Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/f37415b3f33cc9546e21c3db214329f3649fc522.roa
File: f37415b3f33cc9546e21c3db214329f3649fc522.roa (raw, json)
Hash identifier: mfQhX/IZmMzP+P4RSdaIe9LrQOVZivNhbr6kH1VyWkY=
Subject key identifier: C3:EA:4A:A7:01:80:16:16:DC:7A:70:5A:CE:B7:2B:80:CA:2E:80:12
Certificate issuer: /CN=f636851443b2f7396ed85156f5c70cbcfa4debd5
Certificate serial: 1E3C17
Authority key identifier: 52:BC:7B:8C:C8:D3:91:E2:24:05:1C:BB:CB:C4:E1:7A:60:86:38:E4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f636851443b2f7396ed85156f5c70cbcfa4debd5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/f37415b3f33cc9546e21c3db214329f3649fc522.roa
Signing time: Mon 23 Jan 2023 15:20:34 +0000
ROA not before: Tue 23 Mar 2021 14:40:18 +0000
ROA not after: Tue 24 Mar 2026 14:40:18 +0000
asID: 266790
IP address blocks: 45.233.100.0/23 maxlen: 27
45.233.102.0/24 maxlen: 27
Validation: Failed, certificate revoked on Tue 19 Mar 2024 17:57:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1981463 (0x1e3c17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f636851443b2f7396ed85156f5c70cbcfa4debd5
Validity
Not Before: Mar 23 14:40:18 2021 GMT
Not After : Mar 24 14:40:18 2026 GMT
Subject: CN=f37415b3f33cc9546e21c3db214329f3649fc522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f9:a5:3f:0f:83:5b:9d:4e:17:7a:77:9e:44:
1d:64:a0:de:09:6f:3e:d2:b7:11:54:46:de:61:2a:
79:43:76:62:91:ca:bd:05:28:04:a9:45:21:ed:de:
11:66:c9:4c:34:64:26:cf:9b:6e:40:27:42:31:60:
7a:b2:94:b4:de:21:de:4a:ec:2e:a9:a4:f8:5e:94:
c6:b7:71:35:fa:cf:9d:66:af:d1:be:27:85:43:cf:
89:c9:e4:ea:2e:7a:b5:12:11:14:44:b3:70:b7:08:
28:9f:a9:1b:83:44:c0:5d:63:3f:b8:2a:51:9e:3d:
6e:28:b3:63:0f:c5:21:02:55:64:44:99:16:ae:ae:
fb:10:20:81:4e:72:59:ce:68:ae:f0:f0:e1:26:61:
35:5d:79:40:45:f1:d2:52:93:8a:56:9f:c6:91:48:
5a:bd:68:4f:76:a5:14:f8:32:93:18:a1:8a:89:c9:
ab:bd:12:ee:91:09:f7:e3:94:81:1c:f5:c8:8e:42:
7d:34:80:67:39:cc:21:ad:89:c9:f4:c5:52:a5:06:
07:28:ab:06:56:22:f8:1c:30:c1:64:02:a1:c2:36:
9a:79:2f:68:ae:f4:f1:e1:24:51:05:4b:73:8a:a1:
dd:e2:4f:74:35:72:69:0e:18:03:04:f7:14:eb:5b:
c9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:EA:4A:A7:01:80:16:16:DC:7A:70:5A:CE:B7:2B:80:CA:2E:80:12
X509v3 Authority Key Identifier:
keyid:52:BC:7B:8C:C8:D3:91:E2:24:05:1C:BB:CB:C4:E1:7A:60:86:38:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f636851443b2f7396ed85156f5c70cbcfa4debd5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/f37415b3f33cc9546e21c3db214329f3649fc522.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/f636851443b2f7396ed85156f5c70cbcfa4debd5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.233.100.0-45.233.102.255
Signature Algorithm: sha256WithRSAEncryption
1f:8b:d1:72:5a:2b:97:e8:b5:13:6f:23:36:46:ef:eb:a4:bb:
d2:69:eb:44:9a:b4:7f:27:fe:d2:05:65:81:69:af:7b:21:74:
b1:92:5f:af:dc:06:24:94:13:f2:90:96:59:24:6c:80:e8:80:
a7:61:b5:a1:eb:1a:b3:e0:b3:ea:fd:a7:43:56:0f:35:e0:d3:
a8:18:23:c4:7b:4d:aa:ab:70:10:7e:f9:0b:f5:32:7a:65:79:
f2:51:8a:fd:a8:79:4f:12:f5:70:0c:1b:c1:21:f6:cb:25:fc:
3b:5b:70:9f:1a:cd:e1:7f:5f:dd:30:18:ce:0e:fd:59:90:4c:
a0:dd:18:8f:8b:1a:35:9a:5a:ed:52:43:f1:7d:49:43:71:b6:
b2:db:d6:d4:bc:7b:e4:2d:37:cf:d4:89:51:36:77:fe:4e:71:
34:04:a7:fe:55:36:b9:26:12:a4:c4:f3:70:03:44:d0:65:c9:
c6:7c:a9:6b:aa:67:a0:3c:24:6e:42:30:b7:94:1f:b0:60:43:
a5:11:96:4b:3a:2b:66:a9:a5:4b:d7:f3:e2:62:96:97:02:d3:
3b:71:f6:2e:58:96:93:d5:c6:1e:be:d8:25:78:d2:b8:0f:30:
2d:2e:24:94:ad:3c:01:64:03:f0:fd:fe:b5:06:37:b3:9c:fc:
ac:7c:55:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 19 20:27:37 2024 by rpki-client on console-ams.rpki-client.org