Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c72615e5-555b-4a7c-93ab-ce8a963a7c75/0a3345bd6ad382dc5042c985a68bd58d9527aaa3.roa
File: 0a3345bd6ad382dc5042c985a68bd58d9527aaa3.roa (raw, json)
Hash identifier: GR2GLY83cPcHtcbhuIoqDqm0Wb0L2gDa3ccHqKmx6Ek=
Subject key identifier: 16:AC:D2:40:2E:80:05:9D:B9:F1:60:8C:CE:56:A8:81:7E:EC:20:39
Certificate issuer: /CN=4a1b531b01cd5446453179b34a5c11c87131d8df
Certificate serial: 21C5AE
Authority key identifier: E1:99:4A:3F:A4:BE:CF:9A:77:5C:77:77:63:FF:E7:6B:FA:2C:A4:BA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a1b531b01cd5446453179b34a5c11c87131d8df.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c72615e5-555b-4a7c-93ab-ce8a963a7c75/0a3345bd6ad382dc5042c985a68bd58d9527aaa3.roa
Signing time: Wed 05 Jul 2023 01:47:40 +0000
ROA not before: Tue 04 Jul 2023 01:47:40 +0000
ROA not after: Sat 05 Jul 2025 01:47:40 +0000
asID: 52468
IP address blocks: 45.71.112.0/23 maxlen: 23
45.71.114.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2213294 (0x21c5ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a1b531b01cd5446453179b34a5c11c87131d8df
Validity
Not Before: Jul 4 01:47:40 2023 GMT
Not After : Jul 5 01:47:40 2025 GMT
Subject: CN=0a3345bd6ad382dc5042c985a68bd58d9527aaa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9f:75:b8:93:1a:9f:ef:31:9f:ca:f8:4f:49:
58:c3:2b:a7:5a:ae:e2:b0:a6:16:0a:a7:a3:43:9c:
17:10:0f:af:88:fd:65:c6:f2:61:b9:67:75:e6:7a:
6d:d6:16:aa:d6:6b:1f:3b:3f:32:82:f0:53:53:fc:
52:fe:15:f9:84:20:0d:97:dd:33:a4:59:27:c6:db:
aa:17:58:94:89:17:93:0f:3a:b7:a7:d9:d6:ab:90:
1e:d3:bd:85:c1:be:e0:d2:af:46:7d:51:e8:f1:70:
16:21:87:37:85:57:d9:a3:c8:90:e7:0b:9b:ed:c4:
f7:98:8e:fc:ee:ca:00:52:2f:d6:56:21:aa:f3:7d:
b0:79:65:ab:cb:8d:cb:be:c1:f9:99:6c:92:d7:27:
b1:ac:61:12:ca:97:ff:3f:35:49:a1:46:1c:81:91:
6d:5d:7a:ca:7a:24:5e:c4:38:7c:86:59:d9:50:ad:
96:ed:56:8a:f4:56:fa:d5:77:d6:a7:01:0f:22:56:
0a:33:f9:26:a1:32:6e:69:a6:e6:37:72:7a:4b:17:
6a:d1:3c:3a:a9:de:a4:3a:5d:81:8f:46:6f:dc:1c:
08:1e:1d:6a:d6:fd:c8:3d:06:a8:d6:69:af:db:84:
e4:df:8a:6a:97:38:e3:df:af:56:d2:bd:45:c9:c3:
8c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AC:D2:40:2E:80:05:9D:B9:F1:60:8C:CE:56:A8:81:7E:EC:20:39
X509v3 Authority Key Identifier:
keyid:E1:99:4A:3F:A4:BE:CF:9A:77:5C:77:77:63:FF:E7:6B:FA:2C:A4:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a1b531b01cd5446453179b34a5c11c87131d8df.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c72615e5-555b-4a7c-93ab-ce8a963a7c75/0a3345bd6ad382dc5042c985a68bd58d9527aaa3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c72615e5-555b-4a7c-93ab-ce8a963a7c75/4a1b531b01cd5446453179b34a5c11c87131d8df.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.112.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:20:65:8e:3c:61:30:03:9e:02:89:28:69:f6:71:b0:d6:5a:
bf:14:3b:3c:8f:0d:e3:f7:43:0e:b2:b2:38:64:4e:16:8f:e9:
39:dd:02:6d:e0:b4:76:f1:b3:df:6a:86:85:92:59:cc:eb:65:
08:c1:6e:a4:f6:38:83:13:3c:6f:52:b2:84:46:2b:3a:61:c8:
9d:b2:d5:d4:f7:1f:fa:ec:5c:a9:62:eb:a5:fa:34:be:8d:13:
e4:fd:8d:77:36:d5:4b:ac:76:32:5e:d9:a9:e4:09:87:9c:92:
ff:76:0c:a1:62:2d:2c:4b:c8:da:ef:8e:a7:2f:92:d5:84:97:
da:aa:7e:51:d0:39:e3:3c:10:d1:cb:17:2b:19:28:7f:59:b0:
d9:7f:32:95:b1:f1:b2:4a:62:3d:92:aa:a3:6a:3b:13:ca:61:
c2:3b:b0:c7:4d:14:84:36:9c:a5:f5:74:d3:fd:00:d2:81:ae:
84:37:7d:1c:8a:2d:7d:9d:61:55:18:1f:de:5f:28:19:84:7c:
66:00:08:39:0a:8e:0c:1e:e8:73:6f:15:a1:af:c7:a1:fb:70:
66:83:e2:56:b5:53:0b:03:0d:56:90:1b:59:51:6c:c6:02:46:
a2:d3:17:47:e2:40:f3:cc:8c:d9:e6:b9:de:1d:e7:2c:52:06:
cc:89:43:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 17 20:29:14 2023 by rpki-client on console-fra.rpki-client.org