Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d47b7104-4089-4a18-9345-2a7514ab534a/2b14dadf43ce6bd910127b96d996a1434e30552f.roa
File: 2b14dadf43ce6bd910127b96d996a1434e30552f.roa (raw, json)
Hash identifier: CAMNdgQB8yrxGO+UZXQoJ3rdp7aCyhSaVeFcUpMD9EA=
Subject key identifier: 78:B4:DF:47:5B:24:35:EB:32:8D:9F:6B:BB:28:B6:20:8A:92:F3:FD
Certificate issuer: /CN=dd0af7b6e3a89703bf69f14c87e734e6e57b2b98
Certificate serial: 1FCAA6
Authority key identifier: 04:6A:4C:3C:87:8A:D1:A8:AA:46:E0:62:E3:55:44:96:1D:1A:CA:3B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd0af7b6e3a89703bf69f14c87e734e6e57b2b98.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d47b7104-4089-4a18-9345-2a7514ab534a/2b14dadf43ce6bd910127b96d996a1434e30552f.roa
Signing time: Mon 17 Apr 2023 18:52:55 +0000
ROA not before: Sun 16 Apr 2023 18:52:55 +0000
ROA not after: Thu 17 Apr 2025 18:52:55 +0000
asID: 266771
IP address blocks: 45.232.176.0/24 maxlen: 24
45.232.177.0/24 maxlen: 24
45.232.178.0/24 maxlen: 24
45.232.179.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2083494 (0x1fcaa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd0af7b6e3a89703bf69f14c87e734e6e57b2b98
Validity
Not Before: Apr 16 18:52:55 2023 GMT
Not After : Apr 17 18:52:55 2025 GMT
Subject: CN=2b14dadf43ce6bd910127b96d996a1434e30552f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:1d:ed:0c:11:ec:3c:f2:d7:f3:16:8d:5e:de:
7b:78:64:e7:44:bc:7a:a0:5b:97:a5:47:32:8f:5a:
2c:58:c4:b7:88:e4:c6:33:eb:e1:b0:c4:84:5f:08:
63:51:d6:55:ba:bd:58:cf:fa:26:2e:9b:70:4a:54:
b5:c0:e9:ea:28:0d:3e:4d:1d:02:f0:c5:a3:fe:39:
aa:51:31:b1:82:57:64:70:fe:b0:39:87:d4:64:36:
07:c4:46:2a:7a:e1:3b:99:6e:3f:51:cd:58:c8:fe:
5d:85:69:72:36:54:f3:64:d5:87:41:11:bf:fa:34:
33:0f:7c:77:d9:f7:c4:58:44:9f:e9:a4:78:f6:44:
70:f0:06:60:48:56:4e:3a:8f:f1:f1:5d:2e:38:87:
af:da:2b:c3:1f:67:3d:17:63:35:ad:a7:01:d9:8d:
da:54:cb:0b:d9:a4:78:ed:03:68:d0:23:92:81:ce:
61:13:46:46:c0:37:48:e8:7a:39:c9:df:ae:79:e4:
20:f5:7c:bc:cd:1c:e9:31:22:4f:65:cd:a8:be:82:
08:65:10:2f:c5:13:6f:38:f5:ce:9e:f2:3f:70:8f:
76:dd:00:f4:44:23:f5:f4:8a:a0:12:ba:14:ec:3e:
8c:c4:29:10:fc:63:02:d2:8b:e6:65:4b:81:0a:7d:
ca:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B4:DF:47:5B:24:35:EB:32:8D:9F:6B:BB:28:B6:20:8A:92:F3:FD
X509v3 Authority Key Identifier:
keyid:04:6A:4C:3C:87:8A:D1:A8:AA:46:E0:62:E3:55:44:96:1D:1A:CA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd0af7b6e3a89703bf69f14c87e734e6e57b2b98.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d47b7104-4089-4a18-9345-2a7514ab534a/2b14dadf43ce6bd910127b96d996a1434e30552f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d47b7104-4089-4a18-9345-2a7514ab534a/dd0af7b6e3a89703bf69f14c87e734e6e57b2b98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.232.176.0/22
Signature Algorithm: sha256WithRSAEncryption
61:f6:9c:52:3d:ec:77:16:98:fc:19:94:56:b5:1f:5b:cb:0a:
81:71:29:4a:ae:57:2a:99:e6:b2:07:7d:a9:2e:cb:1e:03:57:
e5:b8:ec:32:87:29:ad:f5:b1:5c:3d:b7:3e:fb:75:bb:dc:d0:
85:5d:55:95:d1:77:cc:f7:cf:ac:c3:c6:7a:2c:b1:d8:9a:9a:
81:1f:b6:50:a8:5d:93:eb:61:22:32:49:85:1f:ab:1e:0a:f6:
25:d2:85:86:27:c4:6d:98:e4:d6:7a:01:cc:80:4b:84:4d:d4:
97:33:8c:0d:bd:aa:e0:59:e0:40:6c:4a:02:94:26:b4:fd:56:
a7:64:7f:10:75:2e:c8:91:b9:a7:06:98:15:70:31:dd:c2:8d:
64:78:e5:53:e4:4a:db:fc:7a:e8:10:79:96:31:03:31:82:04:
36:d7:b4:87:5a:3c:74:f1:78:56:81:b7:8e:69:03:de:ac:0c:
d9:be:ae:ce:e7:9e:84:a4:da:0c:e2:30:da:5c:2f:25:9f:57:
c7:c3:48:bc:75:59:bd:f2:5a:e8:de:a6:c3:43:77:35:1c:03:
b4:ba:ee:63:e6:79:4d:cc:f6:da:da:73:45:c8:4c:ba:dd:a7:
87:d2:ce:e5:ed:69:a4:fa:7c:16:7a:bc:7e:d5:04:2c:63:d3:
95:3c:60:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 4 18:44:04 2024 by rpki-client on console-fra.rpki-client.org