Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0608EC5A2F6EF061D863DFF54C1FC05896C714BAED34C9AB35748181F6C688BC/0/3137392e36332e3230302e302f32312d3234203d3e20323633383031.roa
File: 3137392e36332e3230302e302f32312d3234203d3e20323633383031.roa (raw, json)
Hash identifier: A7EbOlFIKEyu4trn8XuvnwEjSlTzOQnjllJLdMeznQo=
Subject key identifier: 8F:F9:81:7B:8D:3E:1D:B4:C8:64:DD:DD:C1:B9:12:CD:5C:24:7D:0F
Certificate issuer: /CN=FB2370BF9B986D58F8105A4410005CD845985926
Certificate serial: 4A3150438BCB8196ED0CB68322FE1B85139D2E0F
Authority key identifier: FB:23:70:BF:9B:98:6D:58:F8:10:5A:44:10:00:5C:D8:45:98:59:26
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB2370BF9B986D58F8105A4410005CD845985926.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0608EC5A2F6EF061D863DFF54C1FC05896C714BAED34C9AB35748181F6C688BC/0/3137392e36332e3230302e302f32312d3234203d3e20323633383031.roa
Signing time: Fri 24 Jan 2025 19:45:00 +0000
ROA not before: Fri 24 Jan 2025 19:40:00 +0000
ROA not after: Fri 23 Jan 2026 19:45:00 +0000
asID: 263801
IP address blocks: 179.63.200.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Jan 2025 15:55:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:31:50:43:8b:cb:81:96:ed:0c:b6:83:22:fe:1b:85:13:9d:2e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB2370BF9B986D58F8105A4410005CD845985926
Validity
Not Before: Jan 24 19:40:00 2025 GMT
Not After : Jan 23 19:45:00 2026 GMT
Subject: CN=8FF9817B8D3E1DB4C864DDDDC1B912CD5C247D0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:64:99:b9:29:f3:e7:72:73:ff:71:4b:ad:36:
a0:c9:ad:88:c1:de:d4:1d:12:ae:aa:8f:be:24:c9:
65:99:aa:0f:af:9a:c1:04:5c:5f:d1:a6:ba:32:ff:
93:6b:0c:73:27:23:90:1e:8c:2f:0e:ab:bc:24:2b:
de:5c:87:d3:04:0d:84:07:12:a1:1a:d5:c4:cf:16:
2c:43:ed:ad:23:23:41:68:84:07:38:80:0e:32:5e:
48:31:26:46:51:09:0f:38:ad:5c:09:c8:52:82:a6:
fc:9a:0a:d2:a7:67:b8:5a:a5:e0:35:44:49:00:d9:
ae:30:51:92:81:b7:03:a2:cc:3b:8c:9e:53:cf:ab:
6c:5c:ce:88:f7:c9:fe:95:93:af:d0:0c:9e:15:09:
52:f2:62:5d:53:42:4f:6d:ab:d0:65:64:7a:b4:bc:
a3:5a:f1:98:95:ef:8d:e4:70:72:70:bf:1d:62:6b:
11:3b:06:6d:77:50:56:57:1f:f9:6a:47:89:4b:dd:
d4:f1:6a:bb:ad:cc:85:a9:29:7d:17:a8:17:b7:bb:
ab:51:72:e2:2a:32:15:86:21:df:a0:27:7f:fa:cc:
5e:5a:6c:d3:ab:ff:32:71:ed:5c:84:d0:c6:0c:53:
62:21:50:23:9a:2e:d0:3c:0e:09:5f:62:af:9c:e6:
a4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F9:81:7B:8D:3E:1D:B4:C8:64:DD:DD:C1:B9:12:CD:5C:24:7D:0F
X509v3 Authority Key Identifier:
keyid:FB:23:70:BF:9B:98:6D:58:F8:10:5A:44:10:00:5C:D8:45:98:59:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0608EC5A2F6EF061D863DFF54C1FC05896C714BAED34C9AB35748181F6C688BC/0/FB2370BF9B986D58F8105A4410005CD845985926.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB2370BF9B986D58F8105A4410005CD845985926.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0608EC5A2F6EF061D863DFF54C1FC05896C714BAED34C9AB35748181F6C688BC/0/3137392e36332e3230302e302f32312d3234203d3e20323633383031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.63.200.0/21
Signature Algorithm: sha256WithRSAEncryption
2e:f0:9a:dc:56:2d:1f:aa:72:9a:54:ca:9d:f8:ac:68:33:cd:
62:ae:d3:b7:b2:dc:97:8c:34:f4:af:7c:87:0a:29:a6:b3:44:
e9:88:83:64:57:37:35:a5:48:14:3b:ec:16:42:e0:be:09:d7:
05:e4:37:03:d7:80:44:d8:78:7d:c3:fd:cb:a4:42:f7:18:a0:
32:24:95:4b:98:63:10:a6:86:a9:c5:17:23:0c:bb:61:56:c0:
af:9a:13:7f:69:3e:95:59:a0:e6:24:02:41:10:1c:0c:9a:4e:
77:ea:15:7d:6c:b3:d0:d3:f5:8b:3f:4c:95:1d:76:7c:0c:42:
ee:cd:16:df:5c:b6:e5:8d:8f:5a:b2:f8:05:ae:02:e3:47:ad:
34:1e:c7:f9:a7:e1:7a:37:0a:8d:9a:90:e6:c8:3a:fd:58:f0:
fe:7a:42:27:7d:04:64:6e:d5:79:3d:d5:95:a9:a5:31:cd:bc:
1b:70:9e:8c:cf:dd:e5:b1:cf:fd:c5:0c:e3:ed:03:a7:70:f5:
bf:5c:db:02:49:a4:10:dc:cf:a8:76:d0:ca:ce:d5:ae:1b:c6:
c1:dd:ad:43:14:a8:86:ab:3b:3d:c6:8c:37:2f:7b:77:7d:94:
ec:ae:af:39:52:fa:ec:2d:e9:a7:f2:02:d8:7e:44:76:92:2a:
e2:d6:7c:aa
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUSjFQQ4vLgZbtDLaDIv4bhROdLg8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkIyMzcwQkY5Qjk4NkQ1OEY4MTA1QTQ0MTAwMDVDRDg0
NTk4NTkyNjAeFw0yNTAxMjQxOTQwMDBaFw0yNjAxMjMxOTQ1MDBaMDMxMTAvBgNV
BAMTKDhGRjk4MTdCOEQzRTFEQjRDODY0REREREMxQjkxMkNENUMyNDdEMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmZJm5KfPncnP/cUutNqDJrYjB
3tQdEq6qj74kyWWZqg+vmsEEXF/Rproy/5NrDHMnI5AejC8Oq7wkK95ch9MEDYQH
EqEa1cTPFixD7a0jI0FohAc4gA4yXkgxJkZRCQ84rVwJyFKCpvyaCtKnZ7hapeA1
REkA2a4wUZKBtwOizDuMnlPPq2xczoj3yf6Vk6/QDJ4VCVLyYl1TQk9tq9BlZHq0
vKNa8ZiV743kcHJwvx1iaxE7Bm13UFZXH/lqR4lL3dTxarutzIWpKX0XqBe3u6tR
cuIqMhWGId+gJ3/6zF5abNOr/zJx7VyE0MYMU2IhUCOaLtA8DglfYq+c5qQ5AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUj/mBe40+HbTIZN3dwbkSzVwkfQ8wHwYDVR0j
BBgwFoAU+yNwv5uYbVj4EFpEEABc2EWYWSYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNjA4RUM1QTJGNkVGMDYxRDg2M0RGRjU0QzFGQzA1ODk2
QzcxNEJBRUQzNEM5QUIzNTc0ODE4MUY2QzY4OEJDLzAvRkIyMzcwQkY5Qjk4NkQ1
OEY4MTA1QTQ0MTAwMDVDRDg0NTk4NTkyNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GQjIzNzBCRjlCOTg2RDU4Rjgx
MDVBNDQxMDAwNUNEODQ1OTg1OTI2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDYwOEVDNUEyRjZFRjA2MUQ4NjNERkY1NEMxRkMwNTg5NkM3MTRCQUVE
MzRDOUFCMzU3NDgxODFGNkM2ODhCQy8wLzMxMzczOTJlMzYzMzJlMzIzMDMwMmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzNjMzMzgzMDMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDsz/I
MA0GCSqGSIb3DQEBCwUAA4IBAQAu8JrcVi0fqnKaVMqd+KxoM81irtO3styXjDT0
r3yHCimms0TpiINkVzc1pUgUO+wWQuC+CdcF5DcD14BE2Hh9w/3LpEL3GKAyJJVL
mGMQpoapxRcjDLthVsCvmhN/aT6VWaDmJAJBEBwMmk536hV9bLPQ0/WLP0yVHXZ8
DELuzRbfXLbljY9asvgFrgLjR600Hsf5p+F6NwqNmpDmyDr9WPD+ekInfQRkbtV5
PdWVqaUxzbwbcJ6Mz93lsc/9xQzj7QOncPW/XNsCSaQQ3M+odtDKztWuG8bB3a1D
FKiGqzs9xow3L3t3fZTsrq85UvrsLemn8gLYfkR2kiri1nyq
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:06:26 2025 by rpki-client