Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/323830333a643238303a35303a3a2f34382d3438203d3e20323634373333.roa
File: 323830333a643238303a35303a3a2f34382d3438203d3e20323634373333.roa (raw, json)
Hash identifier: krmpoDfqxtoDPzZknf2uH3aV4poVMfrcxPwEWAU5iFQ=
Subject key identifier: B7:FA:C8:45:66:D2:C7:E7:35:FB:7F:60:08:66:C3:F6:78:FD:07:95
Certificate issuer: /CN=476D55F0317E204145D2CA23E85349FDFE0F923E
Certificate serial: 614388DC5477D9B12828C40A84BBBDAF75EAD327
Authority key identifier: 47:6D:55:F0:31:7E:20:41:45:D2:CA:23:E8:53:49:FD:FE:0F:92:3E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/476D55F0317E204145D2CA23E85349FDFE0F923E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/323830333a643238303a35303a3a2f34382d3438203d3e20323634373333.roa
Signing time: Fri 28 Feb 2025 12:15:00 +0000
ROA not before: Fri 28 Feb 2025 12:10:00 +0000
ROA not after: Fri 27 Feb 2026 12:15:00 +0000
asID: 264733
IP address blocks: 2803:d280:50::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 11 Mar 2025 18:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:43:88:dc:54:77:d9:b1:28:28:c4:0a:84:bb:bd:af:75:ea:d3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=476D55F0317E204145D2CA23E85349FDFE0F923E
Validity
Not Before: Feb 28 12:10:00 2025 GMT
Not After : Feb 27 12:15:00 2026 GMT
Subject: CN=B7FAC84566D2C7E735FB7F600866C3F678FD0795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:50:ba:30:8b:43:0f:49:2d:e6:08:dc:e7:96:
3e:45:6d:c2:bd:87:63:96:94:f9:09:7a:07:ca:6c:
77:02:a7:cb:30:d4:95:40:6a:0b:a3:5f:84:34:0f:
eb:5a:5b:dc:9b:d6:3f:f2:63:a3:34:a5:fc:99:13:
57:94:0a:a5:bc:3a:67:cd:fd:6d:d9:1e:0c:a0:59:
9f:41:26:4f:e2:69:e9:44:c8:b0:a6:2e:3a:11:f0:
04:60:62:9e:86:55:80:02:8b:33:59:00:81:2a:90:
6d:6e:a9:35:6b:67:88:fc:2e:1f:07:b2:5a:3a:51:
a3:fd:35:a1:32:60:cf:82:08:a2:bd:fc:f5:e1:44:
96:92:cb:c1:c3:97:87:1a:d9:17:c4:0c:a0:57:a3:
82:ee:2f:29:84:d7:b4:a3:77:b4:df:ef:ff:ac:90:
ca:ce:8d:b4:19:b7:21:64:11:81:8f:8f:af:78:e2:
46:78:8d:e3:14:21:d7:d7:8d:d9:5e:0e:8c:34:30:
37:97:a8:a7:72:c3:0c:ea:06:b9:8a:5d:be:95:10:
d3:d3:33:ad:03:e3:61:7c:ac:fd:51:47:4f:16:0c:
10:44:f8:d4:cd:db:fe:fe:7e:73:eb:c4:51:28:b9:
7d:27:06:0a:db:76:18:d1:31:f5:f9:36:eb:83:20:
10:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:FA:C8:45:66:D2:C7:E7:35:FB:7F:60:08:66:C3:F6:78:FD:07:95
X509v3 Authority Key Identifier:
keyid:47:6D:55:F0:31:7E:20:41:45:D2:CA:23:E8:53:49:FD:FE:0F:92:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/476D55F0317E204145D2CA23E85349FDFE0F923E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/476D55F0317E204145D2CA23E85349FDFE0F923E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86E3F1C6B5FC81497326D15442ACD0B66E694769B46A16932F47BD74C34D0F99/0/323830333a643238303a35303a3a2f34382d3438203d3e20323634373333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:d280:50::/48
Signature Algorithm: sha256WithRSAEncryption
7b:ad:cc:4b:9c:d4:16:e3:6a:1b:13:89:17:2a:9c:3a:bb:b3:
f4:10:a8:a9:31:78:b7:67:3c:63:6c:d8:94:66:f4:61:e8:19:
49:ac:c4:6a:57:2f:03:31:33:43:f1:76:08:8e:f9:bd:ce:ab:
ea:34:5f:17:93:96:ce:09:80:4d:cc:8f:5c:74:2c:fe:6d:a6:
f9:d6:69:1a:6b:40:f9:c6:88:fd:a0:7d:88:d4:ae:87:06:17:
07:b3:24:fa:14:7b:b3:eb:37:29:83:f2:0d:68:e3:5d:d8:7a:
3e:09:c3:55:57:85:18:a5:72:c3:ac:d4:b5:d8:d8:49:0a:2c:
a4:47:b8:d8:c8:64:67:16:27:4e:38:f9:c4:55:5d:3c:11:b3:
31:03:5b:c2:95:7d:54:01:9d:c9:8e:fa:59:f3:0d:4b:00:aa:
6a:21:e7:f8:43:89:f8:ec:6a:2b:61:c1:a5:d2:f9:11:95:54:
61:c2:cc:5b:e7:c7:49:f6:5c:cd:b2:24:5c:2f:81:e0:a9:6e:
4a:bc:3b:df:76:a2:e6:32:27:d1:35:12:fb:18:0f:cf:46:64:
07:73:4a:f7:49:23:bb:b8:d5:ae:f5:dd:7c:29:1f:e9:51:be:
c0:66:93:c0:89:5b:b9:e0:30:a5:52:b8:e7:10:fd:28:e0:96:
19:41:04:1f
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUYUOI3FR32bEoKMQKhLu9r3Xq0ycwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDc2RDU1RjAzMTdFMjA0MTQ1RDJDQTIzRTg1MzQ5RkRG
RTBGOTIzRTAeFw0yNTAyMjgxMjEwMDBaFw0yNjAyMjcxMjE1MDBaMDMxMTAvBgNV
BAMTKEI3RkFDODQ1NjZEMkM3RTczNUZCN0Y2MDA4NjZDM0Y2NzhGRDA3OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaULowi0MPSS3mCNznlj5FbcK9
h2OWlPkJegfKbHcCp8sw1JVAagujX4Q0D+taW9yb1j/yY6M0pfyZE1eUCqW8OmfN
/W3ZHgygWZ9BJk/iaelEyLCmLjoR8ARgYp6GVYACizNZAIEqkG1uqTVrZ4j8Lh8H
slo6UaP9NaEyYM+CCKK9/PXhRJaSy8HDl4ca2RfEDKBXo4LuLymE17Sjd7Tf7/+s
kMrOjbQZtyFkEYGPj6944kZ4jeMUIdfXjdleDow0MDeXqKdywwzqBrmKXb6VENPT
M60D42F8rP1RR08WDBBE+NTN2/7+fnPrxFEouX0nBgrbdhjRMfX5NuuDIBDTAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUt/rIRWbSx+c1+39gCGbD9nj9B5UwHwYDVR0j
BBgwFoAUR21V8DF+IEFF0soj6FNJ/f4Pkj4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84NkUzRjFDNkI1RkM4MTQ5NzMyNkQxNTQ0MkFDRDBCNjZF
Njk0NzY5QjQ2QTE2OTMyRjQ3QkQ3NEMzNEQwRjk5LzAvNDc2RDU1RjAzMTdFMjA0
MTQ1RDJDQTIzRTg1MzQ5RkRGRTBGOTIzRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NzZENTVGMDMxN0UyMDQxNDVE
MkNBMjNFODUzNDlGREZFMEY5MjNFLmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODZFM0YxQzZCNUZDODE0OTczMjZEMTU0NDJBQ0QwQjY2RTY5NDc2OUI0
NkExNjkzMkY0N0JENzRDMzREMEY5OS8wLzMyMzgzMDMzM2E2NDMyMzgzMDNhMzUz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzNDM3MzMzMy5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgD0oAAUDANBgkqhkiG9w0BAQsFAAOCAQEAe63MS5zUFuNqGxOJFyqcOruz9BCo
qTF4t2c8Y2zYlGb0YegZSazEalcvAzEzQ/F2CI75vc6r6jRfF5OWzgmATcyPXHQs
/m2m+dZpGmtA+caI/aB9iNSuhwYXB7Mk+hR7s+s3KYPyDWjjXdh6PgnDVVeFGKVy
w6zUtdjYSQospEe42MhkZxYnTjj5xFVdPBGzMQNbwpV9VAGdyY76WfMNSwCqaiHn
+EOJ+OxqK2HBpdL5EZVUYcLMW+fHSfZczbIkXC+B4KluSrw733ai5jIn0TUS+xgP
z0ZkB3NK90kju7jVrvXdfCkf6VG+wGaTwIlbueAwpVK45xD9KOCWGUEEHw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:43:30 2025 by rpki-client