Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ec0ceac2-05b6-4d03-8efa-bbd8d5910d8e/f0df1be8267eaef769514314105bebf48a726ade.roa
File: f0df1be8267eaef769514314105bebf48a726ade.roa (raw, json)
Hash identifier: 2qu7TAnIkq1aqspy/MvPKoB85uRBOpofaDqget12SPM=
Subject key identifier: C0:BF:3B:C3:9A:31:B8:14:2B:32:B8:76:C4:F1:BC:87:44:9B:D6:3C
Certificate issuer: /CN=9d25be9947afcb39fce110f05b5d8afd69a92382
Certificate serial: 22F6AD
Authority key identifier: A2:8C:63:A4:23:78:37:5E:F2:5F:67:8D:D4:3E:72:09:76:AA:1F:FA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d25be9947afcb39fce110f05b5d8afd69a92382.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ec0ceac2-05b6-4d03-8efa-bbd8d5910d8e/f0df1be8267eaef769514314105bebf48a726ade.roa
Signing time: Wed 16 Aug 2023 17:08:38 +0000
ROA not before: Tue 15 Aug 2023 17:08:37 +0000
ROA not after: Sat 16 Aug 2025 17:08:37 +0000
asID: 265838
IP address blocks: 45.224.116.0/23 maxlen: 24
45.224.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2291373 (0x22f6ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d25be9947afcb39fce110f05b5d8afd69a92382
Validity
Not Before: Aug 15 17:08:37 2023 GMT
Not After : Aug 16 17:08:37 2025 GMT
Subject: CN=f0df1be8267eaef769514314105bebf48a726ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:34:3d:85:a0:91:48:b6:fb:ce:6f:15:b1:24:
8a:5d:c7:77:ce:fe:ca:96:54:59:45:ee:0b:2a:f0:
8c:e5:11:80:40:23:b4:2f:b0:5e:5a:1d:b8:cf:99:
88:a3:95:e4:9c:51:ab:0c:40:45:23:37:a1:54:7f:
57:43:45:be:4b:9a:dc:c3:10:10:f8:d3:f3:18:33:
a0:36:51:f9:a9:f3:ae:b0:e0:2e:d3:57:13:a4:03:
ea:34:3a:97:34:00:f1:37:ec:97:56:ab:e4:3f:15:
f0:63:2e:6d:50:ba:d1:6e:d6:f7:33:57:70:04:9d:
5b:15:09:dd:73:84:d3:31:da:c4:8a:c6:e8:6a:61:
13:98:25:39:ad:d0:d2:86:f9:6e:4e:82:e3:74:bc:
c3:1d:e3:6b:db:86:66:0d:1f:c6:a1:1d:fc:83:dc:
b3:32:87:85:47:b5:f3:ac:75:35:3d:93:6a:63:c3:
e0:cc:f0:bc:a4:a1:b0:d4:76:4d:30:db:97:3b:9d:
ca:2b:62:44:da:56:01:57:10:85:00:68:58:1f:29:
30:6e:c7:61:3f:62:39:17:5b:19:33:58:fe:ff:66:
eb:51:00:b3:09:a8:05:ce:60:ff:f3:f6:42:60:ca:
ad:18:c3:0c:3b:b9:27:07:fd:c3:12:34:74:bf:8f:
5b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BF:3B:C3:9A:31:B8:14:2B:32:B8:76:C4:F1:BC:87:44:9B:D6:3C
X509v3 Authority Key Identifier:
keyid:A2:8C:63:A4:23:78:37:5E:F2:5F:67:8D:D4:3E:72:09:76:AA:1F:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d25be9947afcb39fce110f05b5d8afd69a92382.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ec0ceac2-05b6-4d03-8efa-bbd8d5910d8e/f0df1be8267eaef769514314105bebf48a726ade.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ec0ceac2-05b6-4d03-8efa-bbd8d5910d8e/9d25be9947afcb39fce110f05b5d8afd69a92382.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.224.116.0/23
45.224.119.0/24
Signature Algorithm: sha256WithRSAEncryption
93:6f:0e:6b:92:c4:7a:94:a2:08:d7:ee:41:ce:4b:d7:e0:ab:
f1:da:f4:53:bd:c7:d9:be:ef:04:87:c0:b3:a4:e4:cd:ea:30:
8d:6f:09:80:ab:d8:1f:56:af:cb:30:db:22:29:9a:bd:25:ba:
85:8d:b1:f9:7a:cb:b5:69:6e:c6:18:30:da:eb:87:dc:91:c9:
93:97:37:db:b8:2c:f4:50:57:f1:e1:e9:fc:b9:73:b1:79:1a:
fe:9d:0e:4a:e8:40:63:90:34:d6:58:35:b4:54:3e:a1:bc:3b:
06:f7:59:1c:f3:ca:e6:b7:0b:e2:21:56:94:a3:8c:ab:64:33:
64:12:8e:79:82:62:70:90:0e:d5:8e:e6:a3:e3:47:5c:5b:b4:
95:af:40:b6:48:e1:18:d1:17:2c:77:9b:76:0a:90:67:19:cf:
49:51:a0:eb:50:be:3a:e8:9c:cd:18:bc:2d:15:74:46:27:48:
79:be:1e:4e:36:3d:8a:9f:fc:51:5b:16:bd:e7:8b:fd:34:1c:
d7:ae:52:70:6c:51:2f:49:50:1c:9f:cc:ca:15:b4:9a:f5:d7:
e3:6e:0d:1a:03:7b:38:28:17:e0:fd:6e:75:d4:51:a1:fd:24:
9d:30:16:ae:b4:0c:97:ac:37:2c:5b:e0:d0:74:2d:40:f2:e7:
1c:49:28:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 7 02:37:24 2023 by rpki-client on console-fra.rpki-client.org