Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cc151f57-8485-4fc0-8d46-e6f572005a93/af0c54818519a9426a3af76a55715c64a3e99a4c.roa
File: af0c54818519a9426a3af76a55715c64a3e99a4c.roa (raw, json)
Hash identifier: HSMAs7xplf0dHMB2xXO7z8dPbpMVUdgQgE/Ev7Zog1U=
Subject key identifier: 11:C6:65:6B:0C:02:DE:60:D5:97:F5:56:C4:B1:7B:4E:0A:FC:65:C1
Certificate issuer: /CN=9882ed47a7ebae944c46595d3bea57e07895467a
Certificate serial: 1ACB99
Authority key identifier: A1:65:68:55:3B:89:83:87:79:D2:E4:71:E0:B2:E2:6D:BD:F7:DF:F5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9882ed47a7ebae944c46595d3bea57e07895467a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/cc151f57-8485-4fc0-8d46-e6f572005a93/af0c54818519a9426a3af76a55715c64a3e99a4c.roa
Signing time: Mon 24 Oct 2022 17:29:58 +0000
ROA not before: Sat 22 Oct 2022 17:29:33 +0000
ROA not after: Sun 24 Oct 2027 17:29:33 +0000
asID: 265862
IP address blocks: 45.225.216.0/22 maxlen: 23
Validation: Failed, certificate revoked on Tue 16 Jan 2024 12:46:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1756057 (0x1acb99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9882ed47a7ebae944c46595d3bea57e07895467a
Validity
Not Before: Oct 22 17:29:33 2022 GMT
Not After : Oct 24 17:29:33 2027 GMT
Subject: CN=af0c54818519a9426a3af76a55715c64a3e99a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:3b:55:64:93:6d:2d:f3:ec:0f:f2:15:8a:d5:
83:89:b8:b1:45:8b:5a:be:2d:08:10:1c:de:0d:a7:
47:53:a9:64:85:7e:d6:94:8c:6b:cc:23:ab:08:c1:
91:2e:12:b3:c9:85:02:e2:c7:e1:2f:e0:44:82:e6:
a6:2a:48:e3:6e:c5:91:ae:9c:bf:7c:93:6f:d8:eb:
9a:ec:85:1c:0c:37:40:73:28:ed:43:da:5f:ea:0f:
a9:76:b2:77:d6:b3:b0:50:b5:05:06:91:f2:5c:fd:
cc:69:15:fc:45:e5:0a:90:f6:3f:ca:43:25:e6:6b:
e8:2b:87:3a:48:d6:7f:08:6f:bd:75:12:05:18:84:
c9:b0:ac:7a:9b:8b:b0:41:ae:1b:a7:0e:f4:5b:04:
33:14:cc:56:5b:3c:97:6c:49:53:fe:9c:03:73:f6:
7f:5d:d2:c5:3a:fd:e1:28:ac:31:da:cc:a2:36:b9:
16:09:15:06:cf:5c:1b:56:13:4c:0a:b4:3c:25:55:
a2:4e:b1:91:53:f0:ab:9e:6a:a0:bb:65:85:ff:12:
f4:3e:2a:ab:21:d9:1a:00:de:3c:7c:7b:84:9a:e5:
5c:2c:d2:cb:23:af:f7:2c:ac:bd:1f:bc:86:81:8b:
84:ea:65:ae:bd:20:a3:0b:14:18:38:7a:ee:5b:16:
84:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C6:65:6B:0C:02:DE:60:D5:97:F5:56:C4:B1:7B:4E:0A:FC:65:C1
X509v3 Authority Key Identifier:
keyid:A1:65:68:55:3B:89:83:87:79:D2:E4:71:E0:B2:E2:6D:BD:F7:DF:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9882ed47a7ebae944c46595d3bea57e07895467a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cc151f57-8485-4fc0-8d46-e6f572005a93/af0c54818519a9426a3af76a55715c64a3e99a4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/cc151f57-8485-4fc0-8d46-e6f572005a93/9882ed47a7ebae944c46595d3bea57e07895467a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.216.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:50:32:17:05:f6:c5:86:65:5a:f2:df:b2:e3:4f:cf:13:58:
7d:5d:08:1f:db:02:6a:a5:d5:4e:a3:a5:d2:34:01:cd:1c:03:
ce:fe:46:3d:f6:67:5f:6d:77:16:ef:ff:06:5b:ce:9c:af:69:
ce:2a:76:6f:77:56:7f:36:20:88:20:be:f5:c2:94:37:0b:ad:
2e:36:cf:d7:5f:6e:e5:a9:4a:45:40:ab:33:6e:a5:eb:0a:49:
7e:59:6c:7a:59:b9:dc:be:a1:b5:d6:bb:08:f5:f1:16:69:b2:
51:60:cb:e3:5c:b4:12:48:6b:6f:83:e0:a3:93:1c:54:7a:e5:
f1:ce:02:7a:da:e1:9d:da:96:14:c9:44:12:79:a3:24:d5:77:
5c:90:16:43:64:08:71:fc:6f:23:c7:c7:07:91:ec:c6:1d:1a:
61:64:83:85:87:8e:f6:8d:c9:f5:f5:48:f2:b8:08:de:ed:5e:
bc:f1:81:53:15:73:7b:70:ec:64:1c:0e:1b:ce:9c:c9:72:77:
99:5b:48:5f:70:0e:12:b1:39:90:7c:10:7b:88:73:1d:2f:58:
8f:d6:15:da:9f:15:fb:9a:69:92:b8:59:bc:67:40:d8:97:94:
b3:63:17:64:76:fd:5f:2b:54:81:8f:eb:e1:35:dc:8a:f9:92:
16:e3:34:b4
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGsuZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk4
ODJlZDQ3YTdlYmFlOTQ0YzQ2NTk1ZDNiZWE1N2UwNzg5NTQ2N2EwHhcNMjIxMDIy
MTcyOTMzWhcNMjcxMDI0MTcyOTMzWjAzMTEwLwYDVQQDEyhhZjBjNTQ4MTg1MTlh
OTQyNmEzYWY3NmE1NTcxNWM2NGEzZTk5YTRjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgDtVZJNtLfPsD/IVitWDibixRYtavi0IEBzeDadHU6lkhX7W
lIxrzCOrCMGRLhKzyYUC4sfhL+BEguamKkjjbsWRrpy/fJNv2Oua7IUcDDdAcyjt
Q9pf6g+pdrJ31rOwULUFBpHyXP3MaRX8ReUKkPY/ykMl5mvoK4c6SNZ/CG+9dRIF
GITJsKx6m4uwQa4bpw70WwQzFMxWWzyXbElT/pwDc/Z/XdLFOv3hKKwx2syiNrkW
CRUGz1wbVhNMCrQ8JVWiTrGRU/Crnmqgu2WF/xL0PiqrIdkaAN48fHuEmuVcLNLL
I6/3LKy9H7yGgYuE6mWuvSCjCxQYOHruWxaEWQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBHGZWsMAt5g1Zf1VsSxe04K/GXBMB8GA1UdIwQYMBaAFKFlaFU7iYOHedLk
ceCy4m2999/1MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTg4MmVk
NDdhN2ViYWU5NDRjNDY1OTVkM2JlYTU3ZTA3ODk1NDY3YS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvY2MxNTFmNTctODQ4NS00ZmMwLThkNDYtZTZmNTcy
MDA1YTkzL2FmMGM1NDgxODUxOWE5NDI2YTNhZjc2YTU1NzE1YzY0YTNlOTlhNGMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jYzE1MWY1Ny04NDg1LTRmYzAtOGQ0Ni1lNmY1
NzIwMDVhOTMvOTg4MmVkNDdhN2ViYWU5NDRjNDY1OTVkM2JlYTU3ZTA3ODk1NDY3
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi3h2DANBgkqhkiG9w0BAQsFAAOCAQEATFAyFwX2xYZlWvLf
suNPzxNYfV0IH9sCaqXVTqOl0jQBzRwDzv5GPfZnX213Fu//BlvOnK9pzip2b3dW
fzYgiCC+9cKUNwutLjbP119u5alKRUCrM26l6wpJfllselm53L6htda7CPXxFmmy
UWDL41y0Ekhrb4Pgo5McVHrl8c4CetrhndqWFMlEEnmjJNV3XJAWQ2QIcfxvI8fH
B5Hsxh0aYWSDhYeO9o3J9fVI8rgI3u1evPGBUxVze3DsZBwOG86cyXJ3mVtIX3AO
ErE5kHwQe4hzHS9Yj9YV2p8V+5ppkrhZvGdA2JeUs2MXZHb9XytUgY/r4TXcivmS
FuM0tA==
-----END CERTIFICATE-----
Generated at Tue Jan 16 16:09:53 2024 by rpki-client on console-fra.rpki-client.org