Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d77926a1-bd5d-4e29-8017-c73662fd8020/f3c112cffd7e81c68c96631eeb32790b50217a76.roa
File: f3c112cffd7e81c68c96631eeb32790b50217a76.roa (raw, json)
Hash identifier: t6f4OmmEtll149gBPfkDxluWaToz/9JCcAgHX0MmQS0=
Subject key identifier: AC:56:3A:45:94:3E:4A:50:D4:33:BD:6A:A6:CC:5D:A3:CD:BB:B8:A6
Certificate issuer: /CN=1c726411b8b37f2fddf7b63e09523909f26f96b7
Certificate serial: 0D9011
Authority key identifier: 4E:75:D0:94:23:D9:BE:6A:E9:E1:6A:30:C5:39:D8:B0:06:10:AC:BC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c726411b8b37f2fddf7b63e09523909f26f96b7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d77926a1-bd5d-4e29-8017-c73662fd8020/f3c112cffd7e81c68c96631eeb32790b50217a76.roa
Signing time: Wed 24 Mar 2021 14:31:08 +0000
ROA not before: Wed 24 Mar 2021 14:31:08 +0000
ROA not after: Tue 24 Mar 2026 14:31:08 +0000
asID: 266768
IP address blocks: 45.231.214.0/23 maxlen: 24
45.233.143.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 888849 (0xd9011)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c726411b8b37f2fddf7b63e09523909f26f96b7
Validity
Not Before: Mar 24 14:31:08 2021 GMT
Not After : Mar 24 14:31:08 2026 GMT
Subject: CN=f3c112cffd7e81c68c96631eeb32790b50217a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:88:ee:0f:66:66:58:d0:cf:2e:2a:1b:08:44:
73:03:c3:32:1d:8b:f8:98:7e:4d:30:7f:80:38:a3:
e0:94:5b:14:c1:4f:5a:a0:d6:aa:9e:6f:9a:01:83:
aa:c5:22:9c:b2:8b:37:e0:1c:89:35:87:e6:2e:b4:
3a:ea:15:02:3e:4b:fd:0f:8e:fd:78:77:18:15:9d:
49:5e:d2:d1:77:03:b6:67:95:23:74:21:6c:db:47:
e4:bb:0c:5b:be:7f:d3:4e:6c:a5:13:77:f4:79:14:
e0:b0:51:6b:2e:8b:0a:77:a0:d2:2a:7d:6f:9d:bb:
42:75:45:ff:85:05:5b:3f:d1:f0:dc:0d:40:e6:be:
d3:ac:7a:65:f9:5a:74:3d:03:ab:ec:02:8c:5e:81:
ce:98:c4:c8:de:0c:76:68:ef:78:02:3e:6e:06:a6:
4e:3a:18:85:ff:1e:84:e0:27:64:6c:c5:9e:ba:ea:
cf:e4:48:28:09:ec:03:ff:f2:a7:85:a4:ba:be:f4:
b1:03:be:14:79:e1:d2:ad:3c:26:5e:70:5d:74:0b:
b1:b7:78:a5:2e:ee:c0:d4:94:21:87:c9:e1:b4:a0:
66:b5:94:c1:78:b1:a7:6a:b0:f2:8e:4b:66:1e:cb:
f8:32:31:3f:3f:a2:dc:47:ca:3e:92:ea:38:34:7d:
6a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:56:3A:45:94:3E:4A:50:D4:33:BD:6A:A6:CC:5D:A3:CD:BB:B8:A6
X509v3 Authority Key Identifier:
keyid:4E:75:D0:94:23:D9:BE:6A:E9:E1:6A:30:C5:39:D8:B0:06:10:AC:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c726411b8b37f2fddf7b63e09523909f26f96b7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d77926a1-bd5d-4e29-8017-c73662fd8020/f3c112cffd7e81c68c96631eeb32790b50217a76.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d77926a1-bd5d-4e29-8017-c73662fd8020/1c726411b8b37f2fddf7b63e09523909f26f96b7.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.231.214.0/23
45.233.143.0/24
Signature Algorithm: sha256WithRSAEncryption
06:7d:aa:8f:e6:c5:65:e9:1b:f8:c0:86:7d:2f:04:05:e5:98:
ec:09:eb:be:61:97:c7:4c:7d:11:2f:5e:66:b0:0a:d3:e1:f1:
7f:d1:1e:4c:02:74:67:04:b3:97:e6:6c:b2:08:7a:20:ba:bb:
18:8b:f6:15:87:11:d0:b9:fb:9e:5a:80:84:8f:ab:1f:50:75:
dd:bf:de:4c:c5:01:32:5c:6a:76:95:ae:6a:62:17:82:75:09:
b2:06:62:08:ad:31:34:26:a4:47:46:67:0b:3b:29:3a:db:ba:
6e:c2:49:25:51:4b:cf:6d:1f:26:02:d4:ac:3d:57:35:f7:63:
7a:45:e0:d1:c8:83:0a:05:56:3d:94:92:ec:6c:0a:20:cd:a8:
42:0b:03:9f:84:cf:6c:32:5f:ff:b3:f7:44:c2:9a:9d:bd:ca:
5d:14:e5:61:c4:ed:12:b3:7c:9f:cb:4e:b4:34:8f:da:39:5e:
ac:64:f2:d6:e2:41:6f:11:83:44:2d:3b:37:7d:50:4e:2e:73:
62:a1:08:bc:13:aa:60:f1:95:de:64:01:4e:fd:9a:18:78:70:
bb:96:0b:a2:52:ec:ee:9f:57:12:65:26:41:59:99:f1:b7:d5:
bd:09:fc:91:bd:0b:89:97:60:a8:be:71:30:b1:e5:4a:bc:4b:
a4:51:cb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:40 2023 by rpki-client on console-fra.rpki-client.org