Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0608EC5A2F6EF061D863DFF54C1FC05896C714BAED34C9AB35748181F6C688BC/0/3133382e3138352e3131322e302f32322d3234203d3e20323633383031.roa
File: 3133382e3138352e3131322e302f32322d3234203d3e20323633383031.roa (raw, json)
Hash identifier: Rtv4394eWy28lm7AOs9H754GPpJ/UCLoWaaakAlt8wU=
Subject key identifier: 57:B4:02:E0:50:9C:7F:A0:82:45:55:7E:D6:B9:59:28:EB:ED:E5:58
Certificate issuer: /CN=FB2370BF9B986D58F8105A4410005CD845985926
Certificate serial: 2F9A08476571413DA2F452C7B8DCCA5E3E81B1AA
Authority key identifier: FB:23:70:BF:9B:98:6D:58:F8:10:5A:44:10:00:5C:D8:45:98:59:26
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB2370BF9B986D58F8105A4410005CD845985926.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0608EC5A2F6EF061D863DFF54C1FC05896C714BAED34C9AB35748181F6C688BC/0/3133382e3138352e3131322e302f32322d3234203d3e20323633383031.roa
Signing time: Fri 24 Jan 2025 19:45:01 +0000
ROA not before: Fri 24 Jan 2025 19:40:01 +0000
ROA not after: Fri 23 Jan 2026 19:45:01 +0000
asID: 263801
IP address blocks: 138.185.112.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Jan 2025 15:55:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:9a:08:47:65:71:41:3d:a2:f4:52:c7:b8:dc:ca:5e:3e:81:b1:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB2370BF9B986D58F8105A4410005CD845985926
Validity
Not Before: Jan 24 19:40:01 2025 GMT
Not After : Jan 23 19:45:01 2026 GMT
Subject: CN=57B402E0509C7FA08245557ED6B95928EBEDE558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e9:e4:0b:32:9d:e9:00:d6:72:0e:bd:a0:ce:
f3:57:a0:99:04:79:22:bb:b4:db:d1:70:9b:c5:a2:
bd:b3:47:9b:d4:a8:27:7c:a4:c5:6f:61:4c:6b:14:
4a:cd:cf:f8:31:f7:28:0f:11:2b:3e:07:01:05:d2:
c8:0b:d3:ce:6a:e1:97:31:c6:11:d5:a5:86:08:69:
a3:18:07:1a:17:0d:0a:81:79:34:c9:ec:99:fa:c6:
94:b6:61:7b:87:3f:4a:d5:60:ee:7c:26:b1:c8:90:
0e:68:c5:48:f9:8b:00:0a:f0:46:d5:6d:25:ff:a5:
52:e8:6b:a7:03:c2:09:c1:2c:e8:ca:ef:80:22:74:
f8:a9:22:7f:34:e6:dc:97:99:64:12:e2:a2:ff:76:
9b:7e:c1:4d:75:91:e0:8e:41:2e:87:a3:03:8f:af:
d9:0a:b6:7d:71:a9:44:d8:2e:2a:bd:a8:e8:24:4b:
92:05:7e:70:a7:0c:0d:9c:cd:a4:19:6b:89:98:b6:
7d:9c:18:1d:07:19:18:59:78:a5:8e:d1:4c:d7:53:
bf:47:7d:1c:4c:46:5a:b0:1c:e9:21:e9:c6:e1:12:
3e:e5:1f:a6:90:be:f3:c8:6b:f0:bc:ee:3e:8f:41:
c2:bd:08:5d:34:52:ac:13:f5:60:2e:ec:30:52:70:
f3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B4:02:E0:50:9C:7F:A0:82:45:55:7E:D6:B9:59:28:EB:ED:E5:58
X509v3 Authority Key Identifier:
keyid:FB:23:70:BF:9B:98:6D:58:F8:10:5A:44:10:00:5C:D8:45:98:59:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0608EC5A2F6EF061D863DFF54C1FC05896C714BAED34C9AB35748181F6C688BC/0/FB2370BF9B986D58F8105A4410005CD845985926.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB2370BF9B986D58F8105A4410005CD845985926.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0608EC5A2F6EF061D863DFF54C1FC05896C714BAED34C9AB35748181F6C688BC/0/3133382e3138352e3131322e302f32322d3234203d3e20323633383031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.112.0/22
Signature Algorithm: sha256WithRSAEncryption
41:d7:ea:4d:7a:c5:8c:8b:5d:eb:2e:ba:a1:2f:88:26:12:9e:
3f:8c:4b:28:7e:e5:4a:82:39:12:ba:7c:04:0e:83:a6:4b:aa:
72:85:b5:6d:d3:53:c7:0e:91:4a:ae:06:3a:ba:f5:dc:3a:c2:
a8:8e:17:8a:67:e3:9a:0b:8d:dd:e7:e2:37:9b:70:54:67:88:
0b:3a:66:5c:df:19:2c:63:0c:e4:d8:75:71:6b:22:52:ae:d9:
a2:2a:cc:8d:8d:9b:d9:84:f1:ff:86:73:c6:4f:e4:e6:23:35:
22:13:3b:3b:3c:9e:da:85:84:49:30:8b:4c:94:cd:a1:93:6f:
f8:4f:06:49:6d:6d:70:1c:94:91:8e:b2:c8:bd:19:ae:b1:bb:
99:cc:8b:86:60:6a:9a:96:5d:b1:6b:de:6f:44:4c:ae:23:78:
98:1d:d5:8f:54:dd:32:17:f9:e0:4a:3e:88:88:12:c7:d4:da:
43:ed:99:ab:50:40:45:cf:d1:96:99:b0:25:60:48:28:f7:1f:
fc:b9:97:92:b1:8e:6c:2d:9a:73:00:7a:32:99:35:d3:cb:39:
0d:8f:72:72:5b:14:80:e0:ad:3b:44:33:e7:f5:33:29:8a:dd:
61:08:eb:e3:7a:81:50:44:c8:4a:da:5c:5f:2e:da:ae:8d:5e:
aa:c6:b8:dc
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUL5oIR2VxQT2i9FLHuNzKXj6BsaowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkIyMzcwQkY5Qjk4NkQ1OEY4MTA1QTQ0MTAwMDVDRDg0
NTk4NTkyNjAeFw0yNTAxMjQxOTQwMDFaFw0yNjAxMjMxOTQ1MDFaMDMxMTAvBgNV
BAMTKDU3QjQwMkUwNTA5QzdGQTA4MjQ1NTU3RUQ2Qjk1OTI4RUJFREU1NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu6eQLMp3pANZyDr2gzvNXoJkE
eSK7tNvRcJvFor2zR5vUqCd8pMVvYUxrFErNz/gx9ygPESs+BwEF0sgL085q4Zcx
xhHVpYYIaaMYBxoXDQqBeTTJ7Jn6xpS2YXuHP0rVYO58JrHIkA5oxUj5iwAK8EbV
bSX/pVLoa6cDwgnBLOjK74AidPipIn805tyXmWQS4qL/dpt+wU11keCOQS6HowOP
r9kKtn1xqUTYLiq9qOgkS5IFfnCnDA2czaQZa4mYtn2cGB0HGRhZeKWO0UzXU79H
fRxMRlqwHOkh6cbhEj7lH6aQvvPIa/C87j6PQcK9CF00UqwT9WAu7DBScPNpAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUV7QC4FCcf6CCRVV+1rlZKOvt5VgwHwYDVR0j
BBgwFoAU+yNwv5uYbVj4EFpEEABc2EWYWSYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNjA4RUM1QTJGNkVGMDYxRDg2M0RGRjU0QzFGQzA1ODk2
QzcxNEJBRUQzNEM5QUIzNTc0ODE4MUY2QzY4OEJDLzAvRkIyMzcwQkY5Qjk4NkQ1
OEY4MTA1QTQ0MTAwMDVDRDg0NTk4NTkyNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GQjIzNzBCRjlCOTg2RDU4Rjgx
MDVBNDQxMDAwNUNEODQ1OTg1OTI2LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDYwOEVDNUEyRjZFRjA2MUQ4NjNERkY1NEMxRkMwNTg5NkM3MTRCQUVE
MzRDOUFCMzU3NDgxODFGNkM2ODhCQy8wLzMxMzMzODJlMzEzODM1MmUzMTMxMzIy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzMzODMwMzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKK
uXAwDQYJKoZIhvcNAQELBQADggEBAEHX6k16xYyLXesuuqEviCYSnj+MSyh+5UqC
ORK6fAQOg6ZLqnKFtW3TU8cOkUquBjq69dw6wqiOF4pn45oLjd3n4jebcFRniAs6
ZlzfGSxjDOTYdXFrIlKu2aIqzI2Nm9mE8f+Gc8ZP5OYjNSITOzs8ntqFhEkwi0yU
zaGTb/hPBkltbXAclJGOssi9Ga6xu5nMi4ZgapqWXbFr3m9ETK4jeJgd1Y9U3TIX
+eBKPoiIEsfU2kPtmatQQEXP0ZaZsCVgSCj3H/y5l5KxjmwtmnMAejKZNdPLOQ2P
cnJbFIDgrTtEM+f1MymK3WEI6+N6gVBEyEraXF8u2q6NXqrGuNw=
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:11:19 2025 by rpki-client