Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3138312e3233332e35312e302f32342d3234203d3e20323732303934.roa
File: 3138312e3233332e35312e302f32342d3234203d3e20323732303934.roa (raw, json)
Hash identifier: d2yKObd2Sk5qsFCm+IFV+y1xI7GbIMRfx9AGQQL+IPo=
Subject key identifier: C6:E6:EA:8F:26:E4:B1:18:F9:48:C9:48:55:33:A5:F2:53:00:0D:D2
Certificate issuer: /CN=906C41A68E3475138AF53A5B55627EDE35432068
Certificate serial: 2059539CC59171009F920BF9BAFFB863CF5B864E
Authority key identifier: 90:6C:41:A6:8E:34:75:13:8A:F5:3A:5B:55:62:7E:DE:35:43:20:68
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3138312e3233332e35312e302f32342d3234203d3e20323732303934.roa
Signing time: Tue 04 Feb 2025 18:02:22 +0000
ROA not before: Tue 04 Feb 2025 17:57:22 +0000
ROA not after: Tue 03 Feb 2026 18:02:22 +0000
asID: 272094
IP address blocks: 181.233.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Feb 2025 01:35:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:59:53:9c:c5:91:71:00:9f:92:0b:f9:ba:ff:b8:63:cf:5b:86:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=906C41A68E3475138AF53A5B55627EDE35432068
Validity
Not Before: Feb 4 17:57:22 2025 GMT
Not After : Feb 3 18:02:22 2026 GMT
Subject: CN=C6E6EA8F26E4B118F948C9485533A5F253000DD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:9b:7d:8c:5e:6f:48:cb:43:eb:03:7a:85:63:
34:63:1a:de:76:f7:3c:fd:25:c1:ce:78:30:b1:79:
28:ba:44:74:fa:ec:c7:5c:76:b0:c1:95:da:8b:14:
c7:b5:56:e1:70:a1:66:ae:51:04:1a:50:ca:65:9d:
b9:14:77:d6:59:34:32:9b:78:61:ac:23:56:49:7a:
80:92:d1:87:fa:db:7c:1f:49:98:08:2c:58:e6:a0:
03:7e:8f:19:74:dc:ae:a4:c3:b4:49:40:f1:ce:bd:
6c:89:9e:f5:ac:d0:c0:34:6d:00:e9:ac:aa:c5:a4:
2f:41:e1:e2:8c:7e:b5:49:e4:dd:ce:52:79:60:9e:
71:ed:d9:38:13:ad:5a:58:9b:06:de:f7:6e:5f:58:
22:07:98:f1:11:60:63:87:32:07:1c:aa:24:e5:7a:
59:21:83:5a:71:33:a0:71:ed:a4:c1:18:d4:ea:0e:
1e:f3:16:42:27:4c:9a:95:90:3f:b3:6a:a5:e2:37:
19:19:b2:55:40:cc:8a:ff:ec:49:b1:9a:c6:25:d7:
2a:60:81:37:df:d2:30:40:c0:a9:a1:16:32:d4:2a:
a2:92:94:66:08:26:c7:78:4c:50:7e:72:5f:8c:d3:
13:fb:3e:c1:59:12:4e:94:f6:57:03:87:59:41:94:
9e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E6:EA:8F:26:E4:B1:18:F9:48:C9:48:55:33:A5:F2:53:00:0D:D2
X509v3 Authority Key Identifier:
keyid:90:6C:41:A6:8E:34:75:13:8A:F5:3A:5B:55:62:7E:DE:35:43:20:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3138312e3233332e35312e302f32342d3234203d3e20323732303934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.233.51.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:04:75:ee:c8:aa:5c:7a:dd:1c:ca:bf:2d:ed:82:8d:eb:dc:
0a:50:65:6c:df:2b:27:16:af:93:a0:42:3e:bf:a8:3e:58:23:
84:e4:48:76:d4:b5:63:aa:a3:14:d0:fe:70:e7:71:3a:d2:5e:
f7:fb:cd:d5:fa:cc:e5:2d:bc:10:18:b2:ab:e1:f4:22:96:5e:
76:73:63:d1:f1:11:32:5f:81:00:57:2c:8d:00:87:aa:e5:4c:
80:90:e2:41:7f:c3:5f:69:d0:a1:02:0d:ba:ca:bd:36:64:35:
ed:05:05:b0:d0:01:a6:b5:0c:05:9f:c8:9d:4e:83:79:2e:e7:
74:37:ea:57:7d:b3:e8:46:26:03:1d:1d:23:88:a4:69:3f:ca:
04:f9:e7:e4:69:77:6e:74:12:b6:91:56:3c:ed:d4:ed:81:61:
29:20:ea:ed:44:64:36:c8:45:0e:26:da:c6:c1:57:b6:69:21:
85:68:5b:3f:84:5c:79:9b:58:88:40:12:40:9f:5b:00:0a:63:
15:39:53:7f:c9:8c:eb:1a:88:ed:b3:86:cf:9e:85:92:b1:18:
87:c4:35:12:67:97:5b:ad:bc:de:96:6d:a6:0c:e0:fd:ba:4f:
bb:e0:86:33:66:1d:49:bd:a9:77:a7:a9:5a:46:b3:ee:99:83:
d0:a9:e3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:44:01 2025 by rpki-client