Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d80d847a-9743-4310-92de-896eec4ed18b/5aadbb40cb879e304ee85c7803aeeaf596199704.roa
File: 5aadbb40cb879e304ee85c7803aeeaf596199704.roa (raw, json)
Hash identifier: CtlDYX3C1EPk2x+v3ikDtyZElKhfbSLClFrlM9nsGLY=
Subject key identifier: E8:B5:2A:84:4D:12:11:0A:AE:9B:B8:EE:E7:05:3D:98:4A:B0:21:A4
Certificate issuer: /CN=a2f5abf58c957a2bfcf51b30227c2c814dce93e0
Certificate serial: 23CD0F
Authority key identifier: B5:30:E3:C7:88:9B:B3:9E:2E:C3:55:6C:A0:36:10:01:7A:E3:A5:56
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a2f5abf58c957a2bfcf51b30227c2c814dce93e0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d80d847a-9743-4310-92de-896eec4ed18b/5aadbb40cb879e304ee85c7803aeeaf596199704.roa
Signing time: Fri 06 Oct 2023 06:11:18 +0000
ROA not before: Thu 05 Oct 2023 06:11:18 +0000
ROA not after: Mon 06 Oct 2025 06:11:18 +0000
asID: 262262
IP address blocks: 45.166.94.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2346255 (0x23cd0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f5abf58c957a2bfcf51b30227c2c814dce93e0
Validity
Not Before: Oct 5 06:11:18 2023 GMT
Not After : Oct 6 06:11:18 2025 GMT
Subject: CN=5aadbb40cb879e304ee85c7803aeeaf596199704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:31:68:37:e0:64:1a:00:9b:54:2c:38:9e:e5:
f5:80:09:16:a1:f2:b5:87:1a:0d:08:9b:7a:82:f7:
0a:7c:b3:b6:5a:04:e4:74:64:0f:4d:8e:cf:e3:0d:
8a:7b:6e:5b:b4:b8:af:55:1a:dd:0c:9b:01:7d:2c:
70:7f:80:6c:f3:16:c5:eb:9f:76:9e:e5:a2:aa:e9:
b2:cb:0d:92:00:34:74:91:c8:83:90:66:8d:4a:55:
8e:4b:0d:f8:16:8e:38:17:b1:c4:5b:dd:5d:84:56:
72:ae:14:3d:05:87:27:57:b4:e7:0a:f5:fd:93:96:
3f:21:f8:63:f2:88:78:aa:51:3c:7f:38:3b:95:17:
c5:6f:a4:17:8e:aa:8a:bc:19:54:13:8b:73:b9:bf:
52:21:ec:3f:92:59:1f:04:6e:5a:58:f4:94:71:19:
ec:51:fa:c2:f5:f7:31:0e:a5:b5:a2:e7:47:94:57:
cc:43:a0:9f:06:30:ed:45:be:96:19:c2:3f:06:7e:
17:03:93:80:bb:dc:03:ca:80:ab:ce:df:77:6a:0e:
b6:8e:87:77:32:19:79:69:93:ad:f4:b0:48:25:36:
b8:25:4a:2f:dc:a4:54:86:ca:50:79:e3:4f:12:ac:
bb:52:5b:1b:5d:63:df:76:e0:18:ae:bd:51:b8:6a:
af:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B5:2A:84:4D:12:11:0A:AE:9B:B8:EE:E7:05:3D:98:4A:B0:21:A4
X509v3 Authority Key Identifier:
keyid:B5:30:E3:C7:88:9B:B3:9E:2E:C3:55:6C:A0:36:10:01:7A:E3:A5:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a2f5abf58c957a2bfcf51b30227c2c814dce93e0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d80d847a-9743-4310-92de-896eec4ed18b/5aadbb40cb879e304ee85c7803aeeaf596199704.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d80d847a-9743-4310-92de-896eec4ed18b/a2f5abf58c957a2bfcf51b30227c2c814dce93e0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.166.94.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:f9:37:19:3b:c0:54:ec:31:8d:dc:54:e1:17:05:5c:f0:5d:
9c:6b:a8:73:ff:74:47:fa:ec:43:ac:ba:5d:dd:6f:0c:5d:9d:
99:15:3b:01:f0:49:e5:ca:27:f8:de:18:c4:ee:5a:2d:bb:9d:
7c:d9:e1:57:28:96:17:23:23:13:b7:16:98:f7:ef:54:ee:46:
62:d8:61:e4:53:5f:58:a9:c0:4d:98:f9:21:02:57:15:7a:9d:
37:ee:2b:cb:cb:40:26:6e:ea:a0:ab:af:71:44:7e:79:98:24:
a8:e0:e1:34:7e:96:ef:de:87:78:84:3c:18:1d:ad:89:b8:27:
bc:8c:9d:0d:0d:a5:d0:ab:4f:ee:ff:a1:6f:0b:fe:ff:32:5a:
02:33:f5:5d:f7:09:86:a3:85:66:34:c6:7d:d9:9f:64:95:91:
7f:4e:9c:ce:a1:4a:ac:5b:60:bb:02:89:bc:ba:bf:6e:40:20:
3d:32:bb:e5:cd:4a:bd:d2:5b:b3:f6:62:89:20:bb:bf:5b:1b:
09:5c:bb:6d:68:48:fc:2e:91:f0:5e:0f:95:97:82:85:6e:db:
b2:c9:39:4b:d9:97:11:a4:ce:e5:f5:40:aa:0f:03:46:e4:6e:
7f:40:79:c1:0b:e7:5e:15:fd:a6:49:4e:46:10:ec:a7:69:8b:
03:a9:d4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 6 07:18:05 2023 by rpki-client on console-ams.rpki-client.org