Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/34352e3137302e3235342e302f32342d3234203d3e203233343730.roa
File: 34352e3137302e3235342e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier: yl4YZ8Jntc7o5vDNndX7muHnnUwPA0D5WzCj//NnxZA=
Subject key identifier: 66:CA:28:98:C7:68:49:A6:D6:3D:5B:E1:E8:EE:EE:6E:BE:5B:E0:61
Certificate issuer: /CN=6A86E783E5047079A17A5B8082BB89DADBE252A6
Certificate serial: 1D1E160D1002C345FDDDF5148FF25CD2A3B7F8D7
Authority key identifier: 6A:86:E7:83:E5:04:70:79:A1:7A:5B:80:82:BB:89:DA:DB:E2:52:A6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/34352e3137302e3235342e302f32342d3234203d3e203233343730.roa
Signing time: Mon 02 Dec 2024 07:05:00 +0000
ROA not before: Mon 02 Dec 2024 07:00:00 +0000
ROA not after: Mon 01 Dec 2025 07:05:00 +0000
asID: 23470
IP address blocks: 45.170.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 26 Jan 2025 01:50:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:1e:16:0d:10:02:c3:45:fd:dd:f5:14:8f:f2:5c:d2:a3:b7:f8:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A86E783E5047079A17A5B8082BB89DADBE252A6
Validity
Not Before: Dec 2 07:00:00 2024 GMT
Not After : Dec 1 07:05:00 2025 GMT
Subject: CN=66CA2898C76849A6D63D5BE1E8EEEE6EBE5BE061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e3:99:b4:98:30:49:fd:9c:69:3f:69:03:05:
41:03:f2:09:90:6c:1e:0c:65:e4:4c:c8:e9:9b:17:
c8:bd:1f:60:71:9c:80:40:da:69:3d:a8:74:a3:6f:
cf:c0:6d:54:0d:1b:e4:da:2d:84:18:11:fc:27:8a:
2a:ee:e5:4b:cc:eb:c2:23:6d:c6:f5:f0:15:7e:14:
ec:2d:1c:6e:78:f8:2a:65:e8:d7:c7:46:3c:a3:15:
ce:58:1f:7e:ad:e2:57:85:e7:47:8e:c8:e4:db:f8:
14:23:ba:6b:ec:f3:cd:f5:41:5a:02:11:19:b0:7b:
dc:dc:e9:47:b2:ee:ba:58:ef:de:bc:fc:a4:50:3f:
96:c3:ce:5b:09:7a:c8:fb:95:d0:b0:66:d2:d3:ca:
f5:20:25:a2:cf:d2:fb:b8:c1:0f:3d:94:d8:66:b7:
9c:61:47:49:80:f1:77:af:95:4e:79:2c:33:bc:7d:
e8:87:c8:e7:68:49:f5:e9:d8:28:6d:88:ec:c1:89:
4a:9a:82:00:a3:62:7d:de:72:96:8c:c3:9d:ba:7c:
b6:18:2c:a7:56:95:14:c0:ad:b1:4b:0c:cf:3d:57:
28:8d:8b:4a:ed:a2:3d:4f:9f:3c:5a:bc:0f:48:1f:
c6:49:14:a2:92:14:a8:29:67:b3:d7:a5:87:2c:77:
a8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CA:28:98:C7:68:49:A6:D6:3D:5B:E1:E8:EE:EE:6E:BE:5B:E0:61
X509v3 Authority Key Identifier:
keyid:6A:86:E7:83:E5:04:70:79:A1:7A:5B:80:82:BB:89:DA:DB:E2:52:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/34352e3137302e3235342e302f32342d3234203d3e203233343730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.170.254.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:0b:cd:99:20:46:65:91:be:ea:ea:86:3e:61:57:f5:52:5a:
8c:b1:62:78:b1:7f:74:41:e0:95:ae:ab:47:f9:03:5e:52:f0:
0b:f6:32:ea:2b:f5:11:c0:70:39:4e:88:f5:a1:5f:5a:c6:05:
25:3b:ed:0b:21:1f:fc:53:bb:4d:1c:10:e5:9b:a0:bf:a5:ff:
cb:37:ce:62:86:27:19:e5:ee:05:3b:bc:9d:d5:12:a1:b2:f8:
5d:9b:ab:1d:38:6e:26:8d:e3:e2:75:fe:0e:c2:08:0e:29:d5:
21:f7:b5:75:b5:1c:da:46:47:c5:90:3a:59:58:0d:e5:2a:9e:
10:89:aa:0d:7c:70:85:e5:33:ae:88:cd:7f:70:27:00:b1:82:
c4:a5:a5:cf:1a:3c:a4:f0:80:82:1b:e6:a5:04:81:10:6f:6c:
d2:4b:20:af:ac:21:ab:94:e3:97:e6:ab:f4:32:d5:f1:e9:0e:
9a:0e:c9:b2:e9:ae:90:f1:d2:57:94:7c:8a:01:bf:4a:02:83:
01:10:0e:b1:b3:ab:9f:1f:24:c7:e5:04:7c:43:ef:6f:88:fb:
b6:2d:1c:ce:48:21:53:58:01:f4:f3:51:60:34:9f:08:4d:b7:
a3:f8:f0:5d:50:0f:c2:38:2d:b2:4b:3d:76:74:bf:e4:7f:d5:
ee:75:0c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:54:08 2025 by rpki-client