Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fe5c44a6-7346-43f5-b1f8-b0816a59dca4/76ad35d1579df8ce37b54b191942d70fed80fa0f.roa
File: 76ad35d1579df8ce37b54b191942d70fed80fa0f.roa (raw, json)
Hash identifier: rOJ7WJ1TCVesIZABKqVFzjEAJbc6YaQAXvzufmE11XQ=
Subject key identifier: 18:3A:8B:86:B6:70:95:69:B5:28:09:D6:11:5C:CA:A1:26:06:A2:E4
Certificate issuer: /CN=c862d558af9ed1bad010f71dbb203f3aeb8f727a
Certificate serial: 21F35B
Authority key identifier: 53:76:F8:C0:EB:DC:9F:21:2E:9F:BD:A3:6D:9D:AA:1E:5B:8C:04:AA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c862d558af9ed1bad010f71dbb203f3aeb8f727a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/fe5c44a6-7346-43f5-b1f8-b0816a59dca4/76ad35d1579df8ce37b54b191942d70fed80fa0f.roa
Signing time: Wed 12 Jul 2023 19:08:51 +0000
ROA not before: Tue 11 Jul 2023 19:08:51 +0000
ROA not after: Sat 12 Jul 2025 19:08:51 +0000
asID: 266747
IP address blocks: 45.228.66.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2224987 (0x21f35b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c862d558af9ed1bad010f71dbb203f3aeb8f727a
Validity
Not Before: Jul 11 19:08:51 2023 GMT
Not After : Jul 12 19:08:51 2025 GMT
Subject: CN=76ad35d1579df8ce37b54b191942d70fed80fa0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:25:70:5a:04:72:53:80:67:65:97:35:8b:77:
96:66:b1:55:52:10:8d:79:53:0f:40:b4:29:15:3a:
81:f0:ef:59:3d:5f:e9:68:cc:e6:22:de:08:87:2e:
73:66:a5:71:76:7b:63:13:49:4c:9f:51:8e:0b:db:
de:c4:fd:51:89:51:f8:69:21:9a:b9:40:47:60:f7:
7f:e7:f8:d3:9c:50:b5:ba:65:d9:a9:3c:e5:85:15:
ed:fd:f9:f9:ca:3c:21:35:e7:82:a9:29:8a:79:42:
20:1b:e3:b6:b2:2a:55:37:f3:11:6b:a3:a0:e0:3c:
ec:76:6b:63:0d:1c:a2:87:28:66:f6:91:ac:45:fe:
9b:52:af:e1:d3:72:60:64:a6:dc:32:d8:26:e8:a3:
c9:bb:78:b4:24:71:26:35:77:0e:8a:e0:eb:63:8d:
bb:5c:0c:35:ce:46:39:89:56:97:41:33:85:31:dc:
79:5e:cc:36:4b:2f:b2:ae:2d:e8:d8:65:43:84:9d:
50:fb:67:99:40:68:ba:9f:3f:1d:f9:f5:f1:78:da:
ad:c3:5c:23:92:21:02:07:4e:24:a8:47:e8:b6:d2:
c9:73:e6:72:32:60:49:7e:1b:d7:17:29:b0:ce:49:
48:d1:e3:05:27:3f:2e:04:5d:ee:e0:5d:ce:2a:0c:
3e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3A:8B:86:B6:70:95:69:B5:28:09:D6:11:5C:CA:A1:26:06:A2:E4
X509v3 Authority Key Identifier:
keyid:53:76:F8:C0:EB:DC:9F:21:2E:9F:BD:A3:6D:9D:AA:1E:5B:8C:04:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c862d558af9ed1bad010f71dbb203f3aeb8f727a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fe5c44a6-7346-43f5-b1f8-b0816a59dca4/76ad35d1579df8ce37b54b191942d70fed80fa0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/fe5c44a6-7346-43f5-b1f8-b0816a59dca4/c862d558af9ed1bad010f71dbb203f3aeb8f727a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.66.0/24
Signature Algorithm: sha256WithRSAEncryption
70:81:9d:e8:d2:4e:c0:75:5a:8a:fe:d7:a2:ce:58:92:99:d2:
99:f8:d0:64:74:d7:df:07:d3:32:1f:78:e9:26:ba:d6:36:f7:
5a:10:00:55:26:c7:c0:e1:e5:d4:83:a1:f9:0c:ae:15:32:3a:
b0:e9:fd:57:11:be:80:7d:ad:d0:a5:72:0a:e8:f8:28:f6:10:
c3:c5:9d:89:6c:64:59:23:e7:8b:89:dd:b9:a6:cb:97:df:dd:
45:4d:0f:f1:d6:91:46:a7:d1:33:c3:01:bb:77:9e:60:f1:7b:
90:25:c7:85:08:25:ba:78:84:81:a5:03:ab:93:70:7e:3c:34:
a1:45:d1:e6:bc:50:38:a0:35:b7:2e:e6:4a:82:52:be:91:65:
9c:85:41:14:95:74:c4:6f:20:9e:ae:d7:2d:b5:0b:6e:bb:79:
b4:64:b0:92:b8:5d:48:6e:af:8d:4c:e6:df:2b:d6:99:45:27:
0f:25:b4:70:5d:b4:83:c5:a4:ac:b7:67:27:aa:fa:3e:fb:b6:
b3:a1:d8:21:4c:76:2e:34:17:7c:dd:c1:ac:fb:46:2c:f2:b4:
6a:c5:43:af:80:c9:6f:6d:e2:6a:be:19:50:fa:ca:dd:8a:21:
74:be:35:74:b8:98:c5:a6:df:bd:eb:9f:c8:c9:45:8d:b7:86:
2e:43:9b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 15 06:28:58 2023 by rpki-client on console-fra.rpki-client.org