Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fa4daae8-1319-4fb6-ad27-4facb48948f4/def7365dd328d3445f4237afd6f475b224163446.roa
File: def7365dd328d3445f4237afd6f475b224163446.roa (raw, json)
Hash identifier: XTOXsD/mBxfqF+K083RXLiUVPJmAli/eSp/DTQC2zoA=
Subject key identifier: D6:4A:3C:8F:C5:0C:7F:DB:00:92:00:CE:44:02:E4:FB:ED:F3:8D:24
Certificate issuer: /CN=83e071b73134e99e61c3db9163fa966ff3118e3c
Certificate serial: 0B9069
Authority key identifier: 45:C1:1C:A7:41:D2:75:06:49:E2:8A:86:A8:F8:A6:B0:D0:DA:F3:5B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/83e071b73134e99e61c3db9163fa966ff3118e3c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/fa4daae8-1319-4fb6-ad27-4facb48948f4/def7365dd328d3445f4237afd6f475b224163446.roa
Signing time: Wed 24 Mar 2021 14:42:21 +0000
ROA not before: Wed 24 Mar 2021 14:42:21 +0000
ROA not after: Tue 24 Mar 2026 14:42:21 +0000
asID: 263686
IP address blocks: 45.175.64.0/24 maxlen: 24
45.175.65.0/24 maxlen: 24
45.175.66.0/24 maxlen: 24
45.175.67.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 757865 (0xb9069)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e071b73134e99e61c3db9163fa966ff3118e3c
Validity
Not Before: Mar 24 14:42:21 2021 GMT
Not After : Mar 24 14:42:21 2026 GMT
Subject: CN=def7365dd328d3445f4237afd6f475b224163446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ba:13:b3:4e:e6:d2:f7:21:f1:22:83:e3:a7:
64:5f:6d:7e:c1:6a:76:b4:93:70:b0:b4:6e:5a:d4:
db:5b:0a:64:f9:8e:87:01:ca:25:db:38:88:95:6d:
b9:78:c0:64:c4:35:88:1a:7f:70:e6:0b:59:02:7e:
5a:29:a6:fc:e4:38:f1:5a:aa:cb:45:07:1e:f2:c5:
1b:0d:a0:3f:86:8e:c0:26:4b:7f:44:0d:75:61:f5:
3d:c6:05:6d:6a:ac:d6:8b:46:09:2f:9f:46:d7:0a:
45:af:e9:d8:31:69:81:9a:21:54:68:40:61:e4:dc:
af:3f:bf:92:b7:6d:9f:b6:c5:cf:1d:26:91:d6:fd:
c0:39:05:31:84:7d:36:5e:0b:9c:5b:95:7b:d8:1e:
b5:28:e4:ab:0b:ec:c7:f3:2b:59:58:57:83:d2:c5:
33:38:fb:47:26:68:04:9d:13:11:4a:c0:96:74:a9:
1a:3d:1d:02:1c:bf:a1:f5:4c:85:3a:0c:ca:c6:2e:
69:6f:f1:da:d4:49:3f:cc:5c:07:41:65:1e:36:ad:
58:0d:4d:08:91:a5:4c:3a:39:be:78:2a:94:e0:dc:
a3:cf:70:a4:ee:08:04:d6:88:46:2b:e4:87:84:c6:
0e:c4:53:7d:15:4b:d9:b1:8b:9b:5b:3a:ff:6a:a4:
30:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4A:3C:8F:C5:0C:7F:DB:00:92:00:CE:44:02:E4:FB:ED:F3:8D:24
X509v3 Authority Key Identifier:
keyid:45:C1:1C:A7:41:D2:75:06:49:E2:8A:86:A8:F8:A6:B0:D0:DA:F3:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/83e071b73134e99e61c3db9163fa966ff3118e3c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fa4daae8-1319-4fb6-ad27-4facb48948f4/def7365dd328d3445f4237afd6f475b224163446.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/fa4daae8-1319-4fb6-ad27-4facb48948f4/83e071b73134e99e61c3db9163fa966ff3118e3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.175.64.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:51:86:17:00:05:b7:03:bb:f5:98:53:0c:91:27:22:6a:c9:
5f:7f:53:67:aa:33:9c:d4:cb:b1:6a:87:8a:60:3f:d6:96:2c:
21:41:95:8a:43:1c:27:74:c3:55:98:2c:e6:94:ec:0f:c4:7f:
49:f0:f9:79:fb:8f:0e:64:7d:62:44:15:25:65:de:c4:b9:70:
80:1f:83:ab:bf:2c:4a:ca:62:74:13:ee:ef:3b:10:0e:04:e8:
22:37:3d:30:26:71:ea:c4:96:03:d2:7e:e4:17:82:ae:13:3c:
73:8f:65:62:05:aa:98:a3:19:77:ef:7d:6f:43:5a:93:a8:4f:
c5:3d:14:f1:40:65:dc:0e:3e:30:0f:ca:28:65:2a:4f:81:fa:
51:f3:51:99:1f:e5:5e:68:27:f4:d7:e3:1e:7b:7c:9b:1b:93:
f4:c3:5d:ee:8c:3c:ff:fa:36:8e:24:10:56:f5:29:cb:81:79:
fc:85:1c:32:54:65:34:53:c6:69:be:eb:19:1d:1f:c0:dd:2c:
4c:70:1c:e7:75:f2:f4:82:ba:ad:d3:a1:13:f8:5c:0d:d7:fe:
02:03:1a:a0:35:c7:eb:9a:28:d6:b0:ee:0a:7b:26:ff:15:6a:
9d:dc:ef:8a:58:c7:78:2c:b1:cb:6a:69:50:88:3b:43:42:f0:
b3:50:f5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 20 21:46:57 2023 by rpki-client on console-ams.rpki-client.org