Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d04e9fc6-dbac-4df1-8f65-61be96597eb0/842700aa4dfbf5c48465a66cc7edf498c226bbf2.roa
File: 842700aa4dfbf5c48465a66cc7edf498c226bbf2.roa (raw, json)
Hash identifier: bGw+e5mnSYsExyB9/18OKXSaXkZYGQlPla5AjWZhgGc=
Subject key identifier: 59:A1:F4:C3:8C:D1:64:F7:3B:B1:C1:C6:E9:DE:D7:17:24:36:CA:39
Certificate issuer: /CN=b53271ee2840841c1d9b827c8a9b459c25cb2f8e
Certificate serial: 1DFD06
Authority key identifier: AA:34:1B:1B:38:49:6B:1E:BC:C6:F7:6D:96:CB:19:AF:EB:8A:4F:A6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b53271ee2840841c1d9b827c8a9b459c25cb2f8e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d04e9fc6-dbac-4df1-8f65-61be96597eb0/842700aa4dfbf5c48465a66cc7edf498c226bbf2.roa
Signing time: Fri 31 Mar 2023 18:00:22 +0000
ROA not before: Thu 30 Mar 2023 17:53:35 +0000
ROA not after: Mon 31 Mar 2025 17:53:35 +0000
asID: 267885
IP address blocks: 45.177.16.0/24 maxlen: 24
45.177.17.0/24 maxlen: 24
45.177.18.0/24 maxlen: 24
45.177.19.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1965318 (0x1dfd06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53271ee2840841c1d9b827c8a9b459c25cb2f8e
Validity
Not Before: Mar 30 17:53:35 2023 GMT
Not After : Mar 31 17:53:35 2025 GMT
Subject: CN=842700aa4dfbf5c48465a66cc7edf498c226bbf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:59:de:73:da:05:04:95:53:0e:11:bd:1f:9c:
05:dd:32:2a:33:88:e8:09:08:5a:01:47:21:c1:ea:
7b:a7:ba:51:f0:b7:35:5f:08:1f:c2:18:5f:99:1b:
df:8c:ba:54:6d:01:3c:a9:cc:bc:cc:43:90:e9:79:
e5:b3:64:ae:34:06:dc:70:aa:a6:8a:18:d8:28:13:
48:d2:94:52:af:f2:3f:55:fa:92:78:91:33:55:e7:
09:cd:ff:df:4a:a0:1f:b7:40:54:cd:81:b4:d6:04:
c7:2a:46:03:8a:51:d2:54:13:3d:f0:ad:a0:b3:b2:
c8:bb:6c:ca:4a:d4:cc:37:14:9f:c3:97:30:9e:f4:
7c:32:96:5f:c5:da:d0:0e:d4:d6:60:81:a6:71:83:
be:a1:ee:13:ca:e9:a8:c1:19:27:6e:7a:39:be:3a:
f9:32:23:90:f1:67:de:47:2e:55:e0:15:4d:0c:bb:
50:9c:e1:ff:2f:e1:85:65:7e:5f:d3:a8:92:85:bd:
4b:f3:11:c6:53:37:2c:d1:24:25:9a:a8:fc:f7:76:
e4:f9:7b:87:2b:7d:b5:94:f2:8f:92:8e:4c:f0:be:
25:1a:07:7b:7c:31:45:da:2b:f4:95:ac:d9:52:73:
53:c7:77:ae:53:92:ad:28:61:13:a7:62:1d:38:c7:
e5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A1:F4:C3:8C:D1:64:F7:3B:B1:C1:C6:E9:DE:D7:17:24:36:CA:39
X509v3 Authority Key Identifier:
keyid:AA:34:1B:1B:38:49:6B:1E:BC:C6:F7:6D:96:CB:19:AF:EB:8A:4F:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b53271ee2840841c1d9b827c8a9b459c25cb2f8e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d04e9fc6-dbac-4df1-8f65-61be96597eb0/842700aa4dfbf5c48465a66cc7edf498c226bbf2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d04e9fc6-dbac-4df1-8f65-61be96597eb0/b53271ee2840841c1d9b827c8a9b459c25cb2f8e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.177.16.0/22
Signature Algorithm: sha256WithRSAEncryption
87:0d:a8:5c:2a:15:5f:87:00:75:72:fe:d5:98:44:f9:d3:63:
07:46:47:32:57:0c:c9:75:49:1d:eb:88:e3:f4:bd:f2:24:f1:
f4:f0:49:b4:3a:73:7e:8b:07:8c:36:bc:63:34:df:fc:fb:98:
11:c7:de:b6:ab:96:3c:e8:4b:b9:22:9a:2c:2d:cf:87:92:e4:
0c:b6:46:e5:7f:95:e4:96:9c:61:d6:5c:da:67:8b:f0:d6:f9:
a9:64:50:f1:c8:a2:f9:9c:35:0c:e5:55:c5:74:52:ab:0c:72:
de:bc:6e:49:87:a4:12:82:c8:39:90:7e:f9:c9:9f:27:84:90:
16:77:97:95:72:78:2a:6e:15:7b:fd:54:fe:92:28:fc:ee:d4:
f6:81:7d:a7:69:ee:e3:11:09:71:39:04:c7:fe:dc:68:f7:88:
31:95:2e:96:32:0f:cb:99:c9:d8:d5:77:a2:a4:b8:6a:bc:a5:
be:59:73:13:48:e2:68:67:db:a7:3d:15:f7:0a:81:77:64:9c:
98:ee:fb:58:a3:81:92:7a:0f:79:93:aa:a9:e8:60:99:b4:da:
91:cf:9f:d1:bc:f9:0b:ba:21:7d:8d:a9:4b:42:e2:ae:0a:e8:
f1:48:82:a1:37:43:66:19:a8:a1:a6:a5:07:30:ec:fc:24:27:
0f:8c:92:97
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHf0GMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGI1
MzI3MWVlMjg0MDg0MWMxZDliODI3YzhhOWI0NTljMjVjYjJmOGUwHhcNMjMwMzMw
MTc1MzM1WhcNMjUwMzMxMTc1MzM1WjAzMTEwLwYDVQQDEyg4NDI3MDBhYTRkZmJm
NWM0ODQ2NWE2NmNjN2VkZjQ5OGMyMjZiYmYyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAllnec9oFBJVTDhG9H5wF3TIqM4joCQhaAUchwep7p7pR8Lc1
XwgfwhhfmRvfjLpUbQE8qcy8zEOQ6Xnls2SuNAbccKqmihjYKBNI0pRSr/I/VfqS
eJEzVecJzf/fSqAft0BUzYG01gTHKkYDilHSVBM98K2gs7LIu2zKStTMNxSfw5cw
nvR8MpZfxdrQDtTWYIGmcYO+oe4TyumowRknbno5vjr5MiOQ8WfeRy5V4BVNDLtQ
nOH/L+GFZX5f06iShb1L8xHGUzcs0SQlmqj893bk+XuHK321lPKPko5M8L4lGgd7
fDFF2iv0lazZUnNTx3euU5KtKGETp2IdOMfl0QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFmh9MOM0WT3O7HBxune1xckNso5MB8GA1UdIwQYMBaAFKo0Gxs4SWsevMb3
bZbLGa/rik+mMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjUzMjcx
ZWUyODQwODQxYzFkOWI4MjdjOGE5YjQ1OWMyNWNiMmY4ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDA0ZTlmYzYtZGJhYy00ZGYxLThmNjUtNjFiZTk2
NTk3ZWIwLzg0MjcwMGFhNGRmYmY1YzQ4NDY1YTY2Y2M3ZWRmNDk4YzIyNmJiZjIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kMDRlOWZjNi1kYmFjLTRkZjEtOGY2NS02MWJl
OTY1OTdlYjAvYjUzMjcxZWUyODQwODQxYzFkOWI4MjdjOGE5YjQ1OWMyNWNiMmY4
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi2xEDANBgkqhkiG9w0BAQsFAAOCAQEAhw2oXCoVX4cAdXL+
1ZhE+dNjB0ZHMlcMyXVJHeuI4/S98iTx9PBJtDpzfosHjDa8YzTf/PuYEcfetquW
POhLuSKaLC3Ph5LkDLZG5X+V5JacYdZc2meL8Nb5qWRQ8cii+Zw1DOVVxXRSqwxy
3rxuSYekEoLIOZB++cmfJ4SQFneXlXJ4Km4Ve/1U/pIo/O7U9oF9p2nu4xEJcTkE
x/7caPeIMZUuljIPy5nJ2NV3oqS4arylvllzE0jiaGfbpz0V9wqBd2ScmO77WKOB
knoPeZOqqehgmbTakc+f0bz5C7ohfY2pS0Lirgro8UiCoTdDZhmooaalBzDs/CQn
D4ySlw==
-----END CERTIFICATE-----
Generated at Fri Dec 29 16:10:48 2023 by rpki-client on console-fra.rpki-client.org