Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2654899E3AEBC24ECCCB616D423DFC72FCA36F3D085B62709A16ECB0749B8362/0/34352e3138312e3132342e302f32322d3234203d3e20323733303130.roa
File: 34352e3138312e3132342e302f32322d3234203d3e20323733303130.roa (raw, json)
Hash identifier: ojzAp1ccmJOdxM2jVjBRn/2cA1EGwuRf/rvoY2t8NRk=
Subject key identifier: FA:38:84:14:1C:32:56:5E:1A:67:A5:9D:59:7D:88:E8:6A:BA:6F:6A
Certificate issuer: /CN=7A76D5FEAA7561D126D8C20EB9D065AA9852B696
Certificate serial: 3F8AFED81FBCF831853CC4077495B06C5DC0EED0
Authority key identifier: 7A:76:D5:FE:AA:75:61:D1:26:D8:C2:0E:B9:D0:65:AA:98:52:B6:96
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7A76D5FEAA7561D126D8C20EB9D065AA9852B696.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2654899E3AEBC24ECCCB616D423DFC72FCA36F3D085B62709A16ECB0749B8362/0/34352e3138312e3132342e302f32322d3234203d3e20323733303130.roa
Signing time: Fri 16 May 2025 07:05:00 +0000
ROA not before: Fri 16 May 2025 07:00:00 +0000
ROA not after: Fri 15 May 2026 07:05:00 +0000
asID: 273010
IP address blocks: 45.181.124.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 May 2025 17:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:8a:fe:d8:1f:bc:f8:31:85:3c:c4:07:74:95:b0:6c:5d:c0:ee:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A76D5FEAA7561D126D8C20EB9D065AA9852B696
Validity
Not Before: May 16 07:00:00 2025 GMT
Not After : May 15 07:05:00 2026 GMT
Subject: CN=FA3884141C32565E1A67A59D597D88E86ABA6F6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cf:e1:1c:3b:db:c1:1d:6f:bb:46:f1:4e:3c:
8a:7e:60:bc:76:44:8d:42:9b:8e:65:cf:9b:67:db:
c6:50:26:55:d7:0d:fb:2a:54:da:0f:3e:4b:91:5c:
d7:56:01:77:7e:a4:71:e6:3a:49:e2:88:ee:22:03:
79:fe:2b:a6:e7:27:52:f6:8b:89:88:3c:2b:72:bc:
c0:d4:35:91:db:0e:9e:5c:82:4e:07:5d:14:09:e2:
07:f4:42:88:b7:1f:46:b3:a1:0a:7d:37:ed:0b:d1:
f5:f1:7d:2c:88:18:55:93:7c:a7:39:62:fd:fb:3d:
ad:5b:83:1e:49:bb:68:e2:be:82:d4:00:42:7c:c9:
e1:b1:61:84:5e:8b:e1:f6:3f:99:84:e2:88:2a:dd:
78:be:c5:8c:9a:33:17:b4:2d:d1:d2:82:54:ea:df:
9b:b3:af:77:0f:90:a7:18:27:17:8b:aa:22:1d:31:
8a:13:00:bd:67:e9:d5:99:70:3e:8f:e9:dd:85:70:
a5:16:6a:9a:19:4f:2e:42:ee:6d:5b:e4:32:de:5f:
6a:c7:97:26:7d:d1:2b:8d:16:5d:8b:b4:b9:57:6d:
57:47:57:9f:a1:7f:e3:3a:3e:67:be:4c:ca:b3:27:
ae:1d:33:ae:6c:be:4d:3b:f9:4e:02:46:ef:1e:a9:
7f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:38:84:14:1C:32:56:5E:1A:67:A5:9D:59:7D:88:E8:6A:BA:6F:6A
X509v3 Authority Key Identifier:
keyid:7A:76:D5:FE:AA:75:61:D1:26:D8:C2:0E:B9:D0:65:AA:98:52:B6:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2654899E3AEBC24ECCCB616D423DFC72FCA36F3D085B62709A16ECB0749B8362/0/7A76D5FEAA7561D126D8C20EB9D065AA9852B696.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7A76D5FEAA7561D126D8C20EB9D065AA9852B696.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2654899E3AEBC24ECCCB616D423DFC72FCA36F3D085B62709A16ECB0749B8362/0/34352e3138312e3132342e302f32322d3234203d3e20323733303130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.181.124.0/22
Signature Algorithm: sha256WithRSAEncryption
01:c2:fe:79:11:32:6f:6f:db:8f:c7:36:56:8b:19:4f:d7:96:
13:f8:c1:15:45:b8:9e:a2:d9:39:d6:f2:a3:60:d3:a7:aa:02:
0d:8b:71:d7:a7:df:c5:33:7e:48:0a:56:f9:70:9a:1d:9f:8d:
04:f1:83:b5:92:c8:ed:f0:91:8a:02:3a:fc:80:77:4c:1a:09:
dd:91:33:bb:f0:5e:69:aa:31:80:10:b7:ee:76:92:24:6f:88:
ec:f7:1c:d1:50:73:6f:dc:4b:91:bc:48:64:ea:8c:70:54:2b:
21:83:78:e0:20:00:0f:b0:b2:31:17:11:27:2e:40:1c:ac:70:
3a:8d:6d:e9:fa:0a:88:c5:89:3f:9c:cc:a4:31:e7:1e:33:6e:
46:3c:94:32:66:37:f8:ad:98:e9:15:66:61:16:f5:97:7d:cd:
15:d6:50:e5:c7:d1:72:e3:dd:3c:69:a9:f9:42:ad:8c:a2:48:
7d:34:c6:15:d1:ee:e1:fd:d6:81:2b:75:d4:77:e7:10:46:c2:
72:f2:a1:2e:2a:27:03:8e:fe:bb:eb:9d:5a:ef:8f:80:1f:9b:
3c:0a:b6:da:a4:bd:bb:5b:46:de:72:b8:0a:7d:22:a7:bc:1f:
d5:ca:15:60:91:e7:58:27:4d:db:69:01:8e:6d:aa:ab:92:23:
30:b5:c2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 03:10:09 2025 by rpki-client