Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a323233303a3a2f34342d3434203d3e203238343033.roa
File: 323830363a3337303a323233303a3a2f34342d3434203d3e203238343033.roa (raw, json)
Hash identifier: sfl3hn/+OZ0ojkY/+E+EqMJRNVUjMfz5/lOhv3ydPWE=
Subject key identifier: 18:14:0B:76:85:0A:F8:39:17:F4:ED:95:91:F2:78:BE:04:82:51:0B
Certificate issuer: /CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
Certificate serial: 1D0D92695BA0947D9665A03399D7A09F53C621F8
Authority key identifier: A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a323233303a3a2f34342d3434203d3e203238343033.roa
Signing time: Thu 22 May 2025 04:20:00 +0000
ROA not before: Thu 22 May 2025 04:15:00 +0000
ROA not after: Thu 21 May 2026 04:20:00 +0000
asID: 28403
IP address blocks: 2806:370:2230::/44 maxlen: 44
Validation: Failed, certificate revoked on Fri 23 May 2025 04:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:0d:92:69:5b:a0:94:7d:96:65:a0:33:99:d7:a0:9f:53:c6:21:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0A6C878C4FF92E87C217B2CFAA02D0A995D0496
Validity
Not Before: May 22 04:15:00 2025 GMT
Not After : May 21 04:20:00 2026 GMT
Subject: CN=18140B76850AF83917F4ED9591F278BE0482510B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:99:bf:cb:76:5b:e2:0f:db:8d:cd:00:75:48:
40:b4:6d:0c:5b:22:9d:f1:46:b1:30:a9:8f:78:b6:
4e:ca:d5:eb:7e:81:f0:62:3a:d8:e7:4e:e4:c0:91:
da:e4:58:34:b5:86:76:11:38:a2:e0:a3:a6:56:99:
b1:1d:d3:90:4a:72:c6:de:4c:28:bc:d7:7e:20:30:
a1:2b:ac:96:3f:58:e3:4e:33:36:7c:6d:a5:f8:61:
5d:27:3c:ce:f3:53:7d:e4:01:d9:b2:27:99:12:a9:
1d:02:53:7a:22:01:9c:be:e4:93:24:fe:9f:a1:d9:
59:e0:32:fd:80:57:38:61:30:a1:5d:19:6c:ab:42:
eb:41:e4:88:53:83:9b:bd:5d:91:05:55:1c:9b:04:
1b:67:be:91:18:37:6d:79:4d:65:fd:cf:2d:7f:5b:
2a:21:6a:86:3d:a3:f2:29:7e:89:cc:9a:0c:35:19:
f4:ca:33:6f:1f:e3:bd:eb:a7:46:6b:c4:8a:8d:a3:
b7:7a:d1:a2:1b:0b:da:d1:e0:56:5e:1f:51:3c:8c:
a9:a2:c9:d5:d2:4e:bd:33:bf:d5:6c:32:d3:14:3e:
b2:eb:c3:d1:0b:cf:a1:8d:d4:8f:37:58:2a:95:9c:
2d:4c:f0:97:a5:d4:f0:1a:e6:fc:82:a4:6f:27:90:
db:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:14:0B:76:85:0A:F8:39:17:F4:ED:95:91:F2:78:BE:04:82:51:0B
X509v3 Authority Key Identifier:
keyid:A0:A6:C8:78:C4:FF:92:E8:7C:21:7B:2C:FA:A0:2D:0A:99:5D:04:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0A6C878C4FF92E87C217B2CFAA02D0A995D0496.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44F0982C6F950B9DDB1971CA7C58D4C69015CE120520A97C908513AE5C34CAEF/0/323830363a3337303a323233303a3a2f34342d3434203d3e203238343033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2806:370:2230::/44
Signature Algorithm: sha256WithRSAEncryption
79:8f:58:5a:8f:87:68:67:9c:89:da:cd:61:84:ea:d9:06:d1:
91:be:e4:00:49:fa:f9:db:d5:95:6b:11:14:3f:d6:31:0b:df:
8f:79:d2:0b:9d:69:e1:b2:8e:dd:01:92:5e:ee:b3:44:ce:78:
0d:95:bc:a5:7e:18:0e:34:0a:24:36:3d:45:9c:a4:8a:96:77:
9c:ae:47:69:44:79:d1:8f:2c:3e:d4:c0:60:4c:00:f8:3a:27:
0c:c0:04:6d:10:5f:84:a2:d7:5c:72:1a:d6:b8:c2:b8:10:bd:
ad:42:0a:05:5b:ff:52:c7:cd:ec:fb:07:82:f6:b5:58:f2:c9:
53:c9:d5:23:a1:26:0d:ed:97:fd:7e:bf:3d:7c:38:fe:a4:63:
0f:4c:b9:04:84:d7:48:c1:84:ae:02:13:1c:0a:9c:db:30:93:
50:d1:f7:71:3a:b0:2d:c9:9b:a9:bf:7d:f1:1a:7f:8c:2c:d4:
b8:90:7e:6b:a8:ad:14:b4:e2:06:70:57:cc:af:fe:5b:ed:78:
c3:1f:8a:4b:0c:c3:a8:5a:34:70:c9:8e:33:df:5f:2a:70:56:
f1:f7:cf:c6:a5:95:a7:eb:ea:a0:8d:2c:db:2e:6d:fa:ff:2e:
48:fa:b4:60:47:ca:5a:2d:17:a3:3e:65:d8:2b:5b:10:f6:49:
89:14:c9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 21:25:07 2025 by rpki-client