Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/3139312e3234312e3134302e302f32332d3234203d3e20323730313036.roa
File: 3139312e3234312e3134302e302f32332d3234203d3e20323730313036.roa (raw, json)
Hash identifier: rrQxZMIDBOtCATMSgoA6Yedn6egBC3uugPv76bHanMU=
Subject key identifier: 34:88:27:68:91:30:01:C3:C8:69:19:B8:12:A9:A4:58:D8:70:C2:89
Certificate issuer: /CN=8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83
Certificate serial: 6623D4DF8ADAB5D8EF5912F76952C8FFB00FF4E5
Authority key identifier: 8F:3A:F6:49:2C:8F:EF:73:1C:BF:ED:BF:D0:8A:6B:91:8F:DA:4D:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/3139312e3234312e3134302e302f32332d3234203d3e20323730313036.roa
Signing time: Sat 19 Apr 2025 19:45:00 +0000
ROA not before: Sat 19 Apr 2025 19:40:00 +0000
ROA not after: Sat 18 Apr 2026 19:45:00 +0000
asID: 270106
IP address blocks: 191.241.140.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 May 2025 17:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:23:d4:df:8a:da:b5:d8:ef:59:12:f7:69:52:c8:ff:b0:0f:f4:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83
Validity
Not Before: Apr 19 19:40:00 2025 GMT
Not After : Apr 18 19:45:00 2026 GMT
Subject: CN=34882768913001C3C86919B812A9A458D870C289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:02:bb:1e:ae:0a:46:e2:d6:bf:da:9f:fb:b5:
99:1e:80:3c:43:d0:b3:00:22:f1:60:69:fd:5c:7d:
11:cf:b9:a7:07:27:36:21:12:79:65:8a:ed:03:df:
a2:91:2c:e7:88:2f:2f:99:6b:fa:11:9d:76:8f:bd:
66:9d:c2:63:29:2a:ad:fe:9c:44:b8:fc:37:f4:c6:
28:91:f7:11:51:7f:b0:6c:51:b1:c0:6d:b4:0f:ae:
bf:6c:d8:b7:f2:62:82:4a:4f:70:2d:b2:4e:e1:94:
6c:f9:01:5e:f3:8e:ad:76:18:4f:b9:fa:65:57:d3:
cc:6f:18:89:35:0f:af:31:d8:3b:f6:2f:f2:b2:54:
eb:54:80:86:c6:38:6f:cc:6c:d3:5a:56:f9:1d:be:
d2:bf:37:30:a4:5d:95:3c:54:16:6a:cf:5f:c8:f4:
57:ce:0d:be:bc:ae:38:6e:4c:a7:4a:43:4e:24:5f:
5e:ea:c4:a3:6f:f4:a2:09:ed:1f:74:f2:c2:16:aa:
ad:c2:44:1b:87:bd:97:0d:2f:69:1e:c7:6d:a3:5c:
e3:db:83:40:25:ff:62:e8:e6:7b:8f:4f:07:35:40:
17:7c:23:f4:6d:33:14:c0:b1:64:e1:c0:dc:46:b4:
35:3d:94:fa:e7:11:ee:e4:58:8b:6c:d9:80:a4:19:
13:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:88:27:68:91:30:01:C3:C8:69:19:B8:12:A9:A4:58:D8:70:C2:89
X509v3 Authority Key Identifier:
keyid:8F:3A:F6:49:2C:8F:EF:73:1C:BF:ED:BF:D0:8A:6B:91:8F:DA:4D:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F3AF6492C8FEF731CBFEDBFD08A6B918FDA4D83.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84E9CFD0BCC44D1CF08FDA245B0A3088B0249CA1F629FA2EC30BEE800680995C/0/3139312e3234312e3134302e302f32332d3234203d3e20323730313036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.241.140.0/23
Signature Algorithm: sha256WithRSAEncryption
48:88:73:34:43:70:1a:bc:41:5b:f8:79:97:e8:9b:ae:4d:9d:
01:a0:3d:b9:13:cd:2f:4c:49:a9:c0:f5:53:d3:a3:93:cb:54:
c6:e9:3a:10:cc:81:d5:a7:16:e1:c7:6e:0e:93:4e:81:30:ab:
ba:d7:65:0a:23:d2:fc:5d:59:b6:31:4e:d3:ec:48:47:88:8f:
14:1e:18:bf:64:ba:5d:e5:35:f4:72:5b:e5:9b:ae:47:88:c8:
57:8c:d2:97:af:da:ae:66:7f:5f:c7:2e:3e:5e:18:4a:f9:07:
4a:d9:61:1f:96:83:34:62:50:04:55:b6:eb:45:bf:dc:e8:d4:
0f:8c:e6:00:d4:69:f6:e5:bb:31:44:80:cc:68:18:f3:39:d6:
4f:ea:9f:eb:6c:09:f8:e6:7c:4f:61:2c:95:e4:d4:40:a5:9d:
62:4f:5e:fd:67:24:64:87:b9:85:d4:07:7f:25:a7:bf:14:26:
f9:74:b3:86:82:50:16:fc:29:90:37:89:2a:a7:1f:4c:92:2c:
b5:1f:b2:70:17:c9:00:59:28:d4:ef:35:a0:0b:e1:ee:eb:ce:
75:8b:9b:c3:7e:3d:d9:cc:7d:31:05:ec:20:22:a7:89:f8:6d:
bb:61:30:50:82:1d:74:2d:f6:d2:3b:17:88:54:04:c9:b3:cc:
12:98:30:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:18:45 2025 by rpki-client