Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba9d5ca8-7397-403c-bb7a-2654b0083210/9c513b042c891b5b8f2097c53e8226be15c1153c.roa
File: 9c513b042c891b5b8f2097c53e8226be15c1153c.roa (raw, json)
Hash identifier: 6TWfvnTcBGEkffSGV9sTZrgYZOKV0UrI3KPzYiIFIUE=
Subject key identifier: 43:6C:2B:5C:B9:6F:ED:6B:62:0E:7F:B4:BD:DD:72:49:3C:6A:46:CF
Certificate issuer: /CN=7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b
Certificate serial: 0347FB
Authority key identifier: A4:00:D3:7E:74:56:FD:28:CC:9F:E3:3E:2A:CF:4E:9B:4E:84:BB:EF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ba9d5ca8-7397-403c-bb7a-2654b0083210/9c513b042c891b5b8f2097c53e8226be15c1153c.roa
Signing time: Thu 12 Jan 2023 18:54:26 +0000
ROA not before: Wed 11 Jan 2023 18:53:21 +0000
ROA not after: Sun 12 Jan 2025 18:53:21 +0000
asID: 52361
IP address blocks: 45.4.216.0/24 maxlen: 24
45.4.217.0/24 maxlen: 24
45.4.218.0/24 maxlen: 24
45.4.219.0/24 maxlen: 24
2803:c1c0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 215035 (0x347fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b
Validity
Not Before: Jan 11 18:53:21 2023 GMT
Not After : Jan 12 18:53:21 2025 GMT
Subject: CN=9c513b042c891b5b8f2097c53e8226be15c1153c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b6:85:0c:e2:56:a3:ad:32:89:a1:67:c2:d9:
9d:7f:a9:f3:62:62:ca:9c:a4:3f:30:a7:2e:7b:3b:
55:85:c4:ee:11:d5:19:de:b1:1b:36:40:a1:45:dc:
f6:54:72:6b:f9:cd:00:3e:3d:d4:1c:7d:6c:be:2f:
7a:47:cb:f6:93:1d:3d:12:f4:f6:02:4a:c2:5b:44:
64:f6:48:d0:0e:12:7a:eb:89:f3:70:56:13:f8:44:
64:fb:d0:de:74:70:8f:06:24:95:94:a3:71:e3:e9:
45:2a:b5:86:36:71:fd:0e:9e:d0:e7:ff:52:6f:43:
df:18:4b:ab:7b:ba:9d:e8:c8:4e:53:16:70:e0:bf:
7f:2e:85:04:9d:eb:22:e5:26:d5:9b:e9:c7:7a:b9:
18:eb:01:fc:a1:84:a1:8d:e8:f5:0f:18:7e:54:12:
1a:d2:9d:a4:29:cf:67:06:65:8a:38:eb:cc:f8:31:
dc:1b:01:11:4f:97:e6:b4:4b:11:a1:39:27:dc:3a:
b0:70:b4:f3:67:44:ce:bc:62:4a:ae:79:4f:58:e7:
9b:b5:62:d4:5e:d9:6e:66:b1:66:fb:f1:9f:02:96:
b2:e0:da:db:2e:fd:e8:05:91:94:2c:fe:8b:2b:56:
b3:21:e0:c5:61:b8:d3:d0:42:9c:b3:5f:ae:fe:7f:
0e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6C:2B:5C:B9:6F:ED:6B:62:0E:7F:B4:BD:DD:72:49:3C:6A:46:CF
X509v3 Authority Key Identifier:
keyid:A4:00:D3:7E:74:56:FD:28:CC:9F:E3:3E:2A:CF:4E:9B:4E:84:BB:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba9d5ca8-7397-403c-bb7a-2654b0083210/9c513b042c891b5b8f2097c53e8226be15c1153c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ba9d5ca8-7397-403c-bb7a-2654b0083210/7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.216.0/22
IPv6:
2803:c1c0::/32
Signature Algorithm: sha256WithRSAEncryption
a0:ad:33:15:85:cb:65:eb:80:f4:aa:9d:ec:ab:e6:17:58:78:
c9:88:be:76:fe:11:38:ca:7c:c6:2d:d4:d1:e7:54:e1:29:f1:
55:96:f2:61:3c:a2:c6:b3:2f:ff:b8:46:b3:1a:af:a1:fb:bd:
54:e0:9f:e6:98:9a:bc:9f:a6:bf:54:4b:4b:19:8c:f9:6c:0b:
07:47:4a:cf:fa:99:db:d6:29:64:be:30:e2:3c:ed:74:3f:1e:
b3:0f:d7:6e:2f:54:92:1c:03:b2:b7:4b:6a:1f:1a:ab:12:ce:
c1:bd:97:fb:29:11:3e:5d:0c:83:95:0c:5c:21:a1:b8:4b:c3:
fa:94:4f:a0:58:b5:85:1c:9f:d7:de:e4:b6:33:55:de:cb:c5:
e5:81:ed:31:51:37:3b:58:25:2c:04:e4:2f:80:d3:f8:2b:81:
1f:f7:53:3c:de:23:24:27:9b:bb:61:49:ac:d8:e6:8b:c2:86:
f3:11:ee:2a:8b:db:70:2e:33:32:25:a6:e7:7c:e1:e2:51:fd:
23:c0:ba:90:1f:2a:50:89:1b:b6:75:32:c7:91:37:18:6f:47:
ac:06:a7:06:a8:88:32:8e:92:35:78:03:6c:8d:e0:83:49:ea:
8b:a6:d3:03:c1:b7:17:e3:89:56:a6:5d:80:ba:a7:e0:78:01:
4d:22:10:b7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDA0f7MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdh
ODZkN2IxMzhkOTc0YTFmMGM3MDgzOGViNmZiMmExMGFlMWFiNWIwHhcNMjMwMTEx
MTg1MzIxWhcNMjUwMTEyMTg1MzIxWjAzMTEwLwYDVQQDEyg5YzUxM2IwNDJjODkx
YjViOGYyMDk3YzUzZTgyMjZiZTE1YzExNTNjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAn7aFDOJWo60yiaFnwtmdf6nzYmLKnKQ/MKcueztVhcTuEdUZ
3rEbNkChRdz2VHJr+c0APj3UHH1svi96R8v2kx09EvT2AkrCW0Rk9kjQDhJ664nz
cFYT+ERk+9DedHCPBiSVlKNx4+lFKrWGNnH9Dp7Q5/9Sb0PfGEure7qd6MhOUxZw
4L9/LoUEnesi5SbVm+nHerkY6wH8oYShjej1Dxh+VBIa0p2kKc9nBmWKOOvM+DHc
GwERT5fmtEsRoTkn3DqwcLTzZ0TOvGJKrnlPWOebtWLUXtluZrFm+/GfApay4Nrb
Lv3oBZGULP6LK1azIeDFYbjT0EKcs1+u/n8ORwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFENsK1y5b+1rYg5/tL3dckk8akbPMB8GA1UdIwQYMBaAFKQA0350Vv0ozJ/j
PirPTptOhLvvMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2E4NmQ3
YjEzOGQ5NzRhMWYwYzcwODM4ZWI2ZmIyYTEwYWUxYWI1Yi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmE5ZDVjYTgtNzM5Ny00MDNjLWJiN2EtMjY1NGIw
MDgzMjEwLzljNTEzYjA0MmM4OTFiNWI4ZjIwOTdjNTNlODIyNmJlMTVjMTE1M2Mu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iYTlkNWNhOC03Mzk3LTQwM2MtYmI3YS0yNjU0
YjAwODMyMTAvN2E4NmQ3YjEzOGQ5NzRhMWYwYzcwODM4ZWI2ZmIyYTEwYWUxYWI1
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAi0E2DANBAIAAjAHAwUAKAPBwDANBgkqhkiG9w0BAQsFAAOC
AQEAoK0zFYXLZeuA9Kqd7KvmF1h4yYi+dv4ROMp8xi3U0edU4SnxVZbyYTyixrMv
/7hGsxqvofu9VOCf5piavJ+mv1RLSxmM+WwLB0dKz/qZ29YpZL4w4jztdD8esw/X
bi9UkhwDsrdLah8aqxLOwb2X+ykRPl0Mg5UMXCGhuEvD+pRPoFi1hRyf197ktjNV
3svF5YHtMVE3O1glLATkL4DT+CuBH/dTPN4jJCebu2FJrNjmi8KG8xHuKovbcC4z
MiWm53zh4lH9I8C6kB8qUIkbtnUyx5E3GG9HrAanBqiIMo6SNXgDbI3gg0nqi6bT
A8G3F+OJVqZdgLqn4HgBTSIQtw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-fra.rpki-client.org