Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c33a0118-0655-414e-a7dc-0e8f24b76d15/344dbf925e0def6f43dc26270d3e78248915353e.roa
File: 344dbf925e0def6f43dc26270d3e78248915353e.roa (raw, json)
Hash identifier: rNuz09yp93tUIjgWqkDtWdQ5GXs/p2xclvCq/Ks66bI=
Subject key identifier: 62:F8:AB:1D:B0:92:C8:A3:E8:4C:51:71:66:D2:DF:BA:CE:33:03:5B
Certificate issuer: /CN=9f38530271142a50ccefbe64df571c9b0e259487
Certificate serial: 1D2CC7
Authority key identifier: 99:A2:EC:1F:36:42:13:6D:C3:B8:90:70:A7:3F:78:50:C1:5F:61:8F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f38530271142a50ccefbe64df571c9b0e259487.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c33a0118-0655-414e-a7dc-0e8f24b76d15/344dbf925e0def6f43dc26270d3e78248915353e.roa
Signing time: Wed 28 Dec 2022 23:57:51 +0000
ROA not before: Tue 23 Mar 2021 14:34:50 +0000
ROA not after: Tue 24 Mar 2026 14:34:50 +0000
asID: 269822
IP address blocks: 45.65.232.0/22 maxlen: 24
190.102.120.0/22 maxlen: 24
190.102.124.0/22 maxlen: 24
2803:15c0::/32 maxlen: 36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1912007 (0x1d2cc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f38530271142a50ccefbe64df571c9b0e259487
Validity
Not Before: Mar 23 14:34:50 2021 GMT
Not After : Mar 24 14:34:50 2026 GMT
Subject: CN=344dbf925e0def6f43dc26270d3e78248915353e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:30:36:9b:86:72:0b:b4:00:92:69:66:21:ac:
23:5b:12:48:a6:ff:62:11:75:a8:5b:23:3e:0f:a5:
b2:eb:6f:fe:22:b8:92:dc:0f:09:93:0d:eb:e8:7c:
d6:20:cf:b3:e6:6f:eb:99:d2:2d:ec:95:eb:e0:7c:
5b:5b:a0:02:7b:1f:ed:e3:0a:c4:58:41:1e:6e:9c:
e1:dd:da:1e:07:53:b3:06:b6:5d:f3:ed:d3:21:91:
78:2a:de:56:42:02:ad:69:67:50:f9:be:c0:f0:38:
94:d3:25:25:7c:1d:42:34:c4:14:86:be:7a:39:00:
dc:53:8d:08:16:bd:51:1b:d1:9f:b9:39:b9:58:09:
78:f8:10:25:86:33:91:94:bf:1d:ce:bd:28:1a:95:
68:3b:86:9b:c4:c4:2c:05:21:14:1a:a7:2c:62:79:
12:57:3c:23:14:d8:11:92:cb:31:a6:b6:af:fe:04:
c2:eb:77:8c:59:b4:69:f9:c5:ce:c9:11:f4:63:d9:
84:53:3b:7a:d6:e7:2c:d4:00:af:c8:ae:47:77:e5:
fe:01:46:f2:0f:4a:e2:5d:fc:6d:a5:40:49:d8:ca:
53:26:6a:d5:f9:4f:5b:30:9a:b7:7a:d8:19:ae:1f:
ca:88:ff:69:9a:03:06:f7:69:f0:51:aa:c7:1d:84:
1b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F8:AB:1D:B0:92:C8:A3:E8:4C:51:71:66:D2:DF:BA:CE:33:03:5B
X509v3 Authority Key Identifier:
keyid:99:A2:EC:1F:36:42:13:6D:C3:B8:90:70:A7:3F:78:50:C1:5F:61:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f38530271142a50ccefbe64df571c9b0e259487.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c33a0118-0655-414e-a7dc-0e8f24b76d15/344dbf925e0def6f43dc26270d3e78248915353e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c33a0118-0655-414e-a7dc-0e8f24b76d15/9f38530271142a50ccefbe64df571c9b0e259487.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.232.0/22
190.102.120.0/21
IPv6:
2803:15c0::/32
Signature Algorithm: sha256WithRSAEncryption
10:08:f1:8c:81:8e:03:9e:d2:2f:3d:59:89:1e:fd:a9:08:75:
fd:3c:f1:2a:77:18:c3:bf:42:63:14:78:30:b4:8c:08:c0:0f:
55:f3:ab:09:d1:e2:61:66:76:27:e3:0f:3c:b6:c8:4d:2a:4d:
a8:e1:7f:57:85:af:a7:ab:b4:59:a1:55:8a:a8:ff:5c:89:62:
3b:a6:1f:6b:40:90:2c:c1:4c:06:82:d8:12:35:eb:6e:c5:58:
ba:d9:3a:36:6b:64:cb:89:19:04:44:14:dd:ad:d7:76:90:69:
08:20:ac:bf:50:81:20:c3:a1:7e:a8:10:2d:b6:9d:7b:2f:2b:
e2:7c:ee:db:10:93:3c:73:b7:89:96:5e:d9:f1:84:39:97:36:
0d:61:1c:f9:01:a8:8c:09:a9:4c:89:43:66:bd:00:49:19:d3:
56:17:f4:b8:8b:a7:83:d8:72:fd:ea:5f:fd:6a:d5:12:0e:b7:
ae:26:5c:bf:c7:a1:65:d7:2b:d1:0d:3e:96:e1:75:20:31:44:
63:56:c4:04:42:8d:2c:e6:2b:f9:72:cb:91:c4:30:0d:11:eb:
93:2a:df:ff:e5:44:36:ea:db:03:f4:ed:a6:e5:87:cc:b8:25:
68:8a:d2:7a:7b:61:db:a5:f5:17:bb:6e:b7:c5:fa:e6:45:bc:
bb:41:0b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:53 2023 by rpki-client on console-ams.rpki-client.org