Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d8b272fc-2d26-4067-9285-780d3fbccab4/ae32056b44ebbbce56596657a7fad90db71af285.roa
File: ae32056b44ebbbce56596657a7fad90db71af285.roa (raw, json)
Hash identifier: FfL8GHw7DMrPxEaPqxxTMP8qB1YqInEbCw/x/OOIm9c=
Subject key identifier: 63:67:A1:E5:E2:41:EE:9B:6A:57:3E:4A:3F:C4:7C:E2:6D:9A:47:F2
Certificate issuer: /CN=b67a5716e00aeccf404a86a23559e2b4aa264abf
Certificate serial: 036549
Authority key identifier: AE:5F:5C:AE:1F:09:02:69:FD:99:6B:E7:B3:0D:E2:36:D4:04:CE:D9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b67a5716e00aeccf404a86a23559e2b4aa264abf.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d8b272fc-2d26-4067-9285-780d3fbccab4/ae32056b44ebbbce56596657a7fad90db71af285.roa
Signing time: Wed 24 Mar 2021 14:42:06 +0000
ROA not before: Wed 24 Mar 2021 14:42:06 +0000
ROA not after: Tue 24 Mar 2026 14:42:06 +0000
asID: 269745
IP address blocks: 45.226.176.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 09 Jan 2024 14:04:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222537 (0x36549)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b67a5716e00aeccf404a86a23559e2b4aa264abf
Validity
Not Before: Mar 24 14:42:06 2021 GMT
Not After : Mar 24 14:42:06 2026 GMT
Subject: CN=ae32056b44ebbbce56596657a7fad90db71af285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9b:0a:26:06:84:2e:6a:4c:ca:dd:32:e6:40:
8c:7a:c7:df:27:b3:85:59:b0:da:a6:a7:dd:3b:df:
95:17:61:22:dc:97:27:72:ae:ec:d1:bc:20:a8:e9:
41:cd:12:f5:2c:74:87:12:f8:fc:d1:db:9c:f9:cb:
48:63:db:f8:26:df:bf:bb:c0:da:00:32:65:ae:28:
65:f0:d8:72:d1:9e:1b:c5:b7:42:55:63:bc:aa:79:
5b:6a:27:2f:95:2e:b2:a9:ac:df:53:c6:21:53:d1:
83:8b:4a:b7:a0:cb:62:91:00:3b:d8:9b:ff:6b:f2:
47:51:54:2b:b8:23:37:43:90:3e:7a:5f:7a:24:a2:
48:63:ac:50:78:f1:6b:ca:d1:ac:a0:ef:1d:71:a1:
69:e7:3e:ae:c8:89:81:1c:96:51:98:5d:79:8a:c2:
c7:00:e8:f4:0f:f5:ae:24:7c:13:51:e4:6a:1f:63:
99:81:d0:f3:02:a3:ec:f9:60:c1:62:56:33:19:d1:
7a:a0:11:ad:7a:b0:6a:c3:13:6f:b8:53:44:f8:b0:
dd:fa:74:65:e9:fc:58:48:b4:58:73:cb:4d:59:26:
1c:f3:95:90:23:45:5a:98:fe:62:fc:c5:ed:a4:04:
19:f1:c2:6b:fd:26:8e:25:ff:b5:c3:01:ff:ec:bc:
03:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:67:A1:E5:E2:41:EE:9B:6A:57:3E:4A:3F:C4:7C:E2:6D:9A:47:F2
X509v3 Authority Key Identifier:
keyid:AE:5F:5C:AE:1F:09:02:69:FD:99:6B:E7:B3:0D:E2:36:D4:04:CE:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b67a5716e00aeccf404a86a23559e2b4aa264abf.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d8b272fc-2d26-4067-9285-780d3fbccab4/ae32056b44ebbbce56596657a7fad90db71af285.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d8b272fc-2d26-4067-9285-780d3fbccab4/b67a5716e00aeccf404a86a23559e2b4aa264abf.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.226.176.0/22
Signature Algorithm: sha256WithRSAEncryption
52:81:0a:fa:d4:40:e5:f6:db:71:29:af:f7:11:73:30:50:73:
56:3f:30:29:88:c7:40:2d:1d:65:d6:28:3a:0c:07:8b:66:dd:
dd:c3:ab:21:4a:af:a3:d8:64:d1:bc:67:1a:57:4d:81:44:c7:
36:8a:56:b0:9e:89:00:fc:78:6e:2b:b4:57:cc:9a:95:32:0c:
99:dd:2e:61:ff:8a:d8:5f:4b:ee:20:1f:e6:4c:91:c1:67:7a:
64:41:0b:20:b5:0d:a6:cb:df:28:92:f3:d6:d1:fe:9f:74:20:
57:03:15:5c:06:9a:64:a3:7c:3f:29:f1:0e:8d:15:83:65:94:
19:a1:f3:5d:5e:94:32:f6:8d:2b:f3:d0:77:51:66:f4:75:31:
e1:ef:ad:24:16:78:e1:f8:38:45:26:38:23:5b:bd:91:61:dd:
ec:38:08:e1:2f:43:ab:45:b2:ed:41:60:8b:f4:32:27:7c:57:
f5:8a:b5:ad:6e:da:f5:d8:dd:5c:5f:22:75:48:c1:93:97:1b:
c9:f4:87:6c:a6:01:14:2e:fb:4c:a6:c3:e0:66:56:6e:fb:e9:
ca:99:6b:a6:f3:e0:74:d1:ee:6c:64:d1:8e:12:04:5d:a3:fe:
53:ab:86:9a:28:97:46:59:4a:3f:8d:3b:fe:0e:a4:9b:74:18:
de:51:fb:f2
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDA2VJMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGI2
N2E1NzE2ZTAwYWVjY2Y0MDRhODZhMjM1NTllMmI0YWEyNjRhYmYwHhcNMjEwMzI0
MTQ0MjA2WhcNMjYwMzI0MTQ0MjA2WjAzMTEwLwYDVQQDEyhhZTMyMDU2YjQ0ZWJi
YmNlNTY1OTY2NTdhN2ZhZDkwZGI3MWFmMjg1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlZsKJgaELmpMyt0y5kCMesffJ7OFWbDapqfdO9+VF2Ei3Jcn
cq7s0bwgqOlBzRL1LHSHEvj80duc+ctIY9v4Jt+/u8DaADJlrihl8Nhy0Z4bxbdC
VWO8qnlbaicvlS6yqazfU8YhU9GDi0q3oMtikQA72Jv/a/JHUVQruCM3Q5A+el96
JKJIY6xQePFrytGsoO8dcaFp5z6uyImBHJZRmF15isLHAOj0D/WuJHwTUeRqH2OZ
gdDzAqPs+WDBYlYzGdF6oBGterBqwxNvuFNE+LDd+nRl6fxYSLRYc8tNWSYc85WQ
I0VamP5i/MXtpAQZ8cJr/SaOJf+1wwH/7LwD1QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGNnoeXiQe6balc+Sj/EfOJtmkfyMB8GA1UdIwQYMBaAFK5fXK4fCQJp/Zlr
57MN4jbUBM7ZMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjY3YTU3
MTZlMDBhZWNjZjQwNGE4NmEyMzU1OWUyYjRhYTI2NGFiZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDhiMjcyZmMtMmQyNi00MDY3LTkyODUtNzgwZDNm
YmNjYWI0L2FlMzIwNTZiNDRlYmJiY2U1NjU5NjY1N2E3ZmFkOTBkYjcxYWYyODUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kOGIyNzJmYy0yZDI2LTQwNjctOTI4NS03ODBk
M2ZiY2NhYjQvYjY3YTU3MTZlMDBhZWNjZjQwNGE4NmEyMzU1OWUyYjRhYTI2NGFi
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi3isDANBgkqhkiG9w0BAQsFAAOCAQEAUoEK+tRA5fbbcSmv
9xFzMFBzVj8wKYjHQC0dZdYoOgwHi2bd3cOrIUqvo9hk0bxnGldNgUTHNopWsJ6J
APx4biu0V8yalTIMmd0uYf+K2F9L7iAf5kyRwWd6ZEELILUNpsvfKJLz1tH+n3Qg
VwMVXAaaZKN8PynxDo0Vg2WUGaHzXV6UMvaNK/PQd1Fm9HUx4e+tJBZ44fg4RSY4
I1u9kWHd7DgI4S9Dq0Wy7UFgi/QyJ3xX9Yq1rW7a9djdXF8idUjBk5cbyfSHbKYB
FC77TKbD4GZWbvvpyplrpvPgdNHubGTRjhIEXaP+U6uGmiiXRllKP407/g6km3QY
3lH78g==
-----END CERTIFICATE-----
Generated at Tue Jan 9 16:49:30 2024 by rpki-client on console-ams.rpki-client.org