Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3138372e302f32342d3234203d3e20383334.roa
File: 3230302e32362e3138372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: MV4UQNmnO3igC9O2+U85LaT7CUmdsStAjtzWo5LQKys=
Subject key identifier: 21:E6:43:0B:18:70:AC:5B:0D:B7:02:09:4E:2E:6E:D7:B9:DC:C4:8F
Certificate issuer: /CN=CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994
Certificate serial: 2F9E1524366060029FECF09B1B912046BB19D5CE
Authority key identifier: CE:C7:9B:D3:D4:AC:E7:89:58:36:B5:E4:2E:6E:5B:5F:6C:A5:59:94
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3138372e302f32342d3234203d3e20383334.roa
Signing time: Wed 22 Jan 2025 15:30:00 +0000
ROA not before: Wed 22 Jan 2025 15:25:00 +0000
ROA not after: Wed 21 Jan 2026 15:30:00 +0000
asID: 834
IP address blocks: 200.26.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Mar 2025 13:55:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:9e:15:24:36:60:60:02:9f:ec:f0:9b:1b:91:20:46:bb:19:d5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994
Validity
Not Before: Jan 22 15:25:00 2025 GMT
Not After : Jan 21 15:30:00 2026 GMT
Subject: CN=21E6430B1870AC5B0DB702094E2E6ED7B9DCC48F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:be:85:f7:87:14:3d:55:d0:80:72:95:0a:76:
b4:33:8c:67:04:76:a4:cb:9e:a9:33:22:7f:a9:f1:
38:a9:ec:4c:1b:62:28:64:40:57:5c:cf:d6:b3:e6:
04:4b:44:07:e8:fa:23:bf:b5:7f:68:90:36:d3:12:
b6:be:83:9c:23:29:52:9b:9c:99:85:78:69:00:1d:
97:0b:06:8f:b0:58:82:8b:ff:e2:5f:4a:47:75:00:
d5:92:b7:5c:55:84:c9:d5:15:c8:e2:f8:80:25:74:
fc:f2:91:6a:71:2c:ff:34:28:54:41:21:2d:94:56:
80:87:a4:40:6a:3d:f4:f6:fa:7d:37:d3:a3:b5:ba:
7e:56:e5:03:6c:1b:d3:7a:cc:48:43:be:1e:d4:bb:
b9:8e:bc:72:a8:ef:33:44:af:72:d1:99:e4:b4:d9:
f1:ea:9b:d8:08:bc:03:74:e6:45:3f:88:c1:78:f1:
df:e1:f1:03:74:3e:33:01:48:23:a1:02:6a:76:de:
bc:79:a5:4c:77:0b:2f:60:67:90:0f:81:b6:10:07:
b9:76:e0:ba:e7:70:c7:5e:0f:c9:97:93:be:d9:88:
93:b9:28:4f:d5:cd:69:93:05:bd:1a:38:16:8a:0b:
62:71:35:85:b3:e0:02:7e:ea:99:fb:d1:cf:ef:12:
04:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E6:43:0B:18:70:AC:5B:0D:B7:02:09:4E:2E:6E:D7:B9:DC:C4:8F
X509v3 Authority Key Identifier:
keyid:CE:C7:9B:D3:D4:AC:E7:89:58:36:B5:E4:2E:6E:5B:5F:6C:A5:59:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEC79BD3D4ACE7895836B5E42E6E5B5F6CA55994.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A3C227E19AA3716C777D495C59E5752560AD1D24ED9D2B6745C6DA5FB7FC311/0/3230302e32362e3138372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.26.187.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:1c:3a:db:45:dc:30:8f:d5:94:89:04:67:d9:23:43:7b:97:
22:b5:42:85:c9:ae:de:c4:54:ac:f7:03:f5:1b:7c:17:17:74:
47:0f:fd:1b:89:02:3a:4a:9f:59:a8:8e:7d:fa:af:09:47:a2:
41:68:29:21:2c:5a:34:28:3c:af:20:01:bc:fe:41:f5:57:b6:
4b:b7:b5:c7:12:34:75:63:f0:cc:4f:61:7c:90:76:3b:e0:f3:
07:bc:21:a6:d7:7d:04:af:b9:af:c7:5a:5f:00:a8:93:bc:40:
c6:91:da:cb:57:64:c2:13:80:c5:1d:45:d6:9e:44:29:32:5f:
58:d4:b4:e0:b4:27:43:aa:2f:b0:6a:87:f4:12:f5:00:4c:21:
bf:79:46:28:74:36:80:3c:cf:b4:5e:ce:01:26:0d:de:8c:f0:
9b:7a:d0:80:e5:ca:3f:6a:a5:ed:33:46:c6:c2:be:b1:1e:4f:
7c:db:e1:af:8d:84:b1:bd:54:4d:9c:16:f8:36:35:c9:38:1f:
d9:44:ab:77:94:c6:21:0d:27:cd:53:32:e6:b5:b5:d9:b6:59:
9d:8d:a6:5f:0f:43:43:af:7e:75:eb:9f:4f:63:0a:88:56:e8:
8b:47:e5:47:2d:6a:27:61:d9:ca:df:94:a6:a9:ec:3e:9d:a6:
44:90:f1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:38:53 2025 by rpki-client