Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c33a0118-0655-414e-a7dc-0e8f24b76d15/5515c50709986dbc809de8bc2095429626080548.roa
File: 5515c50709986dbc809de8bc2095429626080548.roa (raw, json)
Hash identifier: n8zPDInPF2Y63LlF0h+UhmfkVlDxK63rvvSwoOoFoD4=
Subject key identifier: 49:66:1D:34:27:60:C9:40:00:03:7C:35:50:B6:F3:0F:7B:B2:8D:02
Certificate issuer: /CN=9f38530271142a50ccefbe64df571c9b0e259487
Certificate serial: 0D2B65
Authority key identifier: 99:A2:EC:1F:36:42:13:6D:C3:B8:90:70:A7:3F:78:50:C1:5F:61:8F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f38530271142a50ccefbe64df571c9b0e259487.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c33a0118-0655-414e-a7dc-0e8f24b76d15/5515c50709986dbc809de8bc2095429626080548.roa
Signing time: Wed 24 Mar 2021 14:34:50 +0000
ROA not before: Wed 24 Mar 2021 14:34:50 +0000
ROA not after: Tue 24 Mar 2026 14:34:50 +0000
asID: 262589
IP address blocks: 45.65.232.0/24 maxlen: 24
190.102.120.0/24 maxlen: 24
190.102.123.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 863077 (0xd2b65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f38530271142a50ccefbe64df571c9b0e259487
Validity
Not Before: Mar 24 14:34:50 2021 GMT
Not After : Mar 24 14:34:50 2026 GMT
Subject: CN=5515c50709986dbc809de8bc2095429626080548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cf:b9:3f:f1:f9:27:39:65:17:c3:89:f4:53:
54:5b:f7:bb:1a:cb:99:a8:f8:05:09:30:bd:4b:a3:
3b:dd:da:01:3b:f4:38:70:8e:b3:26:26:94:a9:50:
e4:da:0b:03:36:fd:f2:7d:22:c0:b3:38:48:35:4e:
09:0f:cb:c4:b7:2e:64:9c:75:d2:00:e9:2e:64:a1:
9a:55:4d:d5:c6:2f:a0:f6:c3:1b:c1:15:ea:88:e9:
3c:2a:83:4b:4a:54:59:17:65:7e:e0:7c:e5:58:28:
b0:62:26:8b:45:ba:c8:3c:d2:a8:df:11:f1:76:a8:
19:ae:43:e0:fe:d5:23:b5:6f:f2:3c:fc:ab:e8:a5:
38:cf:4e:82:aa:b4:5d:b2:b7:3a:5b:7c:da:35:70:
a4:56:ea:7b:5f:c0:7f:67:5c:55:2f:32:e4:52:52:
1a:0e:e6:50:09:36:bd:68:85:ae:5a:fb:9f:00:a7:
aa:e2:56:22:24:39:c3:cd:b6:b9:9a:99:49:c0:89:
8c:50:ac:b3:1a:35:dc:ea:c7:6f:ff:c1:70:86:b7:
2f:63:cb:95:37:2e:a8:79:55:7c:f7:2d:6f:cd:11:
fa:d4:24:fc:aa:4f:9d:e3:d5:94:50:3c:90:ae:45:
ec:11:c3:43:d2:69:ec:90:ff:8b:9c:03:dd:f0:03:
1f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:66:1D:34:27:60:C9:40:00:03:7C:35:50:B6:F3:0F:7B:B2:8D:02
X509v3 Authority Key Identifier:
keyid:99:A2:EC:1F:36:42:13:6D:C3:B8:90:70:A7:3F:78:50:C1:5F:61:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f38530271142a50ccefbe64df571c9b0e259487.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c33a0118-0655-414e-a7dc-0e8f24b76d15/5515c50709986dbc809de8bc2095429626080548.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c33a0118-0655-414e-a7dc-0e8f24b76d15/9f38530271142a50ccefbe64df571c9b0e259487.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.232.0/24
190.102.120.0/24
190.102.123.0/24
Signature Algorithm: sha256WithRSAEncryption
71:b9:fc:2b:c7:11:e3:9a:5e:29:8e:88:b8:6e:9f:0c:c1:ca:
e5:aa:8a:e5:60:f6:94:e3:dd:b2:0e:4c:2e:1f:fe:f9:ce:f9:
ab:60:c0:07:fe:06:db:88:42:3c:90:e5:a2:ac:99:23:fb:71:
7d:9f:5b:f7:62:29:bb:aa:28:42:d8:52:8e:42:fa:63:3c:6b:
46:d6:90:9c:33:8e:6a:e1:87:d6:5b:fa:9c:4a:35:4d:72:ba:
17:8b:dd:ba:98:ad:2a:96:b1:d1:7b:b0:7a:03:40:80:71:ee:
c0:da:01:2e:5d:6e:fd:33:59:63:4b:f1:c7:ed:5e:be:85:86:
90:f6:ee:0b:d1:d0:db:84:10:74:e5:90:c9:55:b6:b0:27:00:
e5:03:19:e7:4d:c2:ac:e7:e6:68:73:77:59:df:df:db:3e:5f:
66:51:41:29:c9:69:3b:e3:b8:d5:8c:19:4a:ee:63:bf:d2:6d:
96:00:ba:7f:88:ea:f7:e1:dc:d2:48:b1:79:ba:83:6d:cb:bd:
0b:96:95:3f:da:2b:b7:89:68:00:53:39:d3:f1:26:8f:b8:51:
9d:48:ab:74:3f:1c:f5:e5:c4:97:9d:43:f9:eb:24:97:ac:f8:
1c:74:d1:e1:20:eb:a5:2b:34:b6:5c:06:c4:4d:8e:01:ef:0c:
1d:17:dd:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:53 2023 by rpki-client on console-ams.rpki-client.org