Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ea6e314a-8fa4-4590-a400-dcc703b53507/3f25e47c54533214872fa7fbb01200b720a82c20.roa
File: 3f25e47c54533214872fa7fbb01200b720a82c20.roa (raw, json)
Hash identifier: 5wij2RG+arlvG1e06n1Sqbmi+QWUnJl9Eq9Bla4W4TM=
Subject key identifier: 79:D6:8F:FE:EB:80:FF:79:CE:54:C6:E2:72:F9:75:94:E6:86:CD:03
Certificate issuer: /CN=e418781321c8ac19027d1f6b8a8fa133313e5012
Certificate serial: 13DF90
Authority key identifier: DD:02:45:5B:BE:76:8D:76:5B:AB:CF:12:7D:C8:E6:B3:22:E5:E7:A7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e418781321c8ac19027d1f6b8a8fa133313e5012.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ea6e314a-8fa4-4590-a400-dcc703b53507/3f25e47c54533214872fa7fbb01200b720a82c20.roa
Signing time: Thu 10 Feb 2022 14:05:16 +0000
ROA not before: Thu 10 Feb 2022 03:00:00 +0000
ROA not after: Sat 10 Feb 2024 03:00:00 +0000
asID: 269747
IP address blocks: 45.182.124.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Feb 2024 07:32:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1302416 (0x13df90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e418781321c8ac19027d1f6b8a8fa133313e5012
Validity
Not Before: Feb 10 03:00:00 2022 GMT
Not After : Feb 10 03:00:00 2024 GMT
Subject: CN=3f25e47c54533214872fa7fbb01200b720a82c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:53:88:2b:d2:f7:29:0a:27:be:f7:63:96:33:
87:99:73:8b:62:e1:c1:82:0b:0c:db:1a:eb:61:bd:
6a:45:dc:8d:ef:cf:43:71:d3:42:56:19:2e:52:72:
2c:b3:83:cc:9e:38:07:70:8c:e0:d4:47:79:6f:29:
5f:fa:c8:b8:f7:ec:67:d9:88:db:68:c5:9f:1d:51:
5e:f9:01:65:0f:75:72:a9:88:5c:d9:8f:08:c5:47:
89:aa:a4:bc:ec:71:81:01:12:06:83:e4:f5:7c:e0:
e6:e7:3a:73:d4:ab:fc:e9:35:13:e5:f4:bc:6e:cf:
3c:70:e7:a2:4e:43:6f:35:d1:f6:5f:e2:be:3c:50:
4d:7b:e3:20:ce:93:c6:32:08:b2:98:50:9c:d2:b5:
e4:f2:64:b2:c0:07:47:42:99:09:27:b7:8f:cb:59:
a2:79:5b:bf:a1:e5:ba:95:dd:23:3f:64:7e:91:35:
89:ed:01:f3:ec:34:4a:f2:e5:77:32:86:ff:cf:e9:
2f:b2:37:0b:ac:bd:60:d7:c2:d7:51:ab:13:5f:37:
c7:2f:d9:83:09:7c:b4:5e:05:eb:75:46:b2:8a:50:
53:94:f6:47:78:f9:e3:52:6a:9d:45:37:28:7a:84:
df:98:2b:f2:41:15:53:13:cf:0c:e2:6c:34:93:f0:
40:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D6:8F:FE:EB:80:FF:79:CE:54:C6:E2:72:F9:75:94:E6:86:CD:03
X509v3 Authority Key Identifier:
keyid:DD:02:45:5B:BE:76:8D:76:5B:AB:CF:12:7D:C8:E6:B3:22:E5:E7:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e418781321c8ac19027d1f6b8a8fa133313e5012.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ea6e314a-8fa4-4590-a400-dcc703b53507/3f25e47c54533214872fa7fbb01200b720a82c20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ea6e314a-8fa4-4590-a400-dcc703b53507/e418781321c8ac19027d1f6b8a8fa133313e5012.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.182.124.0/22
Signature Algorithm: sha256WithRSAEncryption
88:05:c0:49:8b:ed:f7:f8:c3:09:81:79:bf:35:66:8e:eb:0f:
3e:37:50:d1:ba:57:50:9f:4d:1c:10:89:95:32:f3:b0:32:da:
3e:1a:af:82:73:de:4e:9b:54:b9:f1:b6:4b:07:09:f9:b6:ab:
01:2e:7e:14:34:dd:4c:ef:5e:2c:88:01:80:59:74:76:fa:05:
bb:28:37:7f:46:a7:c9:73:9b:0a:f0:a1:5d:71:71:ea:97:6d:
b2:04:79:fd:1a:ab:d0:9b:6f:85:53:95:13:2d:f6:b6:8f:19:
1c:44:37:f6:dd:56:a3:8c:dd:b2:d5:6b:52:91:5e:56:91:a6:
a1:c0:df:a4:a5:af:af:16:54:e5:a1:c3:34:8d:12:d0:ff:20:
9d:a0:8c:9b:5a:1e:3c:00:35:a4:39:3d:93:0f:9e:45:dc:b5:
f8:68:76:3c:12:ec:de:b1:a5:00:4f:b0:9b:b5:6c:76:3f:9f:
d6:f9:44:09:b2:63:99:d1:c5:26:e9:6f:62:2b:f0:2c:bb:03:
ae:a2:c6:d6:5c:76:cb:6e:01:55:95:0d:12:e7:f5:11:77:37:
ab:3b:5e:41:8e:d3:33:32:50:eb:d5:f7:4a:ad:f7:d5:e2:cd:
0e:d3:18:6b:e0:4b:e7:3c:77:35:a0:df:77:02:c9:f0:1f:e9:
4b:17:d3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 9 12:20:39 2024 by rpki-client on console-ams.rpki-client.org