Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4b7b764d-dbc6-4679-8d07-9e84defca0a0/f1353e96ff63191038682bff309247d676265ac9.roa
File: f1353e96ff63191038682bff309247d676265ac9.roa (raw, json)
Hash identifier: LIT9dXx6vlJYbyFhcsm3zDEry0cowfvUKVNjVS9ok2A=
Subject key identifier: 0D:C1:F5:31:D1:C1:63:DA:0C:6D:B5:9B:4B:A6:50:0D:B0:67:DF:37
Certificate issuer: /CN=e8c63d5d3c0979bd0c27ac35d882f29f9faba509
Certificate serial: 01A231
Authority key identifier: B0:C3:87:9D:D6:6E:7E:9E:77:41:0F:03:97:2B:E3:7E:0E:5C:B3:53
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8c63d5d3c0979bd0c27ac35d882f29f9faba509.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4b7b764d-dbc6-4679-8d07-9e84defca0a0/f1353e96ff63191038682bff309247d676265ac9.roa
Signing time: Sat 01 Jul 2023 00:57:43 +0000
ROA not before: Fri 30 Jun 2023 00:57:42 +0000
ROA not after: Tue 01 Jul 2025 00:57:42 +0000
asID: 269811
IP address blocks: 45.185.186.0/23 maxlen: 23
2803:3b60::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107057 (0x1a231)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c63d5d3c0979bd0c27ac35d882f29f9faba509
Validity
Not Before: Jun 30 00:57:42 2023 GMT
Not After : Jul 1 00:57:42 2025 GMT
Subject: CN=f1353e96ff63191038682bff309247d676265ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ae:71:98:cb:90:0e:6c:c5:ee:7c:f4:e8:3f:
43:6d:92:be:00:a0:25:75:43:87:e7:23:00:f5:82:
2c:f9:62:6f:14:4a:02:77:3f:35:4f:3d:07:c4:69:
aa:d9:d1:50:b9:a9:14:ed:4e:3c:f6:11:f8:9d:75:
64:0a:9b:70:c4:64:b4:46:ec:24:5e:64:a3:f8:f0:
89:c0:4a:b1:7c:4c:59:ae:a1:a5:8e:23:4a:f1:aa:
8b:65:12:69:87:49:83:82:5a:5e:25:fc:b7:e8:44:
40:4f:d6:3d:cf:72:46:e6:cc:88:3e:a3:9b:c2:49:
43:35:26:ac:7b:03:93:6b:fe:21:7f:25:70:a9:28:
46:98:3c:97:06:db:bb:2f:a1:ed:7e:c1:0d:05:6a:
d3:35:d0:7e:9a:0a:1a:be:2e:43:bc:20:5b:85:38:
5e:98:0f:ac:2f:fd:5a:d5:b9:4f:d9:95:f9:4c:b0:
b4:3c:17:e9:a7:0e:50:e2:ea:01:7b:f2:88:7b:2f:
1b:ba:45:e7:80:16:28:77:18:c4:0e:a5:c9:a1:18:
50:3e:25:de:9a:83:38:1f:1a:e7:cc:ce:ce:24:2f:
61:93:f7:06:f2:d7:33:b9:b0:82:ce:26:25:d6:a5:
23:4b:95:3d:46:01:cb:d6:46:b1:71:9e:7f:9d:34:
23:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C1:F5:31:D1:C1:63:DA:0C:6D:B5:9B:4B:A6:50:0D:B0:67:DF:37
X509v3 Authority Key Identifier:
keyid:B0:C3:87:9D:D6:6E:7E:9E:77:41:0F:03:97:2B:E3:7E:0E:5C:B3:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8c63d5d3c0979bd0c27ac35d882f29f9faba509.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4b7b764d-dbc6-4679-8d07-9e84defca0a0/f1353e96ff63191038682bff309247d676265ac9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4b7b764d-dbc6-4679-8d07-9e84defca0a0/e8c63d5d3c0979bd0c27ac35d882f29f9faba509.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.185.186.0/23
IPv6:
2803:3b60::/32
Signature Algorithm: sha256WithRSAEncryption
bd:25:a9:c1:22:8f:f7:2e:40:89:65:c3:fd:c5:eb:79:e3:59:
fe:fd:1b:f0:e5:4e:c0:ef:1f:e9:da:1a:b7:f9:0b:c1:51:8f:
85:d8:c1:ad:6f:b7:da:ef:68:3a:3a:2a:7b:0c:10:86:e7:74:
b4:e7:82:18:92:52:41:13:03:4b:a7:18:87:d0:34:9d:a2:3b:
ae:79:e1:d5:7c:68:8e:1a:7b:c3:88:78:4a:f0:82:c0:f7:df:
41:82:6b:f7:be:38:86:c8:19:c2:dd:5d:6f:2d:45:d4:d1:3f:
11:0f:00:e0:48:ed:be:44:79:cd:21:16:9f:91:b5:19:7e:33:
76:61:29:74:2a:9e:57:99:3e:aa:ef:b2:9d:a6:01:a1:cc:eb:
27:26:d8:68:30:64:6d:bb:61:e6:b4:87:65:58:c3:bc:2f:66:
38:2e:1b:e4:44:53:d2:de:f3:65:8d:23:e3:e0:a7:23:0b:cd:
ef:7e:73:70:ca:19:01:3d:0d:86:7f:8c:5d:26:43:1e:22:67:
00:b9:90:f0:81:13:9d:b0:49:93:33:6d:68:94:48:f4:2b:8a:
11:6c:df:fe:94:be:6c:06:84:08:c9:33:1d:34:04:0a:2f:53:
95:c7:dd:78:0e:32:45:06:20:94:61:a7:77:d3:d7:c1:2c:8b:
85:b7:80:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:24 2023 by rpki-client on console.sobornost.net