Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f41fbaba-af79-4562-9dde-4ef65221f9b8/97a9ba4536b0dba0e6b6be2018ce96c1b4c88b03.roa
File: 97a9ba4536b0dba0e6b6be2018ce96c1b4c88b03.roa (raw, json)
Hash identifier: 6L73M40Sx1MioIyFlpa/jRCb/o88kxoexX+n1/Gf81I=
Subject key identifier: 71:CD:7A:87:0A:19:81:11:DC:1E:BA:B0:60:60:B7:25:23:1B:FD:6B
Certificate issuer: /CN=c63b81088b8ee19ee848e7230778ed21342ec0fd
Certificate serial: 21A76E
Authority key identifier: 78:A2:25:97:F2:F8:E8:61:B9:5C:DE:B4:C6:9B:88:56:0D:B7:06:7A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c63b81088b8ee19ee848e7230778ed21342ec0fd.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f41fbaba-af79-4562-9dde-4ef65221f9b8/97a9ba4536b0dba0e6b6be2018ce96c1b4c88b03.roa
Signing time: Wed 05 Jul 2023 01:47:43 +0000
ROA not before: Tue 04 Jul 2023 01:47:43 +0000
ROA not after: Sat 05 Jul 2025 01:47:43 +0000
asID: 52468
IP address blocks: 45.71.184.0/23 maxlen: 23
45.71.186.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2205550 (0x21a76e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c63b81088b8ee19ee848e7230778ed21342ec0fd
Validity
Not Before: Jul 4 01:47:43 2023 GMT
Not After : Jul 5 01:47:43 2025 GMT
Subject: CN=97a9ba4536b0dba0e6b6be2018ce96c1b4c88b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8e:e0:67:bc:63:02:31:d0:7a:ad:3d:bc:88:
bb:bd:b8:5b:32:81:e4:8a:34:fd:61:a0:8e:5a:a3:
cd:eb:af:1a:d8:c9:57:65:d4:a6:00:30:19:83:c8:
10:be:4c:2e:81:f1:47:78:27:00:ad:4f:ff:b0:33:
ab:0e:c9:18:29:f6:39:a8:7b:c4:d4:9c:ef:29:b5:
4a:66:a1:9f:85:48:3e:3f:ad:a3:f4:de:21:9c:e7:
aa:74:2c:db:5e:93:df:57:0c:bd:6c:0b:fa:47:b5:
02:30:8f:f4:f5:e5:98:f5:0d:90:73:57:9a:85:b8:
0a:33:d6:cb:ce:2a:47:4b:ee:53:70:46:fb:cf:8e:
78:3e:d3:8b:a2:ab:92:8a:2e:33:ec:ec:01:6f:bb:
36:ad:eb:f1:bf:95:1e:c4:d8:79:93:f5:af:1f:16:
e4:67:b4:d0:1e:d5:8f:16:5d:76:74:07:62:43:56:
93:2e:05:0a:df:0c:60:40:01:b9:a5:71:3a:62:27:
bb:8b:26:c4:4e:3c:91:ed:bb:db:24:0f:77:7e:e7:
ec:63:67:11:88:e8:12:43:08:61:f3:9f:48:17:d7:
3b:d6:17:44:14:59:32:14:b0:1c:e1:0c:67:cb:42:
85:a9:e7:e5:90:0b:e9:0e:fb:61:56:df:7c:b1:fd:
37:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CD:7A:87:0A:19:81:11:DC:1E:BA:B0:60:60:B7:25:23:1B:FD:6B
X509v3 Authority Key Identifier:
keyid:78:A2:25:97:F2:F8:E8:61:B9:5C:DE:B4:C6:9B:88:56:0D:B7:06:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c63b81088b8ee19ee848e7230778ed21342ec0fd.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f41fbaba-af79-4562-9dde-4ef65221f9b8/97a9ba4536b0dba0e6b6be2018ce96c1b4c88b03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f41fbaba-af79-4562-9dde-4ef65221f9b8/c63b81088b8ee19ee848e7230778ed21342ec0fd.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.184.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:5d:ea:b3:dc:06:4f:69:38:41:4b:f5:b4:22:b4:03:76:39:
b7:a3:04:d1:29:d8:ce:14:79:ce:65:94:4b:73:6a:3a:3c:51:
bc:49:54:6f:83:83:18:f3:0f:0a:5b:20:74:cf:df:ab:84:61:
48:08:d7:08:b3:16:c4:cf:68:39:c8:b4:33:0c:e4:2c:16:0e:
65:78:59:6c:04:63:6f:d3:5c:db:f9:82:22:9a:bf:30:f4:7b:
50:96:39:44:db:23:43:c3:5c:09:22:f8:76:31:49:c2:ec:b8:
0b:98:17:c6:c9:c7:3a:bf:35:47:05:f3:45:7f:4c:5e:a1:69:
bd:64:2b:5d:1f:5a:3a:cb:70:30:ba:03:a9:2e:0b:63:7b:cb:
94:92:c1:b0:45:df:5d:e4:0a:a0:01:f3:87:85:2f:c9:35:8b:
2b:1a:58:73:71:26:75:6a:88:3e:b5:3c:a3:68:fd:18:c6:33:
9c:34:dc:a0:c6:c3:00:65:8e:ea:bd:1e:53:37:44:fe:37:70:
58:56:63:f4:e9:e2:95:e3:1f:7b:0e:86:10:98:64:1a:19:c4:
72:34:d7:4c:de:4b:eb:60:0d:fd:d6:ec:45:67:a6:24:a5:62:
94:d2:67:27:d4:25:29:c2:69:bf:91:52:1e:7b:52:73:49:52:
33:3f:00:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 17 20:29:16 2023 by rpki-client on console-fra.rpki-client.org