Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/0ef374270d7065a136065e83c00f72b9ceaec8dc.roa
File: 0ef374270d7065a136065e83c00f72b9ceaec8dc.roa (raw, json)
Hash identifier: P2oG1XyQZ1/N+8Yvx0mAynTiPl6a5kJ7+aOhooA6c6w=
Subject key identifier: 39:02:F6:60:F0:BA:20:DA:8F:98:1D:33:A1:84:80:91:90:1A:14:47
Certificate issuer: /CN=f636851443b2f7396ed85156f5c70cbcfa4debd5
Certificate serial: 0D836A
Authority key identifier: 52:BC:7B:8C:C8:D3:91:E2:24:05:1C:BB:CB:C4:E1:7A:60:86:38:E4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f636851443b2f7396ed85156f5c70cbcfa4debd5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/0ef374270d7065a136065e83c00f72b9ceaec8dc.roa
Signing time: Wed 24 Mar 2021 14:40:18 +0000
ROA not before: Wed 24 Mar 2021 14:40:18 +0000
ROA not after: Tue 24 Mar 2026 14:40:18 +0000
asID: 266790
IP address blocks: 45.233.100.0/23 maxlen: 24
45.233.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 885610 (0xd836a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f636851443b2f7396ed85156f5c70cbcfa4debd5
Validity
Not Before: Mar 24 14:40:18 2021 GMT
Not After : Mar 24 14:40:18 2026 GMT
Subject: CN=0ef374270d7065a136065e83c00f72b9ceaec8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:76:02:84:4f:8e:29:36:bd:d7:01:5d:00:e3:
19:dd:be:cb:8f:6b:85:f1:3f:fc:fd:38:98:8d:3b:
5b:da:f9:68:6f:67:b9:38:1c:0c:9a:cc:37:4e:ad:
8c:44:f9:24:4a:64:74:dd:69:8a:16:71:8b:28:1d:
90:c9:fb:3f:d8:a1:80:6d:73:82:e5:c3:50:6e:1f:
5b:45:ea:ae:b6:6c:d3:80:2a:3b:c8:de:c0:fc:b8:
16:a9:31:ba:6e:fd:7a:1f:e1:9d:e9:8f:2a:e4:54:
9e:ff:9c:90:38:d4:52:2b:82:14:39:cb:a9:7b:4e:
ce:9f:3f:ce:e5:79:5f:33:3d:24:c9:2d:5f:44:b6:
66:71:0d:c7:8b:d5:a7:82:d2:01:4c:91:d9:92:f6:
7f:a8:19:05:a2:26:45:68:67:5b:df:5c:3d:c6:35:
22:06:9a:a9:17:f4:03:ba:88:e9:8d:f4:a3:c7:05:
17:e9:2f:d7:ef:f8:ce:ef:ee:97:50:68:2e:a9:23:
58:d0:01:12:d6:66:ea:d5:60:2e:a4:60:99:d3:d4:
31:4f:e0:2f:6b:2b:70:0e:37:08:dc:d1:d1:95:0a:
6a:05:78:69:87:6a:10:51:4b:ff:7d:81:51:3b:59:
14:62:1e:62:62:a7:cc:72:dc:7b:a1:65:f3:25:8c:
53:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:02:F6:60:F0:BA:20:DA:8F:98:1D:33:A1:84:80:91:90:1A:14:47
X509v3 Authority Key Identifier:
keyid:52:BC:7B:8C:C8:D3:91:E2:24:05:1C:BB:CB:C4:E1:7A:60:86:38:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f636851443b2f7396ed85156f5c70cbcfa4debd5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/0ef374270d7065a136065e83c00f72b9ceaec8dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/f636851443b2f7396ed85156f5c70cbcfa4debd5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.233.100.0-45.233.102.255
Signature Algorithm: sha256WithRSAEncryption
93:e5:e6:a1:3f:93:72:c4:4e:84:a5:ff:a8:db:32:b2:8a:a7:
b6:69:c0:c2:4b:50:a7:50:79:6f:7d:02:8c:11:e9:77:67:69:
4a:eb:5b:65:bb:b7:97:f0:21:ca:b4:21:9a:26:1c:3e:e5:8c:
2d:29:67:ce:f6:cb:36:7c:3f:ba:60:99:1c:57:c0:88:14:54:
22:9a:e6:47:08:50:ef:e6:15:02:ea:6a:7a:9e:6c:68:0f:74:
33:50:62:b9:56:e9:50:4f:cf:d8:eb:7f:c3:73:01:e0:a2:07:
93:44:af:24:88:b6:d7:fc:ec:b0:4d:13:b0:26:ff:e5:91:5f:
e2:b4:61:4e:23:8c:40:f1:9b:c3:15:c3:4b:2c:28:f5:ee:72:
c4:0c:6b:d1:eb:a9:10:b7:78:fe:ed:ef:4a:1e:c1:5c:29:47:
6c:63:a0:87:b7:44:f9:92:cf:a9:f6:d6:fc:07:96:ce:ac:20:
cd:ff:53:64:c4:a2:0d:a0:83:e9:42:da:e2:25:9e:7d:41:17:
93:29:32:fe:52:bd:47:fd:62:ac:64:9b:63:12:bf:30:98:e5:
e8:47:8b:6c:92:c6:29:d5:15:ad:e9:8a:fa:80:fd:f6:fd:eb:
48:ac:a9:36:68:e2:da:aa:2d:95:bb:7b:8c:4d:a1:66:e3:41:
09:87:61:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:40 2023 by rpki-client on console-fra.rpki-client.org