114465b39368bb91fb4f3e32cc2bf72a950e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d5:da:4c:0f:c2:44:8e:82:ba:e9:92:17:00:
d0:32:ea:0e:bb:11:62:91:70:47:52:60:cf:87:f1:
83:ea:db:f9:d5:c5:3c:35:1a:85:44:95:f0:7b:5f:
57:f2:e5:54:20:9e:a4:c9:10:5e:2c:31:14:41:7d:
80:dc:99:7c:04:28:fc:26:87:11:1a:a1:cd:0a:99:
d1:6d:16:5a:af:a5:96:cd:e1:25:00:00:76:c6:7a:
4c:71:d7:ff:79:d6:4e:91:ea:62:5d:43:88:96:b3:
06:50:7d:11:5a:a8:53:00:e3:38:ad:17:2e:85:2c:
65:33:ea:b2:a4:a4:a1:3f:74:4a:e1:b5:4e:69:6a:
35:19:46:04:b5:ff:94:19:c7:01:48:0f:ba:b0:33:
f0:1b:55:ac:15:7f:b4:a8:86:04:52:cd:c8:c8:6b:
c5:30:b4:a2:0d:0c:73:74:82:70:f3:b0:11:47:d2:
e1:93:7e:30:69:82:07:a3:54:69:c8:27:07:5e:36:
c5:a1:be:36:0b:81:15:8c:f3:9c:4c:90:75:49:70:
43:5f:8b:06:d5:19:98:fa:7c:fc:12:0b:30:46:26:
e5:7d:bf:d3:c6:e1:81:88:15:27:ee:87:f2:9f:e3:
1d:c8:88:e7:a3:49:b9:03:b1:2b:9e:d6:12:c6:a8:
b0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A3:D1:5B:8D:28:A2:9A:9C:01:18:0D:32:C9:56:1E:68:4F:29:0C
X509v3 Authority Key Identifier:
keyid:FA:E5:7E:91:CE:52:47:08:AB:10:B2:16:82:17:A8:91:B8:38:C0:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74ceb21261d995f6744c5614710320d1ad4b79f6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b4810948-d2be-4ff7-a49d-9518f1732a5a/fa114465b39368bb91fb4f3e32cc2bf72a950e48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b4810948-d2be-4ff7-a49d-9518f1732a5a/74ceb21261d995f6744c5614710320d1ad4b79f6.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.229.188.0-45.229.190.255
Signature Algorithm: sha256WithRSAEncryption
56:50:52:a4:60:1c:e4:4b:dc:42:56:98:e8:c5:51:af:6e:63:
5b:d3:1d:52:7a:17:26:26:19:18:55:01:bb:4e:4c:92:92:ee:
a5:d9:a2:53:53:4a:2c:da:6a:f5:92:ee:ac:ac:91:2c:41:35:
de:79:b9:a3:d7:c0:48:0a:26:a3:7b:e2:73:a5:67:ab:7c:31:
08:c2:3c:bc:16:9b:04:70:5f:15:92:4d:3a:6d:f1:ed:bc:4e:
84:3b:9a:74:92:08:bc:b7:75:a1:aa:35:0b:9a:cb:aa:95:75:
8b:b9:4b:99:96:16:7b:d3:12:01:91:ca:68:42:75:3a:df:eb:
29:20:44:b8:fa:81:06:d9:8e:44:eb:17:d3:72:5d:be:14:cb:
83:1c:7b:ec:e9:f6:0c:75:28:ce:ec:3b:b5:c0:43:39:1c:63:
95:af:08:34:01:3b:bc:1e:86:61:9e:a2:1d:76:c2:75:cc:64:
f6:06:39:1c:ec:c6:4e:42:8f:cf:3b:6b:cf:8e:68:3c:61:2b:
01:92:e0:ba:95:eb:a8:1f:5d:9b:98:ec:77:42:57:78:d0:a1:
fa:03:a6:08:9b:15:04:3d:97:42:e5:54:d9:2f:e6:0c:c1:ac:
15:27:f0:0d:e6:82:6f:78:bf:18:f7:1f:25:e2:e1:14:9b:6e:
b2:27:25:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 8 01:40:38 2024 by rpki-client on console-ams.rpki-client.org