Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c49c6dda-e288-4168-868a-e03fa75ce046/ed3e08cb90c95266ecb89d0708babbfe2908d1d2.roa
File: ed3e08cb90c95266ecb89d0708babbfe2908d1d2.roa (raw, json)
Hash identifier: +wPs4Fss0PGFufRwv5zsRd2+jXsRen35OJRWf6VVW/Q=
Subject key identifier: AC:28:05:DB:CA:24:A0:34:5B:28:BC:89:E2:24:FB:E3:F4:BA:32:19
Certificate issuer: /CN=a2d64b47b5cacdd0d5bdf71f43d98b51c97c74ab
Certificate serial: 02B01B
Authority key identifier: D9:9F:AA:DE:5A:B0:40:4C:86:75:7E:DC:E1:BF:48:EB:C6:0E:14:5D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a2d64b47b5cacdd0d5bdf71f43d98b51c97c74ab.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c49c6dda-e288-4168-868a-e03fa75ce046/ed3e08cb90c95266ecb89d0708babbfe2908d1d2.roa
Signing time: Tue 15 Feb 2022 18:43:52 +0000
ROA not before: Sat 06 Nov 2021 02:00:00 +0000
ROA not after: Mon 06 Nov 2023 02:00:00 +0000
asID: 265587
IP address blocks: 45.175.236.0/22 maxlen: 24
2806:33c::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176155 (0x2b01b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d64b47b5cacdd0d5bdf71f43d98b51c97c74ab
Validity
Not Before: Nov 6 02:00:00 2021 GMT
Not After : Nov 6 02:00:00 2023 GMT
Subject: CN=ed3e08cb90c95266ecb89d0708babbfe2908d1d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5e:d1:48:59:1c:27:2f:8f:3b:51:3a:da:69:
63:8f:a8:d9:1b:7d:91:b8:93:fd:9d:41:5b:20:44:
6f:27:08:08:78:34:d4:ca:86:36:2e:8b:36:f9:60:
b0:06:f3:10:10:a0:a1:ea:9b:82:36:d1:4f:27:6b:
02:d5:54:21:26:0e:4f:83:87:47:91:45:3e:f6:a1:
64:59:6a:e4:d4:55:87:7b:e9:12:7a:73:9a:ff:03:
39:af:f4:2e:25:7b:f9:32:32:46:9f:68:8f:c2:3e:
d3:1a:80:62:08:4b:0a:2e:a0:90:4a:6e:c4:47:f8:
7b:44:9d:6d:18:fb:10:9b:9c:76:fa:6f:81:3c:3a:
59:9f:d9:b8:96:62:1c:27:aa:98:59:03:6b:51:d8:
a3:d6:d8:26:38:76:91:0d:36:70:b4:ef:b7:78:a1:
83:28:d4:b2:80:ce:a8:34:1b:a8:64:92:da:1a:14:
1b:2f:07:de:0f:eb:76:b2:76:67:e4:42:56:82:4c:
c6:83:0b:1f:4b:4f:ce:f9:3d:bb:26:97:b8:e2:6c:
59:5a:07:b0:94:be:10:d2:3f:05:95:23:79:70:14:
e5:dc:9b:8b:71:5a:12:47:54:d5:a2:a2:d4:40:a7:
d4:9c:bf:e8:2d:7d:86:20:9c:c6:66:f2:80:2a:63:
a2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:28:05:DB:CA:24:A0:34:5B:28:BC:89:E2:24:FB:E3:F4:BA:32:19
X509v3 Authority Key Identifier:
keyid:D9:9F:AA:DE:5A:B0:40:4C:86:75:7E:DC:E1:BF:48:EB:C6:0E:14:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a2d64b47b5cacdd0d5bdf71f43d98b51c97c74ab.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c49c6dda-e288-4168-868a-e03fa75ce046/ed3e08cb90c95266ecb89d0708babbfe2908d1d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c49c6dda-e288-4168-868a-e03fa75ce046/a2d64b47b5cacdd0d5bdf71f43d98b51c97c74ab.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.175.236.0/22
IPv6:
2806:33c::/32
Signature Algorithm: sha256WithRSAEncryption
2a:2a:2a:b3:de:d1:a6:b7:62:ee:0b:e2:66:1a:ac:e2:49:15:
e5:aa:67:d3:71:29:9a:f4:29:3b:0c:e1:7e:0b:47:47:95:26:
53:3e:2f:c5:f3:c8:9d:3d:fa:b6:df:09:23:8a:51:a7:37:dc:
8f:9b:3e:3a:94:9b:27:d9:2f:7b:0d:a3:d1:e8:1b:43:60:b8:
d2:ec:62:60:75:69:ef:de:f6:74:94:df:7c:89:16:34:50:40:
26:ce:16:5a:3e:14:35:d5:6b:04:b5:60:26:8b:ed:78:4e:7c:
25:fb:82:c0:db:f1:21:72:65:45:bc:5e:9d:64:0e:65:cf:1a:
e6:26:af:ca:82:21:b6:77:81:c1:f0:bc:24:aa:59:ed:90:b0:
98:7a:9b:e6:f6:74:2e:6a:4c:07:c0:60:a1:77:2d:39:6a:9f:
79:fd:85:a5:30:cf:c5:a1:ea:b2:14:a6:cf:7a:d1:91:ae:60:
9a:02:d4:45:d2:82:d1:15:76:59:63:72:7c:28:1b:ad:95:5f:
dc:d4:0a:c1:aa:7a:6e:f1:43:14:02:c2:da:19:27:93:e9:d3:
4b:9b:72:3b:db:3e:60:9a:a3:c0:08:90:78:54:35:fa:18:1a:
32:ce:25:ca:83:80:fd:3d:b7:80:b9:d6:2e:31:13:6f:af:a5:
4b:bc:2d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 5 07:58:25 2023 by rpki-client on console-fra.rpki-client.org