Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/323830303a3362303a333030303a3a2f33362d3336203d3e2036353335.roa
File: 323830303a3362303a333030303a3a2f33362d3336203d3e2036353335.roa (raw, json)
Hash identifier: VfpsY0acsOfrTcmJLlMZu81M+N11B20ptrSc+NTHre4=
Subject key identifier: 37:EC:4B:4B:6D:69:04:B5:67:29:A9:D1:C1:AB:86:5A:C9:D5:83:52
Certificate issuer: /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial: 47DF8A9DC3D0A95A2934FEEAF1F4115019DA80B5
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/323830303a3362303a333030303a3a2f33362d3336203d3e2036353335.roa
Signing time: Wed 19 Mar 2025 04:15:00 +0000
ROA not before: Wed 19 Mar 2025 04:10:00 +0000
ROA not after: Wed 18 Mar 2026 04:15:00 +0000
asID: 6535
IP address blocks: 2800:3b0:3000::/36 maxlen: 36
Validation: Failed, certificate revoked on Wed 19 Mar 2025 06:05:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:df:8a:9d:c3:d0:a9:5a:29:34:fe:ea:f1:f4:11:50:19:da:80:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Validity
Not Before: Mar 19 04:10:00 2025 GMT
Not After : Mar 18 04:15:00 2026 GMT
Subject: CN=37EC4B4B6D6904B56729A9D1C1AB865AC9D58352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:74:0b:0b:97:a1:75:c3:a5:2b:9d:60:d2:50:
88:9c:76:28:f9:4e:6d:a4:b7:fc:bd:0e:7f:e3:e2:
17:65:78:67:33:1c:c7:24:22:72:ed:f4:73:59:eb:
bf:82:b3:ae:22:4f:9a:33:62:07:d5:69:61:33:55:
1a:d3:a2:17:4e:04:7b:fa:90:14:ae:1b:27:7b:6e:
0f:59:4b:4f:6c:ce:c0:42:ad:73:5b:b3:4f:80:2f:
f5:2e:10:01:3d:43:2e:25:3d:d6:dc:f8:40:cb:83:
b2:d3:d9:11:b5:8c:ba:17:34:33:1f:2c:63:14:f7:
39:ba:e9:77:2d:14:1a:d6:19:5f:80:19:d4:bc:66:
0e:8d:a9:3e:bf:57:e0:a2:49:6b:92:55:19:9b:13:
7a:5e:c5:4d:c6:19:f4:70:1d:25:87:c9:9a:29:eb:
43:60:f0:8c:c4:00:ea:06:25:b4:bf:ff:56:25:a7:
16:19:6d:a4:bb:ed:15:f7:c3:5b:b4:31:79:28:3b:
67:17:08:e9:db:a7:57:13:23:79:9b:fe:66:8b:06:
88:26:41:5e:ca:08:26:a8:7c:cf:03:aa:83:2a:29:
9b:d1:8d:73:59:9c:24:d8:ff:bd:38:48:10:7e:ea:
49:a5:2a:cf:a7:73:6d:ca:11:66:95:64:ab:d2:c2:
8f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:EC:4B:4B:6D:69:04:B5:67:29:A9:D1:C1:AB:86:5A:C9:D5:83:52
X509v3 Authority Key Identifier:
keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/323830303a3362303a333030303a3a2f33362d3336203d3e2036353335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:3b0:3000::/36
Signature Algorithm: sha256WithRSAEncryption
7e:d3:ef:a1:c2:bc:26:60:51:69:a9:0b:26:84:e5:38:c3:5d:
62:6d:1c:a6:3c:1a:15:d1:79:aa:15:ee:93:3d:db:d3:b1:f9:
15:44:bc:be:a3:65:b0:4f:79:4c:05:47:fd:eb:99:f1:85:96:
ee:b9:6d:72:18:f8:2a:14:b6:f9:2a:0e:06:f9:90:f2:1c:4a:
4f:c2:e6:d5:42:05:09:bc:6e:70:02:c1:31:d7:1e:ad:3b:24:
e9:dd:83:82:78:76:6c:70:f4:cd:d8:b0:dd:fd:fb:bc:41:0e:
00:9a:21:7f:1c:d3:08:3f:84:e7:26:3f:52:3f:29:33:0d:e7:
90:af:86:55:e6:de:43:27:3c:24:be:f6:38:f6:4f:a4:f6:94:
57:98:54:50:49:3a:c6:f2:04:20:87:5d:42:6c:2d:28:ce:a5:
e9:28:ec:a9:a6:c5:50:36:6e:45:c1:c7:be:68:ed:f4:df:08:
ea:1e:f8:07:38:6b:9e:f4:2e:46:7b:e2:de:43:e4:f7:c8:73:
25:9c:25:8c:95:27:7f:5d:25:34:43:9c:de:a2:3c:4a:30:f5:
dc:3e:4a:f3:ca:b1:59:47:20:21:c4:0f:ee:66:84:6a:05:97:
4b:48:5d:ee:60:f5:04:e9:e1:bd:f8:d4:80:64:a1:70:35:1d:
1a:78:25:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:35:51 2025 by rpki-client