Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/34352e3137302e3133322e302f32342d3234203d3e20323635353534.roa
File: 34352e3137302e3133322e302f32342d3234203d3e20323635353534.roa (raw, json)
Hash identifier: IjfAhVKy0evJFyFAYt877oUW94rXUp/6OiXP3ryUW9w=
Subject key identifier: B2:C3:1E:FB:7B:A6:80:D4:F5:F8:76:E6:10:00:6B:CB:79:A0:9A:FC
Certificate issuer: /CN=643132A8FE5198797F39AACB314EC77EE8C6D84D
Certificate serial: 67A0D55CF21118B00D685A94AE24D7E33959851B
Authority key identifier: 64:31:32:A8:FE:51:98:79:7F:39:AA:CB:31:4E:C7:7E:E8:C6:D8:4D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/34352e3137302e3133322e302f32342d3234203d3e20323635353534.roa
Signing time: Tue 04 Feb 2025 18:51:58 +0000
ROA not before: Tue 04 Feb 2025 18:46:58 +0000
ROA not after: Tue 03 Feb 2026 18:51:58 +0000
asID: 265554
IP address blocks: 45.170.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Mar 2025 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:a0:d5:5c:f2:11:18:b0:0d:68:5a:94:ae:24:d7:e3:39:59:85:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=643132A8FE5198797F39AACB314EC77EE8C6D84D
Validity
Not Before: Feb 4 18:46:58 2025 GMT
Not After : Feb 3 18:51:58 2026 GMT
Subject: CN=B2C31EFB7BA680D4F5F876E610006BCB79A09AFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b4:d2:29:0d:77:f7:0c:52:5e:75:8e:76:a3:
b7:ea:67:c4:31:7f:86:ae:f6:12:a9:a1:a7:3f:5e:
3d:96:3e:95:3a:e2:42:c7:47:bf:16:11:8d:ec:d2:
77:13:5e:67:a9:d6:aa:1a:0e:39:51:22:5c:1d:ed:
ab:be:d5:db:2a:c1:d7:7b:ef:3f:c3:f9:ce:08:6f:
1e:f0:af:63:30:36:1d:45:b1:4c:99:24:3c:81:cd:
61:c6:d7:4f:63:39:3f:bc:da:35:ca:59:8e:9a:0b:
6c:9c:90:07:7a:0a:59:e4:68:69:47:ac:69:bd:e2:
6f:f4:2b:cc:16:b6:71:6c:b7:e5:1f:57:d6:d1:46:
d9:7d:9c:36:24:10:10:83:b7:f6:99:56:30:06:e8:
25:60:9a:fa:30:39:a4:da:ce:98:55:5e:14:30:59:
13:27:2c:4b:db:dc:cf:ec:32:9d:f3:76:43:93:8f:
44:5d:6f:2e:41:1e:ac:11:e7:71:c5:aa:14:a6:18:
48:cb:23:df:7f:71:9b:db:20:e2:43:22:71:d6:0a:
62:96:04:92:8c:0b:04:55:73:55:c8:c7:ec:09:86:
4b:5c:9e:ef:2d:b8:e1:c3:1e:71:99:01:f6:39:34:
89:13:a4:c2:28:a7:67:27:4e:93:bd:2c:96:1f:19:
43:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C3:1E:FB:7B:A6:80:D4:F5:F8:76:E6:10:00:6B:CB:79:A0:9A:FC
X509v3 Authority Key Identifier:
keyid:64:31:32:A8:FE:51:98:79:7F:39:AA:CB:31:4E:C7:7E:E8:C6:D8:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/34352e3137302e3133322e302f32342d3234203d3e20323635353534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.170.132.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:3f:83:93:6a:93:40:26:0b:92:98:b2:02:5f:70:e3:3a:61:
aa:b5:d0:6d:ee:8a:97:7d:96:8c:8c:ab:a7:c5:81:96:a7:10:
7e:06:1e:be:19:cb:73:00:d6:b9:f6:89:b2:e3:26:38:af:4d:
62:60:4b:32:9d:ff:ef:e5:df:0f:6d:a8:17:de:74:b2:ba:4b:
d7:ce:16:b4:22:5c:c7:f0:fd:29:cc:6e:7f:87:90:5e:95:2b:
e5:f5:91:53:31:93:ab:2e:95:e6:2c:21:18:d3:8e:4f:ec:02:
b7:4b:31:2b:8e:e9:26:8d:3d:2d:a8:f7:02:c3:39:30:2e:0b:
86:b5:5c:10:fc:88:c0:f8:7f:2a:5c:0e:82:e4:e4:d4:fb:68:
ce:d5:fc:e0:ec:2f:33:1b:7c:26:59:dd:5e:77:15:2c:9a:eb:
91:03:45:08:bf:4e:e6:07:f7:cf:45:7f:fb:4d:29:24:e4:bf:
ea:26:38:8d:1f:77:34:9f:3c:4c:6f:29:b1:26:cc:40:9e:e3:
72:7f:82:40:db:49:cd:d5:69:4b:17:0c:35:9e:8a:a6:68:c6:
19:89:cb:c4:62:56:c4:f2:f9:63:94:78:30:1e:d7:25:0e:6d:
bf:d3:39:64:9b:27:fa:f7:8b:3f:4d:45:ee:61:22:2f:f7:42:
fd:f8:83:41
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUZ6DVXPIRGLANaFqUriTX4zlZhRswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQzMTMyQThGRTUxOTg3OTdGMzlBQUNCMzE0RUM3N0VF
OEM2RDg0RDAeFw0yNTAyMDQxODQ2NThaFw0yNjAyMDMxODUxNThaMDMxMTAvBgNV
BAMTKEIyQzMxRUZCN0JBNjgwRDRGNUY4NzZFNjEwMDA2QkNCNzlBMDlBRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYtNIpDXf3DFJedY52o7fqZ8Qx
f4au9hKpoac/Xj2WPpU64kLHR78WEY3s0ncTXmep1qoaDjlRIlwd7au+1dsqwdd7
7z/D+c4Ibx7wr2MwNh1FsUyZJDyBzWHG109jOT+82jXKWY6aC2yckAd6ClnkaGlH
rGm94m/0K8wWtnFst+UfV9bRRtl9nDYkEBCDt/aZVjAG6CVgmvowOaTazphVXhQw
WRMnLEvb3M/sMp3zdkOTj0Rdby5BHqwR53HFqhSmGEjLI99/cZvbIOJDInHWCmKW
BJKMCwRVc1XIx+wJhktcnu8tuOHDHnGZAfY5NIkTpMIop2cnTpO9LJYfGUMxAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUssMe+3umgNT1+HbmEABry3mgmvwwHwYDVR0j
BBgwFoAUZDEyqP5RmHl/OarLMU7HfujG2E0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yMkMyMkEwNzY0RTRDRDQ1ODRFNDMwNTk1MTM3NjNFOTQz
MzY1QzkzMDUwNDVFRkIzMDFGNTE1NDczNTBBNTQwLzAvNjQzMTMyQThGRTUxOTg3
OTdGMzlBQUNCMzE0RUM3N0VFOEM2RDg0RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NDMxMzJBOEZFNTE5ODc5N0Yz
OUFBQ0IzMTRFQzc3RUU4QzZEODRELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjJDMjJBMDc2NEU0Q0Q0NTg0RTQzMDU5NTEzNzYzRTk0MzM2NUM5MzA1
MDQ1RUZCMzAxRjUxNTQ3MzUwQTU0MC8wLzM0MzUyZTMxMzczMDJlMzEzMzMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1MzUzNTM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALaqE
MA0GCSqGSIb3DQEBCwUAA4IBAQBqP4OTapNAJguSmLICX3DjOmGqtdBt7oqXfZaM
jKunxYGWpxB+Bh6+GctzANa59omy4yY4r01iYEsynf/v5d8PbagX3nSyukvXzha0
IlzH8P0pzG5/h5BelSvl9ZFTMZOrLpXmLCEY045P7AK3SzErjukmjT0tqPcCwzkw
LguGtVwQ/IjA+H8qXA6C5OTU+2jO1fzg7C8zG3wmWd1edxUsmuuRA0UIv07mB/fP
RX/7TSkk5L/qJjiNH3c0nzxMbymxJsxAnuNyf4JA20nN1WlLFww1noqmaMYZicvE
YlbE8vljlHgwHtclDm2/0zlkmyf694s/TUXuYSIv90L9+INB
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:38:31 2025 by rpki-client