Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fe5c44a6-7346-43f5-b1f8-b0816a59dca4/a320159091cc60f96d524ddbc6b41c12b009d3b8.roa
File: a320159091cc60f96d524ddbc6b41c12b009d3b8.roa (raw, json)
Hash identifier: wXtP0A3ksBV4m1A0AijxrCRUimwHwMT72Iw6jX4nZyQ=
Subject key identifier: 44:E6:8C:D4:DF:E0:CB:03:08:07:F9:BC:AE:99:9E:BD:0C:45:D2:65
Certificate issuer: /CN=c862d558af9ed1bad010f71dbb203f3aeb8f727a
Certificate serial: 21FB2E
Authority key identifier: 53:76:F8:C0:EB:DC:9F:21:2E:9F:BD:A3:6D:9D:AA:1E:5B:8C:04:AA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c862d558af9ed1bad010f71dbb203f3aeb8f727a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/fe5c44a6-7346-43f5-b1f8-b0816a59dca4/a320159091cc60f96d524ddbc6b41c12b009d3b8.roa
Signing time: Thu 13 Jul 2023 21:52:59 +0000
ROA not before: Wed 12 Jul 2023 21:52:59 +0000
ROA not after: Sun 13 Jul 2025 21:52:59 +0000
asID: 266886
IP address blocks: 45.228.64.0/24 maxlen: 24
45.228.65.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2226990 (0x21fb2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c862d558af9ed1bad010f71dbb203f3aeb8f727a
Validity
Not Before: Jul 12 21:52:59 2023 GMT
Not After : Jul 13 21:52:59 2025 GMT
Subject: CN=a320159091cc60f96d524ddbc6b41c12b009d3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:67:85:dd:db:52:a2:f3:c3:9d:9e:f1:da:2c:
f9:94:9d:58:62:cf:48:f7:24:3b:90:6a:cf:4f:38:
82:99:04:06:bd:a6:01:64:64:f7:06:e5:25:53:03:
70:d3:88:d3:d4:c1:d8:66:fa:04:ca:f9:90:c3:33:
b0:63:67:b8:4e:6d:b1:99:8b:c6:73:2e:fb:83:03:
e0:cb:b6:c1:b4:1c:4b:97:e3:ad:c4:9f:c1:cf:6b:
5b:6a:6c:3a:99:4a:41:39:2d:c8:12:3d:18:67:af:
b4:59:d5:a2:e9:a5:dd:5d:a3:07:e1:a4:a9:93:85:
c3:78:06:ff:d3:fa:10:19:c2:d7:74:b5:76:b0:8f:
e1:44:dc:40:46:17:84:a5:09:df:ef:94:97:31:0c:
29:95:85:c2:01:72:9e:2e:70:63:d6:51:3a:76:6a:
35:88:2d:1b:90:ba:60:fb:4b:9e:82:bc:dd:cb:6c:
2e:6e:b2:d9:25:08:0d:e0:75:e9:4d:24:44:81:f4:
89:cd:87:82:1f:8d:c3:86:6f:ec:f0:a2:35:05:ab:
36:bc:d3:8e:78:1d:01:b7:16:30:d5:4e:c9:6e:f3:
74:c4:ca:a6:f6:1a:55:d2:df:49:07:90:25:ea:0d:
b6:79:9d:d2:46:00:8d:51:b0:22:dc:2d:77:09:e7:
c6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E6:8C:D4:DF:E0:CB:03:08:07:F9:BC:AE:99:9E:BD:0C:45:D2:65
X509v3 Authority Key Identifier:
keyid:53:76:F8:C0:EB:DC:9F:21:2E:9F:BD:A3:6D:9D:AA:1E:5B:8C:04:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c862d558af9ed1bad010f71dbb203f3aeb8f727a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fe5c44a6-7346-43f5-b1f8-b0816a59dca4/a320159091cc60f96d524ddbc6b41c12b009d3b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/fe5c44a6-7346-43f5-b1f8-b0816a59dca4/c862d558af9ed1bad010f71dbb203f3aeb8f727a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.64.0/23
Signature Algorithm: sha256WithRSAEncryption
43:29:99:fa:62:2a:bc:77:41:68:bc:3b:54:e9:04:30:92:5d:
59:89:f7:48:c7:58:79:7b:cd:73:ca:fa:16:89:c4:d2:97:c9:
22:ad:7f:5d:31:f4:9f:c9:4d:b0:83:b1:b0:f8:27:82:1d:48:
07:bd:a4:d0:d8:08:02:c2:a5:39:92:7b:ef:a1:c6:f4:13:83:
68:89:e9:fd:4b:c9:b2:3b:3b:bf:f0:7b:8a:10:d0:07:54:44:
c8:3a:54:27:2d:2c:52:d4:b8:ed:4d:2a:13:44:fe:b3:c9:74:
84:cd:87:cc:c7:2c:83:68:4f:42:5a:a6:82:01:4e:01:91:c8:
37:98:08:b4:8a:3e:0e:02:c0:fe:3d:57:7a:8b:e4:26:6a:72:
4c:04:e3:a3:20:d2:53:0e:f0:7e:4f:00:ad:03:81:f2:ec:43:
ea:2f:c8:d7:93:73:2a:e3:c0:92:9d:c7:3f:be:dd:d4:60:a9:
92:db:3a:94:1c:f2:7c:f8:ee:8d:a1:d3:23:e4:80:01:1b:db:
d7:af:bd:74:0f:2f:cf:8f:c0:1e:b5:ee:43:9d:01:96:3b:1f:
b6:87:c1:7c:dd:7d:f1:e9:a2:0b:1a:c9:55:3b:4e:f1:52:ab:
46:3f:00:37:f9:47:dc:52:36:ae:da:a1:43:bb:bb:6b:26:1f:
6b:51:f4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 15 06:28:58 2023 by rpki-client on console-fra.rpki-client.org