Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a313065303a3a2f34342d3434203d3e203238343033.roa
File: 323830363a3337303a313065303a3a2f34342d3434203d3e203238343033.roa (raw, json)
Hash identifier: bQIYtIVq7UU3CYCWZotS+3OiNEPeCdcQKIx9HdbQnBo=
Subject key identifier: C8:AF:E6:17:FD:6C:30:6D:F0:B8:7E:9F:6C:68:49:6D:2E:ED:05:86
Certificate issuer: /CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
Certificate serial: 1F51F6DC93D2BA1960E92FAB592065A1D81426AA
Authority key identifier: A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a313065303a3a2f34342d3434203d3e203238343033.roa
Signing time: Tue 20 May 2025 04:30:00 +0000
ROA not before: Tue 20 May 2025 04:25:00 +0000
ROA not after: Tue 19 May 2026 04:30:00 +0000
asID: 28403
IP address blocks: 2806:370:10e0::/44 maxlen: 44
Validation: Failed, certificate revoked on Fri 23 May 2025 04:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:51:f6:dc:93:d2:ba:19:60:e9:2f:ab:59:20:65:a1:d8:14:26:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
Validity
Not Before: May 20 04:25:00 2025 GMT
Not After : May 19 04:30:00 2026 GMT
Subject: CN=C8AFE617FD6C306DF0B87E9F6C68496D2EED0586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:55:fa:b2:54:53:a4:3d:e2:fa:d0:32:07:8a:
a0:80:80:be:ae:cd:7c:6b:6f:99:20:7f:58:68:e9:
4d:f5:1f:63:7b:67:f6:84:ce:87:b7:fa:05:d3:05:
e9:9e:07:0e:03:f2:12:f8:91:71:0f:ce:96:3e:9d:
f9:3b:20:cc:4e:34:f1:ec:6c:50:90:3a:45:07:5c:
33:51:ad:b3:a0:0f:5a:a0:23:ba:c4:92:e9:8c:9a:
8f:61:76:69:13:1c:c2:22:fc:a2:0d:5e:59:ce:7a:
16:1f:07:98:c9:4b:fd:b5:88:ba:92:8d:51:0e:84:
9d:e8:86:93:dc:c7:6d:ac:15:9d:d2:a5:df:d5:4f:
86:28:6b:7b:b7:33:fe:60:8f:d6:bc:f2:f3:18:d2:
a4:76:8e:a9:b5:2c:53:af:e8:ee:11:45:53:0e:33:
f6:d2:fa:85:28:95:39:9d:d7:cf:8d:b3:35:1f:19:
fd:93:09:3c:a5:e3:2a:c9:54:70:1d:0e:b6:81:37:
25:e3:cc:15:9a:87:a9:5e:d2:0a:62:7d:18:5f:d0:
5c:30:41:bf:93:11:cc:32:0f:e9:5f:14:d0:11:c9:
29:89:9b:c2:21:83:ef:33:63:8b:3c:b3:46:d5:29:
c8:fe:bb:cf:f7:17:c8:72:f6:96:db:46:09:43:07:
5c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AF:E6:17:FD:6C:30:6D:F0:B8:7E:9F:6C:68:49:6D:2E:ED:05:86
X509v3 Authority Key Identifier:
keyid:A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a313065303a3a2f34342d3434203d3e203238343033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2806:370:10e0::/44
Signature Algorithm: sha256WithRSAEncryption
4c:f0:7c:a7:1c:7d:ff:42:b4:64:72:5a:7b:bb:ee:bb:2d:b5:
28:af:24:8b:47:87:20:46:41:20:9b:51:7e:81:86:88:c2:bb:
d3:df:68:42:43:34:b4:7c:48:cd:b8:4f:e3:d4:1a:0f:cd:f8:
76:11:9f:1e:eb:71:9f:6b:1f:b4:ca:c0:b0:ef:f5:56:0f:17:
3a:16:70:e2:30:81:f2:62:94:71:da:03:f0:c2:7a:c4:ac:ee:
94:13:0c:64:a1:a0:e1:3c:bb:33:26:d6:9e:0c:70:ae:d9:57:
bf:92:53:fa:1b:a2:7e:77:01:c9:ce:ad:ff:e2:da:40:50:2a:
50:1e:61:a8:d0:62:15:e0:6c:8e:d6:3a:44:79:dd:76:ea:d9:
05:0c:3a:b8:c4:fd:49:48:0a:ae:d0:6d:89:8b:e4:da:4d:a4:
5d:83:1a:32:7e:24:68:e3:75:5d:54:7a:aa:70:96:4d:06:b1:
fc:04:63:46:b3:68:d0:9f:61:44:04:0a:7c:ad:86:1d:8c:43:
4d:67:77:5b:18:d0:67:7c:63:8a:89:ca:82:bb:51:a3:d7:ef:
f9:5a:6b:2e:08:b1:a1:f6:37:4c:b0:d1:d4:18:24:d1:f5:57:
cb:ea:25:a3:77:65:89:91:9f:20:d1:07:b6:e1:c9:63:58:2f:
1a:5b:1c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 02:35:23 2025 by rpki-client