Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba9d5ca8-7397-403c-bb7a-2654b0083210/f8274446d57d460080c446d59c7f9c291988b908.roa
File: f8274446d57d460080c446d59c7f9c291988b908.roa (raw, json)
Hash identifier: 7fDc/O7pks3XtU73xCdynEIH9oFhbZGMEkmverqdVBw=
Subject key identifier: 2A:71:7B:80:A1:58:AA:8C:AD:54:E8:3A:E8:3F:0F:7B:AF:9E:E0:F6
Certificate issuer: /CN=7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b
Certificate serial: 0344F3
Authority key identifier: A4:00:D3:7E:74:56:FD:28:CC:9F:E3:3E:2A:CF:4E:9B:4E:84:BB:EF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ba9d5ca8-7397-403c-bb7a-2654b0083210/f8274446d57d460080c446d59c7f9c291988b908.roa
Signing time: Thu 12 Jan 2023 18:53:20 +0000
ROA not before: Wed 11 Jan 2023 18:51:48 +0000
ROA not after: Sun 12 Jan 2025 18:51:48 +0000
asID: 265679
IP address blocks: 45.4.216.0/24 maxlen: 24
45.4.217.0/24 maxlen: 24
45.4.218.0/24 maxlen: 24
45.4.219.0/24 maxlen: 24
2803:c1c0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 214259 (0x344f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b
Validity
Not Before: Jan 11 18:51:48 2023 GMT
Not After : Jan 12 18:51:48 2025 GMT
Subject: CN=f8274446d57d460080c446d59c7f9c291988b908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:87:a2:a9:bc:4a:2e:0a:77:37:dc:b4:a3:8e:
56:ab:77:1f:05:b1:2f:90:b2:0d:32:3c:0a:9b:8e:
33:70:bb:87:25:df:3f:d2:12:04:6b:9a:1c:c5:94:
cc:6b:ab:33:52:2a:91:c5:73:b4:df:8d:76:bb:5b:
48:5f:13:73:23:5b:92:e1:0d:05:fa:15:22:e3:a5:
d7:ca:3c:52:1f:ef:71:20:28:ea:4d:24:64:b7:d0:
60:cf:81:84:d2:0c:21:4e:c0:e0:27:c1:22:32:08:
dc:8f:76:08:05:7a:dc:35:90:09:a4:a0:bf:30:28:
ef:25:5b:96:96:6c:77:48:b4:32:c7:c7:d1:d7:02:
09:10:1b:50:d5:13:d4:c3:96:a1:12:26:da:bb:1c:
a6:69:cd:97:13:33:79:0f:65:39:1e:36:fc:af:8c:
97:d4:13:6f:a2:6b:b9:0c:e4:4f:39:6e:17:94:48:
4a:8e:70:5d:e8:c3:f5:f2:f2:ae:fc:58:76:fb:41:
cd:47:e9:59:89:cf:df:d7:bd:e0:62:25:bf:94:c3:
5e:8a:fa:bf:50:d5:a2:27:ff:a8:df:24:59:78:b3:
ee:b1:f3:14:9f:7e:f9:34:cf:97:52:7e:fb:de:87:
f7:34:d6:bb:a4:f5:6f:43:50:99:83:09:7e:a8:96:
8c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:71:7B:80:A1:58:AA:8C:AD:54:E8:3A:E8:3F:0F:7B:AF:9E:E0:F6
X509v3 Authority Key Identifier:
keyid:A4:00:D3:7E:74:56:FD:28:CC:9F:E3:3E:2A:CF:4E:9B:4E:84:BB:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba9d5ca8-7397-403c-bb7a-2654b0083210/f8274446d57d460080c446d59c7f9c291988b908.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ba9d5ca8-7397-403c-bb7a-2654b0083210/7a86d7b138d974a1f0c70838eb6fb2a10ae1ab5b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.216.0/22
IPv6:
2803:c1c0::/32
Signature Algorithm: sha256WithRSAEncryption
a2:b4:d1:f0:63:c2:12:ab:f1:3b:a3:1b:bb:54:2d:1a:78:50:
ee:38:3e:1c:b3:d3:2c:06:db:22:f0:a5:0d:4f:b2:36:11:e4:
d9:34:78:0a:0d:0a:09:32:cf:5d:b4:02:32:0e:fa:88:7f:40:
c0:19:de:de:73:7d:19:06:e2:3e:23:5c:09:86:57:96:64:bb:
14:b2:ea:9f:7f:f0:2a:39:fd:55:98:e9:4a:ec:ee:8f:fa:e0:
56:f7:d8:e8:90:7a:b9:f7:fc:2e:8b:7b:7d:94:d1:ef:e4:fa:
9e:e2:c7:a9:88:25:eb:01:6f:9b:07:b4:2e:2c:5c:dc:8a:19:
b5:8a:39:21:6a:15:58:ac:47:b7:58:44:e1:65:62:d4:e1:b2:
dd:c2:cf:7b:a8:d2:34:82:40:79:cf:dc:09:d4:5c:19:31:bc:
f5:7d:4d:be:58:d9:47:3d:a8:d1:a5:c2:db:05:5c:24:a4:57:
f3:36:08:81:23:67:14:0f:76:8b:cd:59:d4:5c:f7:c0:c1:0c:
78:2e:4f:f5:5c:91:0e:77:fb:8f:66:6a:4c:c8:53:27:66:75:
52:b7:2c:bb:e2:8b:bb:e8:03:de:70:30:5b:28:ac:b1:ff:a3:
80:27:82:5f:90:1e:ed:53:c8:ca:ea:79:31:66:81:93:0f:dc:
5c:26:65:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-fra.rpki-client.org