Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cb67e9d1-1243-45c8-9a3b-4b6de5358322/609cf630ac4edb22d5cc60a0a9a8be90b19d0b5e.roa
File: 609cf630ac4edb22d5cc60a0a9a8be90b19d0b5e.roa (raw, json)
Hash identifier: BQu/rbqslycoxLiY0GEKKwlarPbzKZU6FE1jwa0lmVE=
Subject key identifier: 40:5D:28:FC:1A:46:0E:29:68:C9:10:F1:6C:8C:1B:75:E6:EB:E0:E0
Certificate issuer: /CN=359bbb07d3fe384f9e2ef6eebcf99283833f3c0c
Certificate serial: 0BAB00
Authority key identifier: E8:2D:E3:E8:40:29:3A:8E:69:BD:27:77:CB:36:9D:49:A2:3E:71:A6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/359bbb07d3fe384f9e2ef6eebcf99283833f3c0c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/cb67e9d1-1243-45c8-9a3b-4b6de5358322/609cf630ac4edb22d5cc60a0a9a8be90b19d0b5e.roa
Signing time: Wed 24 Mar 2021 14:34:43 +0000
ROA not before: Wed 24 Mar 2021 14:34:43 +0000
ROA not after: Tue 24 Mar 2026 14:34:43 +0000
asID: 267869
IP address blocks: 45.176.232.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 764672 (0xbab00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359bbb07d3fe384f9e2ef6eebcf99283833f3c0c
Validity
Not Before: Mar 24 14:34:43 2021 GMT
Not After : Mar 24 14:34:43 2026 GMT
Subject: CN=609cf630ac4edb22d5cc60a0a9a8be90b19d0b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ff:cc:7e:e8:ca:53:c6:7c:5d:90:e5:7a:bf:
5f:4e:fe:4d:08:6d:1d:f5:40:ed:29:25:79:a4:5f:
78:bf:c2:0e:23:a0:6e:27:4f:9b:54:a3:83:73:ec:
5d:25:c0:42:7e:7e:89:df:87:93:9c:3f:bb:36:1c:
a7:08:fd:45:24:6b:4b:ae:1e:8b:e7:f8:78:16:52:
cf:c0:a1:b1:b6:d6:00:8e:37:c5:03:76:eb:64:55:
52:d8:46:8c:fe:4a:42:88:4e:94:07:d7:a8:9f:33:
19:a3:00:10:a3:f5:b1:df:4e:e4:2e:55:ff:2e:1d:
5c:40:20:df:42:cd:86:44:7a:77:93:74:99:64:e8:
dc:f1:dc:0f:1d:d6:f1:cd:37:3e:89:e0:cd:fa:97:
ab:55:b8:7f:19:4b:71:60:2b:87:08:ee:9d:c5:0e:
8a:7d:ec:e3:9b:44:83:53:25:07:d3:6b:6a:9e:b1:
f3:37:ee:3e:17:26:c9:26:79:fd:6d:31:a5:b9:c4:
1a:49:4a:f9:51:b9:be:27:3b:d1:ef:f1:de:64:7d:
da:1d:0e:27:a0:75:bc:a5:ed:ad:2e:47:3f:e1:aa:
73:85:46:97:b0:fd:28:11:a9:95:1e:42:09:8a:92:
7a:39:6f:a5:d4:9c:b6:e5:8b:0b:21:40:a7:c1:00:
15:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5D:28:FC:1A:46:0E:29:68:C9:10:F1:6C:8C:1B:75:E6:EB:E0:E0
X509v3 Authority Key Identifier:
keyid:E8:2D:E3:E8:40:29:3A:8E:69:BD:27:77:CB:36:9D:49:A2:3E:71:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/359bbb07d3fe384f9e2ef6eebcf99283833f3c0c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cb67e9d1-1243-45c8-9a3b-4b6de5358322/609cf630ac4edb22d5cc60a0a9a8be90b19d0b5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/cb67e9d1-1243-45c8-9a3b-4b6de5358322/359bbb07d3fe384f9e2ef6eebcf99283833f3c0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.176.232.0/22
Signature Algorithm: sha256WithRSAEncryption
93:85:41:a1:a2:8e:2b:53:2e:28:4d:d1:6f:44:50:03:15:ab:
87:e5:33:9e:5f:3b:2c:38:c6:1b:1f:9b:b6:ff:a8:b1:1e:9a:
9d:1c:4e:7a:6f:6c:e9:16:74:38:97:b1:08:61:c9:bc:70:e0:
ea:4f:c1:94:c5:9d:a7:d6:56:cd:58:bf:16:8d:b3:a5:5d:3d:
86:82:03:46:13:72:8b:81:5a:de:7b:23:f7:d1:6c:0e:55:1a:
9e:da:7f:04:b1:f8:e2:4c:a4:e1:85:14:3f:d8:e3:62:a6:1c:
88:b5:bc:b6:82:e6:d0:b0:e3:10:f2:68:8c:c5:0b:61:07:e6:
8e:39:27:35:8b:b5:c9:fd:f0:a3:1f:5b:ff:0a:e3:08:95:3f:
ba:75:5a:3e:f2:d8:6f:8c:5d:e5:f3:37:09:7b:e4:84:ba:a4:
5f:0d:34:3c:ea:bb:a8:b4:9b:44:e0:5f:db:6c:28:ee:cb:25:
00:03:37:76:0c:aa:95:53:4e:5c:a3:6b:83:03:4a:90:d9:f6:
73:99:33:5c:38:12:d3:44:b2:5d:fa:76:4f:fd:72:e8:a0:9e:
2a:41:13:9c:0c:d4:5e:01:87:9f:f0:e1:dc:96:a9:83:b0:b9:
19:d3:73:14:58:cf:36:2f:59:41:94:0c:ec:3b:77:86:b0:57:
7d:e8:05:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:39 2023 by rpki-client on console-fra.rpki-client.org