Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/de4e5620-d900-4606-8016-f3fea25ed051/47956bafdf586a970ca95c13591b148ce75fb952.roa
File: 47956bafdf586a970ca95c13591b148ce75fb952.roa (raw, json)
Hash identifier: x5rjBQWt/kVIAfhbDy61PGNp+MlFTf5hwxlteEImtrY=
Subject key identifier: 61:7C:0A:4E:BE:93:33:BA:7A:53:2D:32:25:7E:84:F9:BB:B9:82:AE
Certificate issuer: /CN=2a96158adc7e9d3c9c541c010ab3e9435225e88f
Certificate serial: 0173F1
Authority key identifier: C1:8C:F1:B8:10:78:69:1C:C2:02:8C:1F:4A:A4:74:E8:BD:BC:0E:78
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a96158adc7e9d3c9c541c010ab3e9435225e88f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/de4e5620-d900-4606-8016-f3fea25ed051/47956bafdf586a970ca95c13591b148ce75fb952.roa
Signing time: Sun 28 Nov 2021 15:05:21 +0000
ROA not before: Sun 28 Nov 2021 03:00:00 +0000
ROA not after: Tue 28 Nov 2023 03:00:00 +0000
asID: 3257
IP address blocks: 45.238.157.0/24 maxlen: 24
45.238.159.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95217 (0x173f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a96158adc7e9d3c9c541c010ab3e9435225e88f
Validity
Not Before: Nov 28 03:00:00 2021 GMT
Not After : Nov 28 03:00:00 2023 GMT
Subject: CN=47956bafdf586a970ca95c13591b148ce75fb952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e8:c7:07:aa:e4:14:8b:05:45:2e:66:fd:4d:
f8:e0:84:cf:03:88:0a:a5:a1:cc:ce:b4:cc:5b:1a:
69:4b:88:46:58:40:32:37:9f:de:70:67:c9:d6:9e:
e3:75:ac:a7:2d:66:50:0a:a8:cb:dc:6c:c9:30:b2:
c4:14:2c:1a:2c:ae:cd:32:ac:6d:7b:4f:8b:e1:5b:
6f:8b:02:ac:87:2e:15:fc:00:cf:f9:56:de:d1:1b:
29:06:45:81:fe:8a:2f:97:39:3c:f5:38:d0:f9:11:
fd:57:e9:7c:a7:6f:ec:0c:8e:74:fa:3c:64:8a:df:
77:6d:a9:12:4d:f7:4a:0d:e2:c6:0a:05:49:6f:b7:
16:60:19:cb:4d:4c:46:99:f2:a4:8a:c6:cd:a2:da:
66:69:c3:ca:78:f1:4c:14:5c:eb:15:fb:21:98:96:
4d:1e:b2:0c:fe:5f:c3:21:40:91:1f:8c:f2:05:fa:
ba:26:1c:79:88:03:c7:ec:fe:e4:32:69:23:51:15:
70:df:11:d5:48:fa:bd:ff:b9:4e:bf:b1:96:4d:aa:
04:52:15:1d:8a:b0:a6:04:db:d2:d5:aa:85:be:72:
92:8e:0e:0f:ae:b4:9e:a3:1a:ac:a1:d6:f3:a3:55:
dd:95:1d:8c:bd:2e:e2:1e:98:74:26:da:83:25:88:
49:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7C:0A:4E:BE:93:33:BA:7A:53:2D:32:25:7E:84:F9:BB:B9:82:AE
X509v3 Authority Key Identifier:
keyid:C1:8C:F1:B8:10:78:69:1C:C2:02:8C:1F:4A:A4:74:E8:BD:BC:0E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a96158adc7e9d3c9c541c010ab3e9435225e88f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/de4e5620-d900-4606-8016-f3fea25ed051/47956bafdf586a970ca95c13591b148ce75fb952.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/de4e5620-d900-4606-8016-f3fea25ed051/2a96158adc7e9d3c9c541c010ab3e9435225e88f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.157.0/24
45.238.159.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:81:82:48:8d:94:b2:9b:fb:11:bf:56:40:df:ad:51:bd:92:
5a:6a:7d:df:1f:0e:3e:d6:63:2d:df:3b:50:27:66:9c:35:37:
a4:89:ca:4e:31:8c:51:e1:e7:99:1c:ab:31:af:bb:c9:e2:85:
98:42:92:85:ef:bb:cf:fe:2c:47:df:1f:c3:c7:93:46:85:df:
51:f3:28:19:0b:f1:ab:9d:bc:65:14:4a:36:26:c7:40:db:e0:
97:66:5a:6b:0a:dd:ad:16:cd:c2:7e:0e:ed:84:1a:e3:80:85:
33:c0:97:54:d3:34:fb:c2:4d:cf:43:60:e1:69:99:1d:d4:52:
51:62:4f:c7:2c:90:e6:1a:44:ec:c2:81:b5:01:8d:b3:9e:4c:
0f:a8:68:62:b8:2d:db:80:95:48:2e:d0:0c:37:d2:9c:62:dc:
cc:b3:03:47:e3:71:d9:40:59:2d:d8:fa:5c:4c:7d:91:18:d1:
98:45:46:dc:0e:69:7f:e4:3e:1e:37:ca:28:97:29:51:b3:ab:
13:93:44:d8:c6:f5:61:74:44:03:53:ed:cc:8d:07:a3:23:9a:
24:89:20:87:50:3c:4f:c7:fb:87:e9:26:c6:12:80:e6:a4:6f:
62:7d:97:33:26:8f:6c:6f:21:6c:42:41:55:3d:f2:dd:25:59:
56:e5:cb:c8
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDAXPxMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJh
OTYxNThhZGM3ZTlkM2M5YzU0MWMwMTBhYjNlOTQzNTIyNWU4OGYwHhcNMjExMTI4
MDMwMDAwWhcNMjMxMTI4MDMwMDAwWjAzMTEwLwYDVQQDEyg0Nzk1NmJhZmRmNTg2
YTk3MGNhOTVjMTM1OTFiMTQ4Y2U3NWZiOTUyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtujHB6rkFIsFRS5m/U344ITPA4gKpaHMzrTMWxppS4hGWEAy
N5/ecGfJ1p7jdaynLWZQCqjL3GzJMLLEFCwaLK7NMqxte0+L4VtviwKshy4V/ADP
+Vbe0RspBkWB/oovlzk89TjQ+RH9V+l8p2/sDI50+jxkit93bakSTfdKDeLGCgVJ
b7cWYBnLTUxGmfKkisbNotpmacPKePFMFFzrFfshmJZNHrIM/l/DIUCRH4zyBfq6
Jhx5iAPH7P7kMmkjURVw3xHVSPq9/7lOv7GWTaoEUhUdirCmBNvS1aqFvnKSjg4P
rrSeoxqsodbzo1XdlR2MvS7iHph0JtqDJYhJjQIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFGF8Ck6+kzO6elMtMiV+hPm7uYKuMB8GA1UdIwQYMBaAFMGM8bgQeGkcwgKM
H0qkdOi9vA54MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmE5NjE1
OGFkYzdlOWQzYzljNTQxYzAxMGFiM2U5NDM1MjI1ZTg4Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZGU0ZTU2MjAtZDkwMC00NjA2LTgwMTYtZjNmZWEy
NWVkMDUxLzQ3OTU2YmFmZGY1ODZhOTcwY2E5NWMxMzU5MWIxNDhjZTc1ZmI5NTIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kZTRlNTYyMC1kOTAwLTQ2MDYtODAxNi1mM2Zl
YTI1ZWQwNTEvMmE5NjE1OGFkYzdlOWQzYzljNTQxYzAxMGFiM2U5NDM1MjI1ZTg4
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAC3unQMEAC3unzANBgkqhkiG9w0BAQsFAAOCAQEAS4GCSI2U
spv7Eb9WQN+tUb2SWmp93x8OPtZjLd87UCdmnDU3pInKTjGMUeHnmRyrMa+7yeKF
mEKShe+7z/4sR98fw8eTRoXfUfMoGQvxq528ZRRKNibHQNvgl2ZaawrdrRbNwn4O
7YQa44CFM8CXVNM0+8JNz0Ng4WmZHdRSUWJPxyyQ5hpE7MKBtQGNs55MD6hoYrgt
24CVSC7QDDfSnGLczLMDR+Nx2UBZLdj6XEx9kRjRmEVG3A5pf+Q+HjfKKJcpUbOr
E5NE2Mb1YXREA1PtzI0HoyOaJIkgh1A8T8f7h+kmxhKA5qRvYn2XMyaPbG8hbEJB
VT3y3SVZVuXLyA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:41 2023 by rpki-client on console-fra.rpki-client.org