Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/220391039701C79346B76FB10EAB6F4717EA71ED125CCFE9B95744CF0340C919/0/323830313a3131613a3a2f34302d3430203d3e203134303830.roa
File: 323830313a3131613a3a2f34302d3430203d3e203134303830.roa (raw, json)
Hash identifier: J1te+En1H8k8fhvhUMiFCKQIlTXkjzjmnVwvku71r30=
Subject key identifier: 5F:32:6D:33:1E:6A:9D:C0:06:1C:F9:81:8D:13:C4:0D:79:C3:96:EC
Certificate issuer: /CN=A597442BE252949C19F9D69F7BF6A9CDDB54134B
Certificate serial: 44AD2CBDA8A3434235BE73EC2E7F35E09E5F4968
Authority key identifier: A5:97:44:2B:E2:52:94:9C:19:F9:D6:9F:7B:F6:A9:CD:DB:54:13:4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A597442BE252949C19F9D69F7BF6A9CDDB54134B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/220391039701C79346B76FB10EAB6F4717EA71ED125CCFE9B95744CF0340C919/0/323830313a3131613a3a2f34302d3430203d3e203134303830.roa
Signing time: Tue 04 Feb 2025 20:01:51 +0000
ROA not before: Tue 04 Feb 2025 19:56:51 +0000
ROA not after: Tue 03 Feb 2026 20:01:51 +0000
asID: 14080
IP address blocks: 2801:11a::/40 maxlen: 40
Validation: Failed, certificate revoked on Sun 09 Mar 2025 01:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:ad:2c:bd:a8:a3:43:42:35:be:73:ec:2e:7f:35:e0:9e:5f:49:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A597442BE252949C19F9D69F7BF6A9CDDB54134B
Validity
Not Before: Feb 4 19:56:51 2025 GMT
Not After : Feb 3 20:01:51 2026 GMT
Subject: CN=5F326D331E6A9DC0061CF9818D13C40D79C396EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:96:01:74:8d:23:1b:cd:dc:a8:03:0b:58:2b:
51:91:55:ce:95:fe:b3:db:4e:02:2e:05:80:b9:bb:
a2:fd:59:55:f1:ed:a2:e4:36:74:f0:69:2b:d4:52:
d2:c4:e3:ff:f2:ff:67:5f:87:ca:9a:01:c0:dd:d8:
8a:b5:bf:10:3e:cd:ef:c6:22:3b:83:80:08:6c:fc:
23:ec:fc:ba:08:1e:6b:7d:4c:85:f3:ea:84:1b:2b:
83:98:12:75:14:01:eb:66:45:1c:b5:f4:44:6f:70:
b0:87:6c:80:1e:d1:e2:0e:e2:72:59:89:fe:fe:f5:
fd:5a:82:d6:06:2b:26:c7:f5:cc:68:3f:2e:a7:49:
44:01:cc:c7:d4:b2:f9:6b:60:3c:a7:1c:75:d4:02:
1b:59:97:74:12:4d:30:33:85:0c:a0:e9:e5:99:41:
57:d1:e5:24:f1:c2:4a:00:a7:ae:a6:88:98:99:8d:
33:3d:60:61:56:6a:d1:40:5c:aa:fe:6a:32:c9:6e:
b2:aa:34:eb:c6:0b:2a:b9:20:ae:8a:99:97:7d:69:
36:b9:0c:ab:ff:4f:94:2b:8d:3d:17:1c:9c:7b:9d:
7c:d1:55:b7:82:e8:57:f7:88:80:52:18:a8:b1:c9:
e8:89:07:88:e1:38:c9:84:5a:46:01:01:0f:98:e7:
bb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:32:6D:33:1E:6A:9D:C0:06:1C:F9:81:8D:13:C4:0D:79:C3:96:EC
X509v3 Authority Key Identifier:
keyid:A5:97:44:2B:E2:52:94:9C:19:F9:D6:9F:7B:F6:A9:CD:DB:54:13:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/220391039701C79346B76FB10EAB6F4717EA71ED125CCFE9B95744CF0340C919/0/A597442BE252949C19F9D69F7BF6A9CDDB54134B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A597442BE252949C19F9D69F7BF6A9CDDB54134B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/220391039701C79346B76FB10EAB6F4717EA71ED125CCFE9B95744CF0340C919/0/323830313a3131613a3a2f34302d3430203d3e203134303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:11a::/40
Signature Algorithm: sha256WithRSAEncryption
7b:2b:d5:c4:d4:20:2d:1b:4a:5d:c3:7a:e2:1b:f9:76:fe:7e:
eb:c7:ae:c9:ec:89:7c:09:30:26:ad:31:61:ed:90:19:2a:c0:
fe:f2:ae:08:a1:96:fd:b7:d5:15:ed:5d:ca:ea:f7:4e:18:12:
b1:52:03:87:df:a1:34:b3:2b:3e:87:45:23:3e:cb:5c:e3:4e:
48:34:ae:8a:b2:2d:ef:37:d0:97:48:3f:ab:aa:55:66:39:38:
48:0e:9b:83:2a:e4:c1:83:e0:13:90:74:00:f3:03:09:e4:99:
33:46:4b:27:5f:a7:77:c9:50:4e:9f:6d:79:00:32:5d:5c:8c:
23:21:28:78:1a:eb:fe:bb:3e:c7:51:17:5b:d3:38:cb:f8:5b:
c8:5e:af:c4:71:93:de:8f:8a:e9:b2:c0:12:d0:24:3a:1a:c5:
0f:cc:3b:b4:af:eb:2d:d1:e5:bf:7a:bf:42:43:bc:7e:e6:8d:
f5:b6:55:77:70:ec:d0:54:21:b6:26:8c:30:4c:b1:18:b6:d6:
61:47:bc:ab:75:64:a8:8e:5e:43:d9:91:8d:a7:47:55:30:9d:
8c:41:a0:7d:e5:fa:01:af:5e:8c:76:c2:a6:c4:86:7b:57:6c:
f7:fe:01:d3:37:e0:d6:4d:ae:be:00:85:1f:bf:4e:5d:e5:68:
38:a4:eb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 18 19:48:37 2025 by rpki-client