Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ccf3b7f7-7897-457a-bf9f-1692c5e9da32/4c3cd4dba8f733d8b93b61b218ab350ffe457928.roa
File: 4c3cd4dba8f733d8b93b61b218ab350ffe457928.roa (raw, json)
Hash identifier: ogIgpN3Vq6rblGH9E6T2WlgiaIblbkSP2GwvaVKpU+U=
Subject key identifier: 83:9C:11:DC:28:39:80:9D:DF:93:07:9D:18:07:3D:B0:08:CA:92:F1
Certificate issuer: /CN=731610640063561b294840cbdb7b67bb5e4dba3d
Certificate serial: 0F6AAD
Authority key identifier: 59:08:9A:13:79:FD:E9:7D:59:E4:B0:91:47:99:FA:D0:9D:69:98:58
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/731610640063561b294840cbdb7b67bb5e4dba3d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ccf3b7f7-7897-457a-bf9f-1692c5e9da32/4c3cd4dba8f733d8b93b61b218ab350ffe457928.roa
Signing time: Fri 11 Jun 2021 03:03:36 +0000
ROA not before: Thu 10 Jun 2021 03:00:00 +0000
ROA not after: Sat 10 Jun 2023 03:00:00 +0000
asID: 265691
IP address blocks: 45.5.68.0/24 maxlen: 24
45.5.69.0/24 maxlen: 24
45.5.70.0/24 maxlen: 24
45.5.71.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1010349 (0xf6aad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731610640063561b294840cbdb7b67bb5e4dba3d
Validity
Not Before: Jun 10 03:00:00 2021 GMT
Not After : Jun 10 03:00:00 2023 GMT
Subject: CN=4c3cd4dba8f733d8b93b61b218ab350ffe457928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7c:bd:c1:0f:ee:12:fd:46:37:19:74:37:d9:
99:7e:3f:0c:1a:6b:5c:67:a7:72:6d:b4:33:db:8d:
77:33:d4:81:a7:51:6e:6b:a3:bc:2d:33:5e:c2:05:
38:bc:bd:99:b0:f3:6c:f3:f6:4f:c8:60:e7:cd:8c:
0d:79:e3:8b:a5:93:ba:de:16:16:a2:33:97:00:97:
98:11:28:46:cc:12:72:fd:ed:8d:92:07:cb:52:0c:
bf:82:ff:7a:64:74:b7:16:5a:64:9a:a6:c0:b7:ad:
9e:d7:ba:11:d2:d3:69:da:33:77:10:18:36:04:44:
70:dd:4e:72:c1:51:6c:e4:58:03:bd:8c:0a:2f:0f:
4c:87:5b:d9:8e:60:bf:c5:b9:64:bb:c5:ae:db:f8:
83:e9:7c:a8:7b:0f:f7:ad:7e:24:3b:53:ef:ba:2b:
e1:26:58:90:f2:2b:be:cb:ca:e4:fe:f4:20:d4:b6:
0e:c5:e8:90:a6:b6:40:b8:50:e2:6b:41:4c:17:64:
e9:c7:9e:a8:a3:46:a3:f5:64:e6:ec:4f:cc:bc:ad:
b5:83:c8:fc:39:9a:2d:4a:9b:d9:8e:58:34:9a:10:
c2:88:2a:98:31:ae:84:21:88:33:e8:8e:37:4e:6e:
1f:f6:88:26:43:5b:bc:31:c6:aa:b9:d3:86:81:61:
59:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9C:11:DC:28:39:80:9D:DF:93:07:9D:18:07:3D:B0:08:CA:92:F1
X509v3 Authority Key Identifier:
keyid:59:08:9A:13:79:FD:E9:7D:59:E4:B0:91:47:99:FA:D0:9D:69:98:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/731610640063561b294840cbdb7b67bb5e4dba3d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ccf3b7f7-7897-457a-bf9f-1692c5e9da32/4c3cd4dba8f733d8b93b61b218ab350ffe457928.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ccf3b7f7-7897-457a-bf9f-1692c5e9da32/731610640063561b294840cbdb7b67bb5e4dba3d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.5.68.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:73:76:8f:15:d4:61:b4:9e:a9:9d:9f:36:a7:70:97:2c:ac:
b8:6e:4d:be:83:97:f2:d8:b4:5e:5d:22:7b:1d:7b:74:d9:e7:
6d:39:9e:4a:6d:c1:96:ef:61:d5:87:a8:ae:1c:86:31:08:cf:
d8:13:71:2e:e4:61:f9:05:73:f2:9d:e3:32:99:6e:e1:70:a8:
55:2e:a3:77:1f:af:92:b7:0e:de:a1:61:56:7b:e1:df:c9:ec:
50:46:99:21:25:25:80:e8:4c:26:3b:a1:1d:76:72:80:fb:8a:
56:95:f2:b7:4a:4f:ad:7d:15:61:6b:b6:c5:b7:1b:22:18:b8:
b7:9c:ad:b6:59:f2:e9:0f:35:41:c8:f6:0a:7a:be:d2:80:3c:
6b:91:68:a4:55:85:7a:5a:a9:f0:2c:16:f7:ce:af:27:bb:57:
f7:89:83:3d:d8:ed:47:12:83:3d:65:a1:eb:ec:53:58:54:f6:
8e:39:e8:68:78:ca:34:90:84:80:1c:bd:e6:8c:2b:7d:a5:ea:
c0:ba:e0:b1:69:79:eb:5e:ed:ad:9b:4f:35:12:5c:f8:62:5f:
74:3b:5b:78:1f:fa:aa:1a:51:52:38:ff:6d:a4:97:4c:6f:cf:
85:6f:c3:97:b8:26:dc:78:5d:ce:94:ab:2b:17:61:a9:dd:9c:
11:4b:38:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:39 2023 by rpki-client on console-fra.rpki-client.org