![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230372e3234382e36342e302f32342d3234203d3e203535303032.roa
File: 3230372e3234382e36342e302f32342d3234203d3e203535303032.roa (raw, json)
Hash identifier: LNxC+l6iZ2PorsYU11BYXytK+OXu3sv6LtqvRMyS6yI=
Subject key identifier: 26:38:CB:6E:AA:7A:D0:03:63:52:3A:B0:02:F9:86:2C:FA:BA:1E:AA
Certificate issuer: /CN=55E5523033B41B7E990D9D490339137189366F33
Certificate serial: 0BE60B871D46B3CB41D3AC6B405FB415E3D3453A
Authority key identifier: 55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230372e3234382e36342e302f32342d3234203d3e203535303032.roa
Signing time: Fri 26 Apr 2024 23:10:00 +0000
ROA not before: Fri 26 Apr 2024 23:05:00 +0000
ROA not after: Fri 25 Apr 2025 23:10:00 +0000
asID: 55002
IP address blocks: 207.248.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Jan 2025 17:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:e6:0b:87:1d:46:b3:cb:41:d3:ac:6b:40:5f:b4:15:e3:d3:45:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55E5523033B41B7E990D9D490339137189366F33
Validity
Not Before: Apr 26 23:05:00 2024 GMT
Not After : Apr 25 23:10:00 2025 GMT
Subject: CN=2638CB6EAA7AD00363523AB002F9862CFABA1EAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:95:d2:b0:02:7a:5d:16:09:0e:4b:39:53:d0:
6e:df:78:2d:83:84:66:78:f9:38:48:1a:b2:33:c6:
88:0c:23:f0:38:3b:d0:cc:bf:ed:08:d9:ab:13:40:
24:7f:4b:9a:71:bb:fb:70:a4:ce:40:24:10:e9:2f:
b3:c6:6c:a2:18:b1:a1:3f:89:7c:bc:8f:5a:d4:4e:
1a:ce:ff:8c:82:a3:3b:4a:69:b2:89:b7:fd:ac:87:
bb:fa:f3:fb:6f:35:10:ca:27:83:5f:8d:e3:40:9c:
97:76:9d:13:db:77:68:45:d0:67:a9:1f:c2:bc:6d:
31:0a:c2:8e:06:ac:94:8a:49:18:7f:e3:51:73:ec:
47:2f:d0:05:8d:b8:e9:d0:ff:d3:6a:c1:c3:f2:2e:
ac:34:d4:7a:8d:f2:8c:d5:1e:e3:e8:47:b2:ad:e9:
38:12:22:94:e6:25:2c:c9:fa:24:2c:0f:22:f8:c7:
37:f7:5a:24:48:ce:b8:30:b8:d0:89:91:53:79:dd:
c4:fb:f9:66:24:ba:4a:e8:75:03:19:5f:73:b8:e7:
9c:e8:79:7d:f4:1e:f3:e8:d7:53:86:43:6b:40:1d:
f5:f6:a7:61:7a:18:a7:2b:cd:4c:a1:d4:a6:c9:c0:
d2:fa:ce:df:77:96:5a:c7:8d:e9:1b:26:a8:38:06:
d2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:38:CB:6E:AA:7A:D0:03:63:52:3A:B0:02:F9:86:2C:FA:BA:1E:AA
X509v3 Authority Key Identifier:
keyid:55:E5:52:30:33:B4:1B:7E:99:0D:9D:49:03:39:13:71:89:36:6F:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/55E5523033B41B7E990D9D490339137189366F33.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55E5523033B41B7E990D9D490339137189366F33.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B4531BAA384EF4D91078C105290C4F0FBC052138FC9B21E7D912FBE9AA8A7F0/0/3230372e3234382e36342e302f32342d3234203d3e203535303032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.248.64.0/24
Signature Algorithm: sha256WithRSAEncryption
67:82:69:7b:0f:b5:0f:73:ab:f2:8b:71:5d:5b:a3:49:28:36:
c4:f8:33:46:2a:57:13:8a:c3:f1:be:78:bd:99:5f:5a:62:60:
79:00:2d:11:1a:40:0d:8d:67:b9:50:4b:2c:e0:a1:c4:b7:e6:
87:5d:0f:f0:7d:cf:b1:13:01:db:55:63:1c:2e:95:e9:08:44:
66:bb:6f:e5:6d:d1:27:67:d3:b9:b7:7c:a7:17:73:97:84:38:
f0:22:06:f5:64:22:15:c0:6e:fb:67:39:10:6e:5c:0a:18:fd:
8b:70:f0:fe:3a:80:df:15:cc:e4:36:cb:11:ff:40:73:b7:f0:
00:fc:6e:30:0d:62:04:9b:1f:f0:8a:01:f4:87:53:8e:a9:71:
d1:37:e4:65:f4:f3:39:79:7f:26:ad:40:33:b3:e0:d6:fa:a0:
be:85:f7:d3:ce:2e:97:ad:82:c2:fb:7f:97:32:4a:92:f2:b8:
8b:dc:ff:9b:8b:9e:13:7a:34:f1:44:fc:3f:fd:be:c6:c7:ea:
d3:14:19:48:29:77:aa:d5:d4:48:6a:71:38:1f:89:31:a7:34:
77:33:ae:0c:9c:49:aa:2f:91:b5:b2:6b:71:32:58:f0:69:56:
98:8c:74:7a:28:f4:ff:10:9d:01:90:fd:a3:7a:a2:ac:be:91:
37:92:f6:41
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUC+YLhx1Gs8tB06xrQF+0FePTRTowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTVFNTUyMzAzM0I0MUI3RTk5MEQ5RDQ5MDMzOTEzNzE4
OTM2NkYzMzAeFw0yNDA0MjYyMzA1MDBaFw0yNTA0MjUyMzEwMDBaMDMxMTAvBgNV
BAMTKDI2MzhDQjZFQUE3QUQwMDM2MzUyM0FCMDAyRjk4NjJDRkFCQTFFQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFldKwAnpdFgkOSzlT0G7feC2D
hGZ4+ThIGrIzxogMI/A4O9DMv+0I2asTQCR/S5pxu/twpM5AJBDpL7PGbKIYsaE/
iXy8j1rUThrO/4yCoztKabKJt/2sh7v68/tvNRDKJ4NfjeNAnJd2nRPbd2hF0Gep
H8K8bTEKwo4GrJSKSRh/41Fz7Ecv0AWNuOnQ/9NqwcPyLqw01HqN8ozVHuPoR7Kt
6TgSIpTmJSzJ+iQsDyL4xzf3WiRIzrgwuNCJkVN53cT7+WYkukrodQMZX3O455zo
eX30HvPo11OGQ2tAHfX2p2F6GKcrzUyh1KbJwNL6zt93llrHjekbJqg4BtIVAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUJjjLbqp60ANjUjqwAvmGLPq6HqowHwYDVR0j
BBgwFoAUVeVSMDO0G36ZDZ1JAzkTcYk2bzMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QjQ1MzFCQUEzODRFRjREOTEwNzhDMTA1MjkwQzRGMEZC
QzA1MjEzOEZDOUIyMUU3RDkxMkZCRTlBQThBN0YwLzAvNTVFNTUyMzAzM0I0MUI3
RTk5MEQ5RDQ5MDMzOTEzNzE4OTM2NkYzMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NUU1NTIzMDMzQjQxQjdFOTkw
RDlENDkwMzM5MTM3MTg5MzY2RjMzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0I0NTMxQkFBMzg0RUY0RDkxMDc4QzEwNTI5MEM0RjBGQkMwNTIxMzhG
QzlCMjFFN0Q5MTJGQkU5QUE4QTdGMC8wLzMyMzAzNzJlMzIzNDM4MmUzNjM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNTMwMzAzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAM/4QDAN
BgkqhkiG9w0BAQsFAAOCAQEAZ4Jpew+1D3Or8otxXVujSSg2xPgzRipXE4rD8b54
vZlfWmJgeQAtERpADY1nuVBLLOChxLfmh10P8H3PsRMB21VjHC6V6QhEZrtv5W3R
J2fTubd8pxdzl4Q48CIG9WQiFcBu+2c5EG5cChj9i3Dw/jqA3xXM5DbLEf9Ac7fw
APxuMA1iBJsf8IoB9IdTjqlx0TfkZfTzOXl/Jq1AM7Pg1vqgvoX3084ul62Cwvt/
lzJKkvK4i9z/m4ueE3o08UT8P/2+xsfq0xQZSCl3qtXUSGpxOB+JMac0dzOuDJxJ
qi+RtbJrcTJY8GlWmIx0eij0/xCdAZD9o3qirL6RN5L2QQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:36 2025 by rpki-client