Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cdbb9ff9-032c-4e60-bbbc-f7d6029843aa/295fe38c3967ea5ac8060b65abeade36d46f62f2.roa
File: 295fe38c3967ea5ac8060b65abeade36d46f62f2.roa (raw, json)
Hash identifier: tPPSTsrLOrw1jNCgZrCWtCCxFx1zGa1i2ORSoqlf5Kw=
Subject key identifier: F6:F7:48:B9:81:45:DE:A7:82:72:66:24:65:57:50:78:4D:CC:5E:90
Certificate issuer: /CN=5959e68ec46f3f840aa00e6a2a7b00f49f253fe7
Certificate serial: 18F889
Authority key identifier: FD:88:C1:AC:A5:DD:02:7B:5C:A0:72:12:26:6E:3D:3C:59:68:45:65
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5959e68ec46f3f840aa00e6a2a7b00f49f253fe7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/cdbb9ff9-032c-4e60-bbbc-f7d6029843aa/295fe38c3967ea5ac8060b65abeade36d46f62f2.roa
Signing time: Wed 27 Jul 2022 01:08:41 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 266676
IP address blocks: 45.229.4.0/24 maxlen: 24
45.229.5.0/24 maxlen: 24
45.229.7.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1636489 (0x18f889)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5959e68ec46f3f840aa00e6a2a7b00f49f253fe7
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=295fe38c3967ea5ac8060b65abeade36d46f62f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:79:8f:03:2c:17:f1:af:b3:87:fa:5a:e9:f8:
ce:40:71:d4:51:84:0b:1e:81:8d:3f:f0:01:e4:8c:
79:ff:f8:32:3f:b1:d1:1e:66:b5:41:9c:a2:24:d1:
b8:66:21:e5:86:ba:33:24:71:e6:86:90:6e:b0:78:
21:8a:49:ed:a1:f3:86:55:9c:d5:ef:d2:41:f3:e4:
fc:d5:f3:5c:1f:e0:cc:2f:b6:f7:40:9b:1f:fa:e8:
6a:0b:df:13:a6:13:fe:33:e8:16:90:60:07:8b:48:
da:fb:f5:0d:64:6e:7b:3c:98:3f:a4:6f:3d:79:67:
cb:8f:b0:29:94:64:8b:38:a3:32:45:ce:55:15:45:
7f:ca:1a:5a:d0:93:90:28:8e:d4:89:f0:04:06:16:
c6:c9:20:60:b2:e8:0b:c1:4d:64:6a:26:3a:3e:58:
c7:a2:42:48:bf:dd:eb:8f:98:42:69:71:dc:6f:b5:
b3:91:99:e5:8c:e5:fd:9b:ef:ed:72:a5:f7:0e:b3:
db:b7:18:40:35:76:05:d4:24:c4:b0:c6:5d:ec:9e:
01:c5:30:db:1a:20:23:40:7b:52:ca:2a:f9:73:d3:
de:10:05:5e:0c:78:10:5f:12:b0:28:27:62:39:63:
93:da:f6:17:d3:c5:18:41:b9:9e:a4:d9:9b:4c:b1:
c5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F7:48:B9:81:45:DE:A7:82:72:66:24:65:57:50:78:4D:CC:5E:90
X509v3 Authority Key Identifier:
keyid:FD:88:C1:AC:A5:DD:02:7B:5C:A0:72:12:26:6E:3D:3C:59:68:45:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5959e68ec46f3f840aa00e6a2a7b00f49f253fe7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cdbb9ff9-032c-4e60-bbbc-f7d6029843aa/295fe38c3967ea5ac8060b65abeade36d46f62f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/cdbb9ff9-032c-4e60-bbbc-f7d6029843aa/5959e68ec46f3f840aa00e6a2a7b00f49f253fe7.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.229.4.0/23
45.229.7.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:6c:04:04:16:1f:8c:3e:9f:f2:26:92:86:52:ba:c9:2e:6c:
27:39:48:8f:1c:66:00:97:62:8c:b7:b3:65:a9:97:45:76:27:
7b:8d:59:f6:63:da:3b:c1:9f:63:ab:ad:4d:5a:f7:09:a6:14:
7d:b1:72:2e:ab:ac:6b:1b:ba:31:cf:a2:df:8e:4e:fc:9e:63:
16:ee:1a:15:f2:4e:09:9c:b8:5b:20:5d:22:19:8e:36:45:07:
d2:da:90:df:44:41:7b:c6:1c:98:d5:7f:be:54:ed:c7:56:cb:
8c:35:6f:c6:de:c9:49:30:d4:ce:5d:54:e5:e4:93:b5:22:fb:
54:31:73:dc:13:46:29:08:01:cc:5c:a4:38:7b:b9:ea:a9:fb:
88:dd:de:88:cd:4e:10:0f:a3:73:98:70:97:8c:dc:21:41:b6:
84:8b:c8:0c:00:33:83:9a:98:44:2c:e3:dd:2f:84:a3:de:f7:
0d:dc:5b:46:97:6e:e8:91:54:5c:2f:8d:91:5e:51:10:28:ed:
cb:11:75:e9:bf:0f:8b:f1:cd:c1:4d:00:09:ae:b7:05:f3:b9:
2f:99:bf:53:90:c4:6c:4e:83:d0:00:b2:00:6c:fe:19:31:cb:
15:a1:ee:da:38:91:99:04:0a:82:47:5e:94:7c:23:8f:1d:10:
78:2b:56:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 20 16:46:06 2023 by rpki-client on console-ams.rpki-client.org