Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/14833F2BFFEA9E2A18C8194640DA219B39EE90CC292CDCEBE367C78EBC52A080/0/34352e3137302e3234392e302f32342d3234203d3e203233343730.roa
File: 34352e3137302e3234392e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier: QvWkE34DsNgTSKncfBLlsZTB7WJsBSaYZohnaNE8IEY=
Subject key identifier: D3:CF:E2:63:B1:BE:A8:94:FC:97:88:F2:41:76:D3:76:D8:42:7B:58
Certificate issuer: /CN=69FB064988CC6E77E3A9CF5D423A459765DC4E1B
Certificate serial: 36401B0E5612954D1F85AF068A37A87BCD42630C
Authority key identifier: 69:FB:06:49:88:CC:6E:77:E3:A9:CF:5D:42:3A:45:97:65:DC:4E:1B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FB064988CC6E77E3A9CF5D423A459765DC4E1B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/14833F2BFFEA9E2A18C8194640DA219B39EE90CC292CDCEBE367C78EBC52A080/0/34352e3137302e3234392e302f32342d3234203d3e203233343730.roa
Signing time: Tue 05 Mar 2024 18:18:41 +0000
ROA not before: Tue 05 Mar 2024 18:13:41 +0000
ROA not after: Tue 04 Mar 2025 18:18:41 +0000
asID: 23470
IP address blocks: 45.170.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:40:1b:0e:56:12:95:4d:1f:85:af:06:8a:37:a8:7b:cd:42:63:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69FB064988CC6E77E3A9CF5D423A459765DC4E1B
Validity
Not Before: Mar 5 18:13:41 2024 GMT
Not After : Mar 4 18:18:41 2025 GMT
Subject: CN=D3CFE263B1BEA894FC9788F24176D376D8427B58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3a:da:9f:f9:f1:35:20:bd:c0:d1:f2:f1:02:
ef:c6:ee:45:aa:ee:77:4b:e0:63:f6:c3:56:c2:72:
d8:6d:a3:0f:21:4b:05:c0:f8:50:08:e6:75:77:f2:
d0:4d:63:0e:fa:bb:a7:7e:91:46:71:8a:50:db:33:
1e:f7:76:1b:23:1a:1b:78:39:8d:3f:04:e0:73:a2:
e9:fa:46:06:34:ae:4e:d6:de:49:b9:bf:96:78:ef:
e7:a8:de:c6:7a:94:ba:c8:a4:8c:3d:7b:0f:be:e8:
05:cf:8a:42:a4:d7:ee:18:dd:d0:36:69:d9:00:63:
89:22:83:0f:5e:8c:f5:c3:74:a1:5f:d0:41:36:97:
02:47:c9:15:8b:c1:a5:1e:e1:9a:f4:18:c0:e7:8a:
3f:a1:48:04:ad:4b:e6:a9:1a:b0:2d:47:a6:42:1e:
86:b1:ec:a2:0a:fe:e2:c1:6b:31:e2:51:a4:da:95:
fb:e9:50:8f:89:09:df:5c:1e:ed:71:5f:8b:05:6b:
89:d4:ae:42:73:94:07:63:f2:97:cb:bc:ad:1d:cf:
f9:27:db:38:0c:74:2b:9d:57:3b:e5:b1:9d:40:89:
fd:c9:8f:d2:5f:22:29:ee:41:70:86:94:ac:e6:d6:
4f:ff:45:51:0b:02:ca:55:10:40:f7:2b:d4:70:76:
d2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CF:E2:63:B1:BE:A8:94:FC:97:88:F2:41:76:D3:76:D8:42:7B:58
X509v3 Authority Key Identifier:
keyid:69:FB:06:49:88:CC:6E:77:E3:A9:CF:5D:42:3A:45:97:65:DC:4E:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/14833F2BFFEA9E2A18C8194640DA219B39EE90CC292CDCEBE367C78EBC52A080/0/69FB064988CC6E77E3A9CF5D423A459765DC4E1B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FB064988CC6E77E3A9CF5D423A459765DC4E1B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/14833F2BFFEA9E2A18C8194640DA219B39EE90CC292CDCEBE367C78EBC52A080/0/34352e3137302e3234392e302f32342d3234203d3e203233343730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.170.249.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:7c:1a:f6:18:d3:e0:ad:82:e0:29:e6:6b:44:53:3f:e6:17:
0e:e3:77:e8:82:94:62:1f:f4:bf:c4:ff:5f:eb:0f:2d:a1:e7:
6c:e9:b2:bf:90:ae:60:40:03:4d:26:63:31:86:44:73:45:fe:
18:d6:2a:ab:1a:ea:a1:8a:74:20:81:f2:e0:68:77:0a:fd:04:
2f:cf:35:6c:5d:b6:ad:62:06:e1:c7:d7:c6:de:06:af:d7:1f:
a3:36:5f:72:1a:32:6a:0a:eb:f1:a0:c0:b0:f2:5d:75:e4:19:
eb:4c:0a:b3:50:e7:9c:69:9e:8c:b8:e2:a5:ca:eb:4e:d9:1f:
52:5c:1c:3f:35:d3:0d:f5:d5:91:bb:e3:a8:29:66:e3:6a:b2:
d8:9e:a3:ba:73:e2:f0:76:a0:21:a8:46:82:84:b3:ba:0c:2c:
f1:2e:98:a3:1f:65:08:0b:ea:b7:55:09:81:da:48:0e:61:75:
bd:92:eb:a6:41:b1:80:68:43:76:bd:94:9b:b8:fc:4c:56:6c:
cf:5b:61:ca:43:95:98:b6:8a:1c:2d:19:b4:06:97:c1:6b:3c:
34:f1:af:98:6f:03:62:3a:52:28:28:c0:9a:8e:44:75:62:d1:
7b:39:c2:46:d2:c3:cc:6e:80:3a:dc:e8:9c:b5:79:a7:fa:b1:
c3:73:12:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:56:41 2025 by rpki-client