Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0023B76248CCE07DA25B146284D499148051C29A42F304266149914C14A10507/0/3230312e3232322e34362e302f32342d3234203d3e20323733303937.roa
File: 3230312e3232322e34362e302f32342d3234203d3e20323733303937.roa (raw, json)
Hash identifier: TlFy6f1GCUr2id9MuIDcX9llBo/ir6Ki58eeiYLARAY=
Subject key identifier: E4:AC:D3:13:68:E7:8E:A8:D2:3B:59:D3:C3:DB:F3:D2:09:39:81:56
Certificate issuer: /CN=C3D02995E170CE622F60579EB13D9DD037B46A52
Certificate serial: 42C18064F89D3120F384BD465B21FD8A3DEF790F
Authority key identifier: C3:D0:29:95:E1:70:CE:62:2F:60:57:9E:B1:3D:9D:D0:37:B4:6A:52
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3D02995E170CE622F60579EB13D9DD037B46A52.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0023B76248CCE07DA25B146284D499148051C29A42F304266149914C14A10507/0/3230312e3232322e34362e302f32342d3234203d3e20323733303937.roa
Signing time: Mon 02 Dec 2024 18:35:01 +0000
ROA not before: Mon 02 Dec 2024 18:30:01 +0000
ROA not after: Mon 01 Dec 2025 18:35:01 +0000
asID: 273097
IP address blocks: 201.222.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Dec 2024 16:25:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:c1:80:64:f8:9d:31:20:f3:84:bd:46:5b:21:fd:8a:3d:ef:79:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3D02995E170CE622F60579EB13D9DD037B46A52
Validity
Not Before: Dec 2 18:30:01 2024 GMT
Not After : Dec 1 18:35:01 2025 GMT
Subject: CN=E4ACD31368E78EA8D23B59D3C3DBF3D209398156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4f:f8:a7:fb:22:5f:6d:e0:97:93:ac:7f:1b:
d6:41:06:b5:05:e8:c1:c0:b8:66:eb:8e:05:ff:f9:
b2:a6:f9:54:c9:07:c4:65:40:67:c2:ef:6b:bc:df:
05:ab:cd:88:db:81:96:fb:1e:76:37:fc:6b:d5:1b:
5b:ff:7e:63:7a:16:e9:1b:26:2b:ef:4a:da:63:70:
d9:56:62:75:bc:bc:b4:71:3b:37:78:24:0c:57:cd:
2b:a0:19:24:67:6f:66:5c:f9:da:72:8c:31:04:af:
88:b4:0f:56:8d:da:bd:5a:77:f1:cd:ee:48:c2:25:
f1:d5:8d:cd:d0:d9:ae:22:57:e7:3f:37:84:e7:96:
1d:0c:6a:7a:e4:08:62:32:40:6c:e9:0e:d2:8b:6c:
61:99:22:39:34:9c:e6:a2:eb:0a:20:46:89:86:65:
6f:0f:3f:25:28:a4:cc:3d:9f:ee:21:b3:68:2c:07:
72:c2:5b:a8:34:35:3b:ce:01:f6:55:f2:8a:0c:fc:
9f:04:e6:56:a5:1d:0d:7b:47:9a:40:b9:d4:5f:61:
40:92:c4:2f:e3:f3:6a:43:9c:18:30:81:c5:db:0d:
7c:90:bb:f6:4e:7a:12:78:46:84:0d:b0:4b:eb:36:
47:3d:82:e4:b7:78:68:04:f5:5d:34:09:3d:8b:60:
e5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:AC:D3:13:68:E7:8E:A8:D2:3B:59:D3:C3:DB:F3:D2:09:39:81:56
X509v3 Authority Key Identifier:
keyid:C3:D0:29:95:E1:70:CE:62:2F:60:57:9E:B1:3D:9D:D0:37:B4:6A:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0023B76248CCE07DA25B146284D499148051C29A42F304266149914C14A10507/0/C3D02995E170CE622F60579EB13D9DD037B46A52.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3D02995E170CE622F60579EB13D9DD037B46A52.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0023B76248CCE07DA25B146284D499148051C29A42F304266149914C14A10507/0/3230312e3232322e34362e302f32342d3234203d3e20323733303937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.222.46.0/24
Signature Algorithm: sha256WithRSAEncryption
af:3c:ca:88:64:68:75:d9:89:93:dd:e8:33:a9:8c:b6:58:fc:
5f:5d:b0:91:fd:08:bd:d2:8e:22:29:5a:97:8d:18:4a:b8:5a:
43:32:8f:60:e6:08:86:44:2a:a2:f8:9e:a0:b5:fd:9b:b3:ce:
21:81:d0:4b:da:ff:68:e4:ed:7c:da:14:08:41:ab:3e:26:a8:
b6:4e:7d:23:c3:e5:13:4c:74:f3:56:b8:15:e4:27:c2:b0:be:
07:22:c1:38:31:db:55:25:09:00:a0:b9:aa:7c:60:fe:91:c6:
2b:97:07:de:a0:df:bc:37:38:d5:40:91:01:ea:df:8b:b4:36:
95:2f:19:db:e2:55:3f:74:24:f6:ee:4e:0f:0f:4b:4a:ed:67:
0a:20:20:30:62:e8:dc:21:d7:84:ae:0f:eb:ca:f7:17:96:93:
c0:76:3f:cc:41:f6:eb:a5:90:a8:d3:da:3d:9f:d8:28:51:8e:
fb:ef:c5:5f:89:0a:1e:04:89:0e:a7:43:70:8b:12:6f:73:85:
11:25:ee:95:7b:f0:ac:f8:69:5d:7b:74:39:62:6e:91:57:86:
e1:77:33:36:a4:9c:a5:67:06:b7:d0:3e:0f:d7:06:31:ad:2a:
48:11:fe:a2:89:01:64:79:18:64:51:b0:13:a5:c4:81:8b:86:
c6:e4:62:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:00:20 2025 by rpki-client