Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e571b174-cc90-4dbc-8519-355b841d74db/15f42b7628965416dcb423a1d46f46afcc704dc7.roa
File: 15f42b7628965416dcb423a1d46f46afcc704dc7.roa (raw, json)
Hash identifier: qJvVuYhc2onGZCU9ZOpKyTJhBy0iFRl66PDZxcjMy3Y=
Subject key identifier: 2A:10:9F:5E:E9:6C:ED:19:26:E5:C3:24:08:B8:11:10:5B:AC:8B:2B
Certificate issuer: /CN=581e0c9d08ecb217623b5290ee851242221cdc85
Certificate serial: 2241D9
Authority key identifier: 80:04:EA:0A:FB:6A:C0:26:B6:FE:AC:80:48:FD:11:65:E8:63:F9:9A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/581e0c9d08ecb217623b5290ee851242221cdc85.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e571b174-cc90-4dbc-8519-355b841d74db/15f42b7628965416dcb423a1d46f46afcc704dc7.roa
Signing time: Wed 05 Jul 2023 13:37:30 +0000
ROA not before: Tue 04 Jul 2023 13:37:29 +0000
ROA not after: Sat 05 Jul 2025 13:37:29 +0000
asID: 52468
IP address blocks: 45.71.200.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2245081 (0x2241d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=581e0c9d08ecb217623b5290ee851242221cdc85
Validity
Not Before: Jul 4 13:37:29 2023 GMT
Not After : Jul 5 13:37:29 2025 GMT
Subject: CN=15f42b7628965416dcb423a1d46f46afcc704dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:78:3e:19:db:9e:c4:04:ce:4f:e8:4b:16:56:
c8:9e:67:8c:49:ce:c9:b8:a3:a7:05:d3:c8:a2:3d:
d7:54:bc:c3:89:2d:f9:8c:8e:d5:80:f7:8e:1c:50:
63:f6:46:15:41:90:4b:74:00:2e:12:22:0d:19:10:
92:2b:35:27:3d:c7:63:9e:b7:f7:e6:57:32:42:6c:
30:e3:88:d4:4e:d0:f5:16:11:f6:91:d0:86:1f:bb:
f5:32:9f:d6:52:5b:aa:e3:ae:d5:03:88:b2:a6:61:
c7:f0:55:26:1b:5a:8e:82:72:9f:6f:2c:81:40:a8:
a6:a3:a2:69:f5:b9:36:8c:07:03:64:5f:6e:88:ad:
ed:8e:a3:0b:76:8c:c7:40:30:38:61:07:91:a8:31:
fa:fe:87:28:4b:51:5d:c6:23:da:93:a2:88:4b:51:
f2:7c:d1:a6:23:74:6b:b9:f1:d8:65:87:9e:22:88:
1d:fc:da:bb:a8:80:3f:1e:ab:9e:36:b2:9c:5c:68:
c8:73:78:68:52:96:5c:9e:77:3c:98:36:db:f4:38:
a7:bc:c8:04:ac:df:8e:c1:8b:df:0b:17:65:c2:43:
21:b8:00:70:e9:d2:38:e4:15:f3:4d:67:07:e2:ca:
50:ea:f4:c7:20:1b:f9:c8:c7:2e:b2:78:91:64:10:
06:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:10:9F:5E:E9:6C:ED:19:26:E5:C3:24:08:B8:11:10:5B:AC:8B:2B
X509v3 Authority Key Identifier:
keyid:80:04:EA:0A:FB:6A:C0:26:B6:FE:AC:80:48:FD:11:65:E8:63:F9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/581e0c9d08ecb217623b5290ee851242221cdc85.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e571b174-cc90-4dbc-8519-355b841d74db/15f42b7628965416dcb423a1d46f46afcc704dc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e571b174-cc90-4dbc-8519-355b841d74db/581e0c9d08ecb217623b5290ee851242221cdc85.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.200.0/22
Signature Algorithm: sha256WithRSAEncryption
46:dd:b8:74:45:1f:c2:0d:85:82:4c:1b:f3:6c:a7:08:be:ce:
c7:58:57:11:a1:16:e5:5f:e6:2b:c1:85:40:42:48:c8:19:b8:
d1:b1:54:b2:f6:90:f0:88:d2:f2:1b:bf:ec:c0:1d:7f:f3:a9:
b1:0c:89:0b:93:70:f6:ba:bd:ba:ab:72:cf:13:46:db:60:d2:
0b:d7:d7:64:b1:f4:ea:b9:89:f4:84:95:53:a9:03:ee:3c:8b:
e4:30:1f:da:ba:2d:55:e2:47:8b:24:7c:e7:15:22:b2:2c:a9:
da:49:af:15:c5:96:fd:ad:9e:08:e9:b7:67:1f:d4:3b:1b:99:
cf:98:da:a3:49:d9:54:28:6c:42:8f:68:47:24:98:b8:24:cf:
9f:a7:6c:77:d1:47:14:40:47:3d:1e:1c:73:92:6e:49:90:fe:
31:92:e3:27:29:f2:93:fb:70:13:f4:07:ed:ae:8d:63:a9:29:
fd:20:3f:6a:e5:62:68:9e:4c:25:3e:8f:6d:66:d9:7a:bd:4b:
9e:e9:fc:51:53:2c:f0:49:94:4a:21:72:08:db:3b:88:08:b8:
78:d6:55:63:1e:fe:0c:a3:63:f8:17:49:30:52:c6:db:de:0e:
3b:7d:08:89:3b:32:f7:6a:7b:95:d0:27:6e:a7:09:9e:98:d8:
25:af:f4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 17 20:29:14 2023 by rpki-client on console-fra.rpki-client.org