Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a313061303a3a2f34342d3434203d3e203238343033.roa
File: 323830363a3337303a313061303a3a2f34342d3434203d3e203238343033.roa (raw, json)
Hash identifier: 2hHDjejG9fSvrVIBHjTEMa1rASGdCWSXr9At+RFHyzc=
Subject key identifier: 4A:04:38:EE:1A:E3:89:8F:78:9D:64:5F:69:48:73:69:22:2C:0D:16
Certificate issuer: /CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
Certificate serial: 527509B5A4304A0BE3CDB9026C5F777D657F5282
Authority key identifier: A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a313061303a3a2f34342d3434203d3e203238343033.roa
Signing time: Tue 20 May 2025 04:25:01 +0000
ROA not before: Tue 20 May 2025 04:20:01 +0000
ROA not after: Tue 19 May 2026 04:25:01 +0000
asID: 28403
IP address blocks: 2806:370:10a0::/44 maxlen: 44
Validation: Failed, certificate revoked on Fri 23 May 2025 04:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:75:09:b5:a4:30:4a:0b:e3:cd:b9:02:6c:5f:77:7d:65:7f:52:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
Validity
Not Before: May 20 04:20:01 2025 GMT
Not After : May 19 04:25:01 2026 GMT
Subject: CN=4A0438EE1AE3898F789D645F69487369222C0D16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c1:a6:4e:8a:56:02:f9:0d:f5:a1:79:c8:6e:
28:4a:0d:3c:17:99:21:ee:71:29:48:7a:0f:59:51:
98:1e:f6:d8:c8:6f:7a:dc:91:0a:47:64:a8:e3:62:
ba:89:d7:09:ee:58:8e:b8:b7:b5:e5:62:65:8f:b8:
fb:18:ad:5b:d5:64:da:35:e3:82:f6:e0:b4:5d:a7:
ea:6f:92:a3:dd:c0:6e:00:0c:ba:fe:f2:cd:b3:55:
fe:08:f5:65:77:4b:31:3b:6d:d6:ce:55:6c:30:ae:
30:aa:d4:fc:f4:61:5f:05:1a:03:15:2f:db:dc:a5:
47:6b:2b:9d:1f:5a:17:3c:b7:ee:34:02:aa:b2:68:
2e:db:39:a3:2c:28:80:fc:16:45:2c:32:58:b1:37:
78:f0:07:b2:77:ce:8a:9e:76:df:e3:69:60:5d:ff:
8f:c5:5a:5a:02:e7:74:7c:c4:16:1f:02:d8:84:71:
2c:39:64:a4:02:06:d2:e7:41:24:fa:cb:d7:5e:8f:
37:bb:7e:4e:dc:65:7b:cb:93:93:20:5d:b4:06:2f:
9e:be:91:67:a1:56:0b:e6:ba:e4:7b:a6:f0:fe:09:
e0:9e:fa:d7:9f:e3:11:d6:5a:ef:b2:7f:ef:18:33:
d8:f0:2b:cc:98:2b:e0:dc:63:26:cc:02:0d:cd:ef:
d6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:04:38:EE:1A:E3:89:8F:78:9D:64:5F:69:48:73:69:22:2C:0D:16
X509v3 Authority Key Identifier:
keyid:A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a313061303a3a2f34342d3434203d3e203238343033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2806:370:10a0::/44
Signature Algorithm: sha256WithRSAEncryption
2e:d1:96:e5:3e:e0:7e:ed:e1:3d:e7:68:92:3e:02:9e:e6:f3:
b5:a9:0e:a5:d9:5b:0b:e9:bf:ca:08:10:cd:22:5b:dd:f3:83:
1d:11:d1:45:05:ce:0d:f2:40:45:f8:06:32:66:7f:fa:f5:f1:
1b:5d:f2:dd:c1:f0:16:2b:11:e7:e0:3f:95:ed:c9:7e:e2:7f:
e0:f3:25:ee:d0:1d:ab:58:b1:9b:e2:7a:61:f0:70:2b:1a:1b:
b4:91:e1:ff:4e:52:8d:ac:af:07:27:e1:27:f9:17:36:07:aa:
b7:45:c0:24:47:89:41:58:15:4c:41:50:f9:8d:f3:ba:90:8a:
55:7e:d4:b7:f5:b7:13:33:4f:51:94:f4:78:e3:6f:e9:10:5d:
4f:c1:0d:bb:47:0e:b9:cc:78:df:22:c2:6f:22:e4:51:fe:40:
61:46:ed:09:b9:09:d9:db:91:9f:5d:9c:1d:20:12:9b:b5:7c:
27:75:04:c5:4c:b8:b2:22:de:be:1c:84:7f:52:56:1d:2e:6b:
76:4c:e6:9a:37:87:07:83:7a:55:5b:7d:bc:1c:0a:24:62:6d:
2c:d8:02:1c:bb:a7:9b:80:ee:c9:bf:80:2e:1c:77:2c:49:f7:
b6:85:c2:b1:fe:3a:cb:56:1f:b3:3d:18:b3:f4:fd:78:0b:75:
48:a5:b4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 07:18:08 2025 by rpki-client