Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/34352e3137352e3136372e302f32342d3234203d3e20323637363939.roa
File: 34352e3137352e3136372e302f32342d3234203d3e20323637363939.roa (raw, json)
Hash identifier: qkGCVDysj8vQURxII+Mfy41lUJFalquyFdsV8eLmjTs=
Subject key identifier: CB:06:64:95:A9:F6:BB:36:E7:B0:AA:27:AD:5F:C5:61:C2:F2:C2:6C
Certificate issuer: /CN=7DA5922CAF9214C6E4545724FFE93FC180331E96
Certificate serial: 19E90946A7DBF1A7E0B500827185779A92CF3FF4
Authority key identifier: 7D:A5:92:2C:AF:92:14:C6:E4:54:57:24:FF:E9:3F:C1:80:33:1E:96
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/34352e3137352e3136372e302f32342d3234203d3e20323637363939.roa
Signing time: Tue 05 Mar 2024 18:04:40 +0000
ROA not before: Tue 05 Mar 2024 17:59:40 +0000
ROA not after: Tue 04 Mar 2025 18:04:40 +0000
asID: 267699
IP address blocks: 45.175.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:e9:09:46:a7:db:f1:a7:e0:b5:00:82:71:85:77:9a:92:cf:3f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7DA5922CAF9214C6E4545724FFE93FC180331E96
Validity
Not Before: Mar 5 17:59:40 2024 GMT
Not After : Mar 4 18:04:40 2025 GMT
Subject: CN=CB066495A9F6BB36E7B0AA27AD5FC561C2F2C26C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:62:0f:d7:a8:c5:79:2d:59:8c:be:84:49:ba:
8f:19:9e:ea:25:29:a7:db:74:b7:a2:2b:5e:20:73:
45:c2:eb:8d:01:6e:85:de:cc:ed:6c:f4:36:b6:16:
94:9c:c2:7e:14:88:de:97:4a:ee:c5:7f:d4:d9:e8:
e7:78:41:9c:aa:3b:ac:16:9f:bd:b2:21:26:48:03:
4d:5d:e0:93:05:5a:99:75:88:8f:44:40:bf:f3:03:
e5:26:e1:1b:dd:43:4b:89:ef:db:9f:69:88:64:07:
5c:af:18:65:8b:0b:37:29:ad:d6:d5:04:b8:d7:19:
af:f1:cb:81:ff:59:55:de:8f:96:4c:18:d9:8e:4f:
56:4e:13:51:bb:a5:2f:86:e0:d2:b4:56:a6:24:44:
b8:49:ce:2d:8e:f6:0a:ab:40:26:26:73:62:a2:ee:
2a:ed:80:a7:5a:cb:32:f4:3c:fd:44:8d:45:9e:59:
05:8f:f9:8b:8c:ea:94:9c:c0:fa:74:27:5d:5b:c7:
41:69:89:1d:aa:c9:1b:f9:b7:0f:3b:72:0b:94:f3:
5b:b6:2b:ac:30:1a:d3:e8:6d:35:ab:a2:7c:96:fc:
b9:3e:58:24:32:44:0b:b9:ff:3b:13:2d:57:66:cc:
09:db:20:e3:54:63:bd:fd:a0:77:c8:00:53:ac:30:
ee:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:06:64:95:A9:F6:BB:36:E7:B0:AA:27:AD:5F:C5:61:C2:F2:C2:6C
X509v3 Authority Key Identifier:
keyid:7D:A5:92:2C:AF:92:14:C6:E4:54:57:24:FF:E9:3F:C1:80:33:1E:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/34352e3137352e3136372e302f32342d3234203d3e20323637363939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.175.167.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:69:ee:2c:c7:83:e4:64:32:d5:1d:51:f3:5b:08:54:0e:95:
e0:0d:1a:a2:cf:e9:34:b2:cc:b5:6b:79:92:fb:5a:36:f7:44:
96:03:41:94:6b:16:a6:4e:3e:47:5f:c4:35:f1:e6:b5:d8:6f:
6f:ff:a2:5e:1b:a5:6c:fb:38:33:c0:c4:93:48:cf:f2:4d:e5:
d0:4f:86:e3:2e:4d:37:73:3e:9c:d3:62:e8:7c:df:bf:93:22:
38:cd:c0:d5:25:93:fb:8d:74:8c:52:27:bf:00:4d:51:78:60:
18:b3:bf:0f:05:c2:32:f3:04:39:02:6d:d4:a8:59:1f:11:dd:
35:0c:c8:70:77:17:14:03:e5:13:7d:83:6e:aa:d6:d4:75:f0:
54:45:29:0a:20:f1:c4:6f:a5:f9:b0:61:78:0e:e6:5d:6a:7c:
28:77:a5:7c:76:71:e5:eb:91:b2:e4:e5:9f:fd:10:e9:b6:d1:
26:3c:ea:40:61:3a:fb:00:dd:69:2b:ce:96:9e:38:7d:ef:0c:
de:28:7d:e0:17:b5:a7:e7:e0:b1:25:1e:b1:c8:db:7c:e1:4f:
0b:b1:f1:bc:c6:a8:f7:7e:de:3a:b1:9c:b0:3c:6c:c6:da:1c:
3d:7d:c7:b1:0d:8f:4a:d7:c9:e1:70:1a:f7:d1:e3:b5:10:f2:
40:48:3e:69
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUGekJRqfb8afgtQCCcYV3mpLPP/QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0RBNTkyMkNBRjkyMTRDNkU0NTQ1NzI0RkZFOTNGQzE4
MDMzMUU5NjAeFw0yNDAzMDUxNzU5NDBaFw0yNTAzMDQxODA0NDBaMDMxMTAvBgNV
BAMTKENCMDY2NDk1QTlGNkJCMzZFN0IwQUEyN0FENUZDNTYxQzJGMkMyNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Yg/XqMV5LVmMvoRJuo8Znuol
KafbdLeiK14gc0XC640BboXezO1s9Da2FpScwn4UiN6XSu7Ff9TZ6Od4QZyqO6wW
n72yISZIA01d4JMFWpl1iI9EQL/zA+Um4RvdQ0uJ79ufaYhkB1yvGGWLCzcprdbV
BLjXGa/xy4H/WVXej5ZMGNmOT1ZOE1G7pS+G4NK0VqYkRLhJzi2O9gqrQCYmc2Ki
7irtgKdayzL0PP1EjUWeWQWP+YuM6pScwPp0J11bx0FpiR2qyRv5tw87cguU81u2
K6wwGtPobTWronyW/Lk+WCQyRAu5/zsTLVdmzAnbIONUY739oHfIAFOsMO6tAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUywZklan2uzbnsKonrV/FYcLywmwwHwYDVR0j
BBgwFoAUfaWSLK+SFMbkVFck/+k/wYAzHpYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRDRFOTYxQTIzMUNEMTNBNzZFRUIyOEY0NEJENEM3QkU5
Qzg2QjY0MjEzMTI0QTEyQkFEMkNERDdEQzYxNTg2LzAvN0RBNTkyMkNBRjkyMTRD
NkU0NTQ1NzI0RkZFOTNGQzE4MDMzMUU5Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83REE1OTIyQ0FGOTIxNEM2RTQ1
NDU3MjRGRkU5M0ZDMTgwMzMxRTk2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUQ0RTk2MUEyMzFDRDEzQTc2RUVCMjhGNDRCRDRDN0JFOUM4NkI2NDIx
MzEyNEExMkJBRDJDREQ3REM2MTU4Ni8wLzM0MzUyZTMxMzczNTJlMzEzNjM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3MzYzOTM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALa+n
MA0GCSqGSIb3DQEBCwUAA4IBAQB9ae4sx4PkZDLVHVHzWwhUDpXgDRqiz+k0ssy1
a3mS+1o290SWA0GUaxamTj5HX8Q18ea12G9v/6JeG6Vs+zgzwMSTSM/yTeXQT4bj
Lk03cz6c02LofN+/kyI4zcDVJZP7jXSMUie/AE1ReGAYs78PBcIy8wQ5Am3UqFkf
Ed01DMhwdxcUA+UTfYNuqtbUdfBURSkKIPHEb6X5sGF4DuZdanwod6V8dnHl65Gy
5OWf/RDpttEmPOpAYTr7AN1pK86Wnjh97wzeKH3gF7Wn5+CxJR6xyNt84U8LsfG8
xqj3ft46sZywPGzG2hw9fcexDY9K18nhcBr30eO1EPJASD5p
-----END CERTIFICATE-----
Generated at Wed Apr 23 07:15:49 2025 by rpki-client