Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c7ed53ae-b1cb-40e5-b8ec-fdcd548f0038/153f24e6ff84bfc02e8f26940e1bc43ba563e47a.roa
File: 153f24e6ff84bfc02e8f26940e1bc43ba563e47a.roa (raw, json)
Hash identifier: me03UkyiWAjwKHvMUCqHN0I4B7KNBZ9hW48fhP+1zF8=
Subject key identifier: 9F:88:D7:20:6B:3B:82:5F:DB:2D:38:AE:45:E5:69:9B:D4:FD:85:1F
Certificate issuer: /CN=05b1c186454ea6853aebbc96f2a6442e7cd6cf12
Certificate serial: 0C74BA
Authority key identifier: 39:5C:69:98:FF:72:62:FE:A8:D7:67:B9:AF:CD:8F:4F:E1:44:CD:8B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05b1c186454ea6853aebbc96f2a6442e7cd6cf12.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c7ed53ae-b1cb-40e5-b8ec-fdcd548f0038/153f24e6ff84bfc02e8f26940e1bc43ba563e47a.roa
Signing time: Wed 24 Mar 2021 14:39:06 +0000
ROA not before: Wed 24 Mar 2021 14:39:06 +0000
ROA not after: Tue 24 Mar 2026 14:39:06 +0000
asID: 267699
IP address blocks: 45.164.64.0/24 maxlen: 24
45.164.65.0/24 maxlen: 24
45.164.66.0/24 maxlen: 24
45.164.67.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 816314 (0xc74ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1c186454ea6853aebbc96f2a6442e7cd6cf12
Validity
Not Before: Mar 24 14:39:06 2021 GMT
Not After : Mar 24 14:39:06 2026 GMT
Subject: CN=153f24e6ff84bfc02e8f26940e1bc43ba563e47a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9f:8f:71:d6:00:d8:13:22:9f:ce:4e:3e:e9:
83:9d:4e:e6:97:b4:ad:81:22:5c:06:0a:3d:a3:68:
21:0c:d2:8e:c3:cc:14:3e:47:e7:4c:8f:51:e3:7c:
7c:70:df:2a:ab:a4:bb:2b:39:9b:52:25:30:3f:b7:
d7:b9:56:fc:13:bc:4d:71:43:09:9c:13:55:7f:06:
be:03:5c:a1:6f:b5:ef:5f:fd:07:29:4a:43:c7:a6:
40:92:a8:66:ea:5c:f0:df:ca:61:73:99:38:2b:7d:
f8:86:7e:1a:da:03:7f:2f:31:2c:38:54:47:c2:b0:
d2:a7:dc:92:a3:20:b5:5d:2a:95:0b:a7:ca:3b:e0:
2b:81:c1:bd:b8:7d:ad:1e:51:5d:fa:08:9f:b1:bd:
2e:9e:b9:ef:1f:fd:f7:b5:7b:94:56:e3:c7:cf:3e:
c4:c6:b2:26:69:2a:f3:d4:f3:61:84:93:be:cf:a6:
04:ae:a7:65:f4:7f:b1:b8:2c:55:4a:1d:c9:49:ba:
98:55:9e:c2:30:24:11:81:5f:17:b4:48:fa:4a:ef:
f9:4b:93:65:9a:e1:ea:f1:d0:5c:c3:55:ab:91:f6:
24:77:74:06:64:71:30:d5:75:05:02:cd:69:b1:e4:
6f:cf:5c:ce:a3:c5:08:fd:df:7b:f5:51:2f:c0:09:
9d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:88:D7:20:6B:3B:82:5F:DB:2D:38:AE:45:E5:69:9B:D4:FD:85:1F
X509v3 Authority Key Identifier:
keyid:39:5C:69:98:FF:72:62:FE:A8:D7:67:B9:AF:CD:8F:4F:E1:44:CD:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05b1c186454ea6853aebbc96f2a6442e7cd6cf12.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c7ed53ae-b1cb-40e5-b8ec-fdcd548f0038/153f24e6ff84bfc02e8f26940e1bc43ba563e47a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c7ed53ae-b1cb-40e5-b8ec-fdcd548f0038/05b1c186454ea6853aebbc96f2a6442e7cd6cf12.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.164.64.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:23:24:d6:3b:9c:74:07:33:c0:e3:5a:be:66:fe:9e:0d:c7:
c4:45:4e:cf:38:8b:2b:dd:10:29:cf:cd:bf:b2:34:e5:87:87:
01:b9:70:40:3c:ba:9b:1f:2f:67:1d:06:92:51:4f:a8:98:4e:
90:f7:b9:14:fb:8f:a2:79:49:69:11:3b:3b:b1:36:da:19:d7:
e1:aa:9b:f3:ef:ba:fb:57:e5:4d:e2:66:9c:9c:79:0a:9c:e2:
a1:aa:5d:5c:ca:9f:14:5b:0a:50:02:5e:8f:dd:a1:a1:2a:7d:
ed:94:ff:50:2a:9a:f9:c6:76:c2:5d:9b:03:1f:02:5b:74:2e:
d5:77:93:e9:70:9b:4d:e2:be:72:8d:6c:1b:ce:98:e2:79:3c:
2f:1d:bb:f3:c9:56:db:86:64:1f:d9:ea:fa:ca:87:4d:33:67:
cf:19:6b:b6:14:37:7e:80:83:f1:27:06:14:73:3f:ea:94:52:
e4:4c:9f:b8:50:40:ca:79:f3:42:90:13:fa:9e:f4:96:e3:e4:
a1:8d:06:fc:24:9a:e4:ce:0e:bf:6f:46:79:f5:b2:93:a4:3f:
6e:c7:e1:f8:0c:57:bc:22:fd:d6:36:e0:84:cf:02:5a:c2:ff:
71:e6:94:ae:00:6a:33:6c:02:52:04:f8:e6:4d:1a:db:c2:98:
01:0f:1d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 29 20:40:17 2023 by rpki-client on console-ams.rpki-client.org