Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2b60c749-7252-4de4-8abf-186b4d4575a8/9a76dfba27a92a8e1448833f39ecd7571bf2451e.roa
File: 9a76dfba27a92a8e1448833f39ecd7571bf2451e.roa (raw, json)
Hash identifier: FfwOOM/mLGv6o2RcbXI01L0N50yIvtOsuyk1S+9Jz2k=
Subject key identifier: E4:CC:43:A1:26:70:83:98:45:AC:79:9E:ED:A5:AC:E8:EA:8F:68:C6
Certificate issuer: /CN=845adae5513877104ae603037bff400bad521b19
Certificate serial: 21EAFE
Authority key identifier: D7:C9:09:3B:A2:67:D2:E0:40:38:47:98:DA:40:B6:0C:07:31:D5:69
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/845adae5513877104ae603037bff400bad521b19.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2b60c749-7252-4de4-8abf-186b4d4575a8/9a76dfba27a92a8e1448833f39ecd7571bf2451e.roa
Signing time: Fri 21 Jul 2023 18:45:45 +0000
ROA not before: Thu 20 Jul 2023 18:45:45 +0000
ROA not after: Mon 21 Jul 2025 18:45:45 +0000
asID: 264770
IP address blocks: 168.194.240.0/22 maxlen: 24
170.254.216.0/22 maxlen: 24
2803:10c0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2222846 (0x21eafe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845adae5513877104ae603037bff400bad521b19
Validity
Not Before: Jul 20 18:45:45 2023 GMT
Not After : Jul 21 18:45:45 2025 GMT
Subject: CN=9a76dfba27a92a8e1448833f39ecd7571bf2451e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bd:7f:71:1b:99:85:ed:ec:1f:3c:6c:ee:45:
54:4e:c5:aa:22:fc:a1:ed:72:1d:c0:07:df:e7:51:
9f:9f:5a:f4:53:59:1f:18:af:b9:87:75:cf:e3:1c:
ae:08:17:cf:87:06:1a:ee:d9:8a:17:29:38:45:a3:
5c:e6:47:9c:28:42:d6:bc:b8:07:e6:88:1a:cd:3f:
fa:d3:26:b5:9c:0f:bb:2a:49:5f:78:df:dc:25:c9:
52:e0:d4:4d:29:9a:a5:fb:0a:a6:b7:82:c9:0e:50:
d4:8d:14:b7:ff:a6:33:22:22:2a:a2:cf:1f:5b:29:
e8:db:28:82:2b:9e:32:a9:54:67:84:cd:e1:81:d2:
2c:aa:e8:99:24:9c:c8:43:9c:94:59:0e:0c:9b:8a:
eb:eb:88:b3:ed:00:ef:63:0a:64:29:72:4d:ab:0d:
4b:c1:94:f9:3e:cf:7e:0c:56:29:df:b6:1c:c1:71:
02:e0:46:bf:0c:23:66:a7:94:55:4b:bc:97:32:d1:
2a:6e:c6:0f:f3:28:a5:5b:96:fc:52:78:73:c1:90:
ba:7e:b2:2d:ac:99:b6:ab:30:9e:5e:1f:a7:5d:6e:
a9:3d:07:2c:75:18:2a:e0:93:b3:cc:3e:a6:b7:76:
66:b9:5d:66:0b:02:f9:de:01:59:f7:a4:55:6f:39:
c4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CC:43:A1:26:70:83:98:45:AC:79:9E:ED:A5:AC:E8:EA:8F:68:C6
X509v3 Authority Key Identifier:
keyid:D7:C9:09:3B:A2:67:D2:E0:40:38:47:98:DA:40:B6:0C:07:31:D5:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/845adae5513877104ae603037bff400bad521b19.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2b60c749-7252-4de4-8abf-186b4d4575a8/9a76dfba27a92a8e1448833f39ecd7571bf2451e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2b60c749-7252-4de4-8abf-186b4d4575a8/845adae5513877104ae603037bff400bad521b19.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.240.0/22
170.254.216.0/22
IPv6:
2803:10c0::/32
Signature Algorithm: sha256WithRSAEncryption
7a:13:d1:3d:2d:18:1e:38:13:c3:ae:bf:50:fb:90:a7:ca:c2:
e3:dd:ae:f7:c4:ad:11:ee:88:f8:52:9e:1c:40:e5:d3:d9:93:
89:7c:21:11:6b:b2:9a:a0:48:e5:72:62:5b:78:7f:a3:57:57:
99:15:3a:eb:31:f9:cc:e4:68:2f:bf:a2:05:af:5a:69:32:b7:
92:4a:51:13:43:cc:fa:51:41:9c:d8:1e:0e:3d:19:ef:31:8d:
3e:4c:3f:d7:fe:39:9d:b7:e3:52:3e:36:38:f6:3c:87:c2:81:
3a:fd:62:e9:1f:dd:4d:a2:d7:b1:7f:e8:c7:3e:cf:a0:c2:22:
2a:e0:fd:99:1e:0c:1c:7f:8f:d2:bc:54:8d:b2:1d:14:6c:4e:
70:38:1e:08:fc:97:3d:60:49:37:54:07:00:21:a8:45:44:23:
23:9f:75:07:e0:94:51:be:48:c0:61:a3:13:48:52:18:8b:f3:
08:b3:fc:48:9d:3b:cb:ff:97:9b:51:d2:e1:17:b8:26:e0:2b:
4f:20:23:42:8f:c2:38:3a:0a:27:94:25:d7:71:1d:fb:f9:30:
09:6b:4a:63:83:24:c7:72:c3:15:65:33:5d:31:e6:42:14:a9:
0f:f9:74:e5:c8:4e:fa:39:4c:c1:e4:53:ec:85:e2:d9:b0:0e:
df:7e:5a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net