Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ce4e1c85-38b7-4a68-a3fd-a812b75a731e/2f3267c491189342fad25c793fed93c5dce00adc.roa
File: 2f3267c491189342fad25c793fed93c5dce00adc.roa (raw, json)
Hash identifier: i2dTM/DCxvDB1Ny7hjEr9ocwJlehcU2njG7m67Gcg3s=
Subject key identifier: 47:95:ED:74:EA:F7:0D:EF:46:F1:1D:7A:E5:D3:90:97:2C:9D:5C:EA
Certificate issuer: /CN=222a52d30ba3eec506c4b1db1e0d991b13603988
Certificate serial: 2173CA
Authority key identifier: AB:D1:85:59:8B:3B:64:F3:44:13:E2:79:7F:E1:25:D7:A4:04:4A:B7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/222a52d30ba3eec506c4b1db1e0d991b13603988.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ce4e1c85-38b7-4a68-a3fd-a812b75a731e/2f3267c491189342fad25c793fed93c5dce00adc.roa
Signing time: Wed 05 Jul 2023 01:47:37 +0000
ROA not before: Tue 04 Jul 2023 01:47:36 +0000
ROA not after: Sat 05 Jul 2025 01:47:36 +0000
asID: 52468
IP address blocks: 45.70.196.0/23 maxlen: 23
45.70.198.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2192330 (0x2173ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=222a52d30ba3eec506c4b1db1e0d991b13603988
Validity
Not Before: Jul 4 01:47:36 2023 GMT
Not After : Jul 5 01:47:36 2025 GMT
Subject: CN=2f3267c491189342fad25c793fed93c5dce00adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8f:8b:06:72:3c:1a:a9:58:f4:3e:55:d6:e6:
56:04:b5:c1:82:cf:5d:8d:a9:47:89:97:68:9b:0a:
88:76:64:8d:05:58:10:e1:ca:0e:56:ab:e1:6a:8b:
ca:ac:c5:3e:51:b7:d8:e2:03:66:70:0c:33:17:c2:
90:5b:8e:77:29:01:40:7a:e2:4c:18:3d:df:6f:ca:
67:0b:04:a0:8d:97:76:5c:0b:de:41:49:84:57:8c:
71:a0:78:d1:b7:52:68:df:ac:5c:72:4f:c9:0d:0f:
7b:fb:3b:9c:34:88:91:d1:63:f3:5c:37:df:e6:72:
05:af:ac:a9:20:8d:73:11:df:f3:f2:1b:32:03:2e:
fa:05:c7:43:aa:cd:6b:6c:46:7b:07:b8:35:ab:a3:
c5:2b:3d:bb:d5:e0:73:3e:84:c1:6e:5b:15:33:11:
be:d4:cb:16:6b:7b:45:7e:ce:2b:be:ff:c3:31:5b:
95:7c:2c:65:f5:a6:0d:41:ca:e3:4d:3f:bb:d9:ea:
b8:c8:48:26:f5:d9:a8:35:a7:5e:8a:9d:68:a1:e5:
16:6d:7f:a6:33:07:c9:b6:91:2c:5c:aa:47:a7:57:
d4:f5:de:99:7b:94:71:af:a0:62:9e:ae:bc:78:d2:
8d:cf:9c:af:40:f9:2f:48:d3:8e:49:c4:cc:65:93:
33:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:95:ED:74:EA:F7:0D:EF:46:F1:1D:7A:E5:D3:90:97:2C:9D:5C:EA
X509v3 Authority Key Identifier:
keyid:AB:D1:85:59:8B:3B:64:F3:44:13:E2:79:7F:E1:25:D7:A4:04:4A:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/222a52d30ba3eec506c4b1db1e0d991b13603988.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ce4e1c85-38b7-4a68-a3fd-a812b75a731e/2f3267c491189342fad25c793fed93c5dce00adc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ce4e1c85-38b7-4a68-a3fd-a812b75a731e/222a52d30ba3eec506c4b1db1e0d991b13603988.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.196.0/22
Signature Algorithm: sha256WithRSAEncryption
54:07:4a:e1:51:86:62:eb:17:ce:75:7c:db:98:8c:3a:24:d6:
fd:9f:94:44:53:c3:fd:0b:be:6a:59:0c:2b:d2:1c:c2:9c:03:
eb:9d:42:e0:77:8d:ab:ca:34:1e:cf:d9:f1:cf:c3:cc:0c:6d:
19:58:a3:8d:ca:c7:c3:85:ef:29:60:35:0e:b2:6f:e6:bf:2a:
e4:97:d1:bb:b7:30:4b:85:0c:30:0f:09:c1:df:0d:e9:84:ee:
95:49:82:a0:0b:cb:f0:4a:e8:17:17:f5:23:03:2d:c7:0a:8a:
88:8c:87:d4:b4:95:44:64:78:9d:0b:00:2a:69:e0:72:97:9a:
26:b4:74:dc:74:90:3b:7b:ad:d4:42:c4:f8:2b:2c:92:0e:fb:
47:18:d8:6c:9c:47:30:27:e0:8b:25:3f:d7:04:a1:df:19:10:
32:58:d4:87:69:5d:6c:99:d1:bb:cd:2c:e8:bc:78:bf:39:7b:
81:bb:f0:fa:49:c8:9b:2e:77:76:29:b0:5b:53:6f:89:b4:6b:
f1:b2:f9:95:38:01:55:a4:37:bc:77:02:62:74:d2:96:bc:95:
1f:1d:3b:7f:26:b6:81:e4:e5:a7:3b:27:68:1a:54:25:d2:61:
6e:bb:8b:a3:09:1f:e4:8a:33:f1:0b:b9:84:2a:0c:63:3d:23:
49:9d:61:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 17 20:26:36 2023 by rpki-client on console-ams.rpki-client.org