Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0205884BF3CD28E1AFB7EDFFE698E1CF294DD7C234D618E08736A7ED5E1ED19A/0/323830313a31343a363830303a3a2f34382d3438203d3e203139343239.roa
File: 323830313a31343a363830303a3a2f34382d3438203d3e203139343239.roa (raw, json)
Hash identifier: m3T5+OAykTAiY/DDAt24E1az7gft/RjWtvd+CCmEs9E=
Subject key identifier: 83:4A:A8:D6:DA:0D:46:BE:AF:C5:B1:7C:6A:A8:37:E5:69:85:B7:08
Certificate issuer: /CN=C8A753C34C3D19437CC9662E899183E9CB05BDE5
Certificate serial: 4F249ECBEBC41C0C9368C5322132B67E3F672196
Authority key identifier: C8:A7:53:C3:4C:3D:19:43:7C:C9:66:2E:89:91:83:E9:CB:05:BD:E5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8A753C34C3D19437CC9662E899183E9CB05BDE5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0205884BF3CD28E1AFB7EDFFE698E1CF294DD7C234D618E08736A7ED5E1ED19A/0/323830313a31343a363830303a3a2f34382d3438203d3e203139343239.roa
Signing time: Thu 06 Jun 2024 16:50:00 +0000
ROA not before: Thu 06 Jun 2024 16:45:00 +0000
ROA not after: Thu 05 Jun 2025 16:50:00 +0000
asID: 19429
IP address blocks: 2801:14:6800::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Mar 2025 15:15:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:24:9e:cb:eb:c4:1c:0c:93:68:c5:32:21:32:b6:7e:3f:67:21:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8A753C34C3D19437CC9662E899183E9CB05BDE5
Validity
Not Before: Jun 6 16:45:00 2024 GMT
Not After : Jun 5 16:50:00 2025 GMT
Subject: CN=834AA8D6DA0D46BEAFC5B17C6AA837E56985B708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6d:57:e1:e4:17:b7:57:2d:74:af:f4:a5:ed:
da:60:5b:d0:e4:88:a5:8d:a3:69:8a:bc:7a:e3:12:
05:db:93:36:53:07:c4:e7:b3:5b:49:02:d5:1c:4a:
c5:5c:83:44:95:f8:9c:bc:fd:a9:b4:3e:60:b8:29:
1a:29:01:df:3b:5a:5f:5a:6a:3b:6a:de:6d:f3:48:
1f:d6:15:36:df:87:bf:11:52:b4:e3:3b:0f:d1:5b:
7c:77:40:ff:6e:58:55:e3:27:cd:bf:b7:df:c4:58:
27:5c:75:57:6a:ea:33:58:36:4a:2e:c5:58:b9:7d:
42:f3:e7:1d:63:6d:b3:e0:05:63:9a:48:ab:a1:18:
e1:92:9f:56:2e:98:b6:04:27:04:f1:b8:c9:92:d1:
b9:11:5a:38:3a:93:04:5c:58:c1:9e:04:9d:94:2f:
7f:25:21:aa:a9:2b:78:e6:65:b1:8e:0b:1a:5a:14:
12:28:bc:7f:c6:5a:3e:ce:87:f1:30:c0:7d:48:e2:
5a:c9:cc:00:69:9f:45:ff:c2:73:0f:dd:9c:3f:41:
d0:12:2b:21:32:fa:1a:97:4d:4d:28:be:65:0f:d3:
55:72:4e:0f:eb:45:6e:06:9b:35:15:c5:64:b6:9e:
1b:be:38:e9:0d:b3:b5:da:dd:2b:30:50:19:a2:52:
ab:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4A:A8:D6:DA:0D:46:BE:AF:C5:B1:7C:6A:A8:37:E5:69:85:B7:08
X509v3 Authority Key Identifier:
keyid:C8:A7:53:C3:4C:3D:19:43:7C:C9:66:2E:89:91:83:E9:CB:05:BD:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0205884BF3CD28E1AFB7EDFFE698E1CF294DD7C234D618E08736A7ED5E1ED19A/0/C8A753C34C3D19437CC9662E899183E9CB05BDE5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8A753C34C3D19437CC9662E899183E9CB05BDE5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0205884BF3CD28E1AFB7EDFFE698E1CF294DD7C234D618E08736A7ED5E1ED19A/0/323830313a31343a363830303a3a2f34382d3438203d3e203139343239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:14:6800::/48
Signature Algorithm: sha256WithRSAEncryption
54:c2:9b:e4:bb:27:6b:53:78:09:f3:5a:15:f2:47:dc:23:3e:
29:38:46:e8:b9:11:ee:cf:b4:79:16:40:17:9d:b4:bc:8b:22:
4e:7e:1a:31:3e:cc:bf:e6:66:1b:ac:4b:5d:42:01:7e:f2:96:
0e:e6:bc:97:98:b5:19:48:ed:70:2d:7c:ab:45:d2:81:44:d0:
97:cd:8d:79:fc:22:06:64:39:69:9a:c3:af:5b:46:14:c8:20:
69:bb:0e:22:e2:a4:3f:db:d4:9a:cf:a1:b2:71:8c:68:84:75:
60:c4:85:85:b9:a7:57:f0:2d:ae:07:45:05:5d:fe:ab:13:74:
02:90:6a:9c:a5:45:c0:0d:2c:3a:07:37:7f:a1:9d:c3:e4:54:
13:bc:cf:23:ae:ab:b3:69:9d:ce:94:01:02:76:90:68:1e:00:
12:74:19:44:ee:a9:e4:eb:c2:18:65:05:51:6b:fa:c9:fd:c7:
3a:cf:72:39:93:69:96:58:a5:e3:a5:ba:10:a4:24:e2:17:00:
02:19:af:e7:03:d0:5d:0e:8e:42:2b:40:f6:cf:cb:08:47:51:
5d:d4:d5:93:52:47:12:5f:ec:63:41:18:97:51:cd:20:3b:11:
11:44:0e:37:f4:31:6a:ca:3f:fe:28:8f:29:48:79:54:1e:16:
b8:6a:c7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:30 2025 by rpki-client