Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d2c7834f-d9fb-4602-a19d-ebc045750344/c8c4e13368ee163db480ca4a8e743e94fc05830e.roa
File: c8c4e13368ee163db480ca4a8e743e94fc05830e.roa (raw, json)
Hash identifier: BsCwufYznAdd8fBsHuSV/JLSRAs4r31v6QQB3gLo3LM=
Subject key identifier: 7B:AD:79:0D:24:32:BE:32:2B:70:E2:5E:A3:73:68:95:2D:B5:E9:CA
Certificate issuer: /CN=8669f75329643f51ee734f5266f76ad26961b120
Certificate serial: 31B8
Authority key identifier: 5F:D3:D7:22:E0:42:41:7A:72:CD:74:40:C4:7E:3C:47:6D:A2:DA:45
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8669f75329643f51ee734f5266f76ad26961b120.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d2c7834f-d9fb-4602-a19d-ebc045750344/c8c4e13368ee163db480ca4a8e743e94fc05830e.roa
Signing time: Sat 07 Oct 2023 21:14:13 +0000
ROA not before: Fri 06 Oct 2023 21:14:13 +0000
ROA not after: Tue 07 Oct 2025 21:14:13 +0000
asID: 28435
IP address blocks: 45.189.148.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12728 (0x31b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8669f75329643f51ee734f5266f76ad26961b120
Validity
Not Before: Oct 6 21:14:13 2023 GMT
Not After : Oct 7 21:14:13 2025 GMT
Subject: CN=c8c4e13368ee163db480ca4a8e743e94fc05830e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d7:a8:11:50:ef:5c:33:b2:0e:72:9c:2e:28:
a1:03:d7:80:49:a7:73:02:49:f8:f4:ae:bb:ce:43:
3d:2f:05:97:10:04:63:24:77:f7:9e:5f:b4:05:a6:
3c:9e:3b:0b:09:c7:4b:1f:0b:f4:9b:aa:3a:58:9d:
41:f9:7c:2d:56:36:5a:82:d1:c2:a9:92:c6:c0:dd:
f8:de:d8:b4:c3:d3:a7:b7:24:7c:5b:ca:98:3a:ec:
7c:b7:7b:1f:4f:10:c4:4d:b4:d5:fc:6b:7a:dd:c7:
f1:95:27:d3:34:c8:dc:2f:df:a3:fe:72:b3:20:d3:
c4:bd:d0:d2:40:63:64:db:13:3c:ad:3c:e9:7f:f1:
27:71:77:3e:c1:1d:1b:77:de:22:34:c1:a5:0c:40:
8d:4d:95:5f:84:1b:e0:57:50:80:a6:6e:c4:88:0c:
18:31:eb:22:92:0e:64:81:b4:a9:c5:be:92:a1:d3:
bd:73:cc:3a:7e:40:e7:74:e6:f4:10:04:7d:0c:09:
e0:76:de:81:47:b9:d0:f5:82:3e:29:ff:fa:9b:39:
78:af:b7:31:00:7e:e0:c3:90:4c:5f:50:68:2c:5e:
43:9e:7e:6a:72:1f:f6:24:aa:2f:76:80:d3:4c:93:
ff:68:89:91:d2:9b:e5:f9:32:1e:de:44:49:37:a0:
7d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AD:79:0D:24:32:BE:32:2B:70:E2:5E:A3:73:68:95:2D:B5:E9:CA
X509v3 Authority Key Identifier:
keyid:5F:D3:D7:22:E0:42:41:7A:72:CD:74:40:C4:7E:3C:47:6D:A2:DA:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8669f75329643f51ee734f5266f76ad26961b120.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d2c7834f-d9fb-4602-a19d-ebc045750344/c8c4e13368ee163db480ca4a8e743e94fc05830e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d2c7834f-d9fb-4602-a19d-ebc045750344/8669f75329643f51ee734f5266f76ad26961b120.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.189.148.0/22
Signature Algorithm: sha256WithRSAEncryption
13:3e:ef:11:60:7d:19:44:71:36:19:24:b5:eb:d6:6b:d1:a2:
d3:10:a7:a6:b0:ee:79:ce:fb:a2:03:94:d1:d2:26:70:46:f6:
90:ab:f2:31:42:93:98:b4:91:a3:ac:6f:f9:52:11:b0:59:f4:
fa:4c:0c:30:6e:e2:51:31:b1:52:2d:ad:ab:d2:0a:9f:41:f5:
96:90:e8:92:84:c5:db:1e:75:ef:d8:09:32:ea:e2:ec:73:09:
c2:a5:d5:9c:ff:d6:92:92:6f:31:be:65:71:5c:d2:fe:7b:2c:
2a:0a:fc:c8:bb:90:54:a4:8d:d0:69:0b:48:55:99:b6:a5:55:
1a:a1:2e:5a:a3:39:1d:8f:85:6a:af:5c:37:a9:49:20:e9:c6:
1b:04:4a:89:33:5c:32:c0:3f:ad:18:45:a9:1c:d4:66:08:27:
71:4a:62:db:8b:34:77:df:f5:cf:d2:94:45:75:39:15:3d:31:
9f:96:f4:35:79:5d:51:32:cb:f3:d9:75:69:cb:3f:87:19:d3:
09:6a:db:7d:82:e8:a5:58:fa:0d:73:ab:78:b8:40:ea:76:cc:
f7:e9:91:f7:3b:ac:58:7b:2e:c8:57:f4:e5:5c:c6:ee:fe:5c:
94:19:10:73:55:99:d6:45:6a:02:0e:b5:fe:8b:f9:60:da:90:
7c:31:18:a6
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICMbgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODY2
OWY3NTMyOTY0M2Y1MWVlNzM0ZjUyNjZmNzZhZDI2OTYxYjEyMDAeFw0yMzEwMDYy
MTE0MTNaFw0yNTEwMDcyMTE0MTNaMDMxMTAvBgNVBAMTKGM4YzRlMTMzNjhlZTE2
M2RiNDgwY2E0YThlNzQzZTk0ZmMwNTgzMGUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDR16gRUO9cM7IOcpwuKKED14BJp3MCSfj0rrvOQz0vBZcQBGMk
d/eeX7QFpjyeOwsJx0sfC/SbqjpYnUH5fC1WNlqC0cKpksbA3fje2LTD06e3JHxb
ypg67Hy3ex9PEMRNtNX8a3rdx/GVJ9M0yNwv36P+crMg08S90NJAY2TbEzytPOl/
8Sdxdz7BHRt33iI0waUMQI1NlV+EG+BXUICmbsSIDBgx6yKSDmSBtKnFvpKh071z
zDp+QOd05vQQBH0MCeB23oFHudD1gj4p//qbOXivtzEAfuDDkExfUGgsXkOefmpy
H/Ykqi92gNNMk/9oiZHSm+X5Mh7eREk3oH0zAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUe615DSQyvjIrcOJeo3NolS216cowHwYDVR0jBBgwFoAUX9PXIuBCQXpyzXRA
xH48R22i2kUwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS84NjY5Zjc1
MzI5NjQzZjUxZWU3MzRmNTI2NmY3NmFkMjY5NjFiMTIwLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9kMmM3ODM0Zi1kOWZiLTQ2MDItYTE5ZC1lYmMwNDU3
NTAzNDQvYzhjNGUxMzM2OGVlMTYzZGI0ODBjYTRhOGU3NDNlOTRmYzA1ODMwZS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2QyYzc4MzRmLWQ5ZmItNDYwMi1hMTlkLWViYzA0
NTc1MDM0NC84NjY5Zjc1MzI5NjQzZjUxZWU3MzRmNTI2NmY3NmFkMjY5NjFiMTIw
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQCLb2UMA0GCSqGSIb3DQEBCwUAA4IBAQATPu8RYH0ZRHE2GSS1
69Zr0aLTEKemsO55zvuiA5TR0iZwRvaQq/IxQpOYtJGjrG/5UhGwWfT6TAwwbuJR
MbFSLa2r0gqfQfWWkOiShMXbHnXv2Aky6uLscwnCpdWc/9aSkm8xvmVxXNL+eywq
CvzIu5BUpI3QaQtIVZm2pVUaoS5aozkdj4Vqr1w3qUkg6cYbBEqJM1wywD+tGEWp
HNRmCCdxSmLbizR33/XP0pRFdTkVPTGflvQ1eV1RMsvz2XVpyz+HGdMJatt9guil
WPoNc6t4uEDqdsz36ZH3O6xYey7IV/TlXMbu/lyUGRBzVZnWRWoCDrX+i/lg2pB8
MRim
-----END CERTIFICATE-----
Generated at Sun Oct 8 00:54:34 2023 by rpki-client on console-fra.rpki-client.org