Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/94CA7BC7278C7389FE81E2A769A950B303284E9C1DE93B1649B261C3C0994760/0/3230302e39302e3134342e302f32312d3231203d3e203237383832.roa
File: 3230302e39302e3134342e302f32312d3231203d3e203237383832.roa (raw, json)
Hash identifier: biH8BTzZgYsXyjSGhY52uW1jgucfTNnqiTin99EbVzY=
Subject key identifier: 82:9B:96:09:78:3F:85:20:DA:E9:AB:2E:A3:7D:D2:28:69:CE:02:9F
Certificate issuer: /CN=EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B
Certificate serial: 283237CBB5C5065DC9B22FB7F82EE3807E81DA4E
Authority key identifier: EC:1F:06:8A:A5:7B:BF:89:BA:3D:7D:5A:D3:2A:93:EC:44:7D:C5:7B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/94CA7BC7278C7389FE81E2A769A950B303284E9C1DE93B1649B261C3C0994760/0/3230302e39302e3134342e302f32312d3231203d3e203237383832.roa
Signing time: Fri 14 Mar 2025 14:45:00 +0000
ROA not before: Fri 14 Mar 2025 14:40:00 +0000
ROA not after: Fri 13 Mar 2026 14:45:00 +0000
asID: 27882
IP address blocks: 200.90.144.0/21 maxlen: 21
Validation: Failed, certificate revoked on Fri 14 Mar 2025 15:15:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:32:37:cb:b5:c5:06:5d:c9:b2:2f:b7:f8:2e:e3:80:7e:81:da:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B
Validity
Not Before: Mar 14 14:40:00 2025 GMT
Not After : Mar 13 14:45:00 2026 GMT
Subject: CN=829B9609783F8520DAE9AB2EA37DD22869CE029F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a9:a4:4e:05:ca:5b:c5:a2:a6:47:ed:23:22:
36:d1:ee:1e:3d:8b:22:b7:3d:86:fa:89:e1:11:f2:
fa:90:10:ae:f9:ee:51:e1:0f:4d:9e:50:0a:43:8b:
ef:4a:cb:fd:37:79:10:b0:84:c6:3c:d9:6b:bd:db:
d1:5b:93:16:ca:27:8f:29:5b:68:45:11:ae:50:82:
21:d6:b6:6e:15:96:1d:c6:16:54:96:e7:d2:3f:78:
32:f1:5c:c2:61:32:77:8d:0e:ff:e7:cd:1b:44:90:
b2:42:69:42:2c:b5:fd:a6:e8:a6:2b:f4:91:b8:eb:
28:42:fa:95:b9:c4:d7:56:bb:c9:6f:e5:4a:fa:7c:
8f:b0:16:8e:ed:83:ce:9e:a9:20:14:59:9b:75:8c:
e5:2d:fb:88:b2:1b:bc:52:92:32:e1:66:a7:27:18:
40:49:d2:80:e6:c6:7f:c4:83:50:72:94:5c:a1:bb:
de:a6:d7:b4:0f:5d:94:c4:4d:c7:ff:e3:8f:6d:a9:
21:aa:d6:1f:7f:8d:65:f5:6a:93:12:bb:fe:51:0e:
b3:9d:9f:31:90:67:a7:1b:e0:8d:6f:8b:ad:48:be:
f3:54:da:cc:fd:d4:ad:66:5a:ed:66:f4:4d:bf:10:
b7:c3:5d:29:a5:2f:70:5d:b6:a3:40:c5:16:13:93:
3c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9B:96:09:78:3F:85:20:DA:E9:AB:2E:A3:7D:D2:28:69:CE:02:9F
X509v3 Authority Key Identifier:
keyid:EC:1F:06:8A:A5:7B:BF:89:BA:3D:7D:5A:D3:2A:93:EC:44:7D:C5:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/94CA7BC7278C7389FE81E2A769A950B303284E9C1DE93B1649B261C3C0994760/0/EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/94CA7BC7278C7389FE81E2A769A950B303284E9C1DE93B1649B261C3C0994760/0/3230302e39302e3134342e302f32312d3231203d3e203237383832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.90.144.0/21
Signature Algorithm: sha256WithRSAEncryption
10:0c:cc:76:f8:2d:6f:bc:e7:1b:b4:35:0f:74:24:ad:4f:a0:
b8:a1:2a:3b:6d:6a:12:3e:a4:ee:e5:fb:23:68:10:07:97:83:
27:f9:68:73:0c:5d:ea:b5:29:f4:f3:6e:9f:24:2c:94:c8:5a:
a0:3b:5e:64:68:53:7f:df:ea:06:f2:2c:9d:e1:0b:6d:0b:12:
7e:0e:d3:4f:1e:3a:da:8d:7e:73:5a:34:43:00:71:09:42:f3:
a2:dd:a5:8a:2c:d5:08:ed:01:bc:55:eb:6e:09:15:08:07:de:
a1:7a:2f:1a:0e:48:d9:54:0c:a4:18:05:2e:9b:10:98:15:dd:
82:a4:63:72:85:59:39:ba:9f:de:dd:77:89:20:11:c1:2e:79:
1e:1e:2b:a7:77:66:c5:dd:92:f0:66:e9:47:df:e0:b3:3e:e0:
1f:a2:ca:7c:14:ef:aa:97:b6:3b:b6:32:97:19:ea:af:30:37:
86:50:3b:c8:db:f9:e9:c1:20:21:31:8d:0b:87:f7:cc:cb:e3:
13:60:93:13:13:dd:8d:bc:1a:56:fe:fb:b6:c9:73:03:47:c9:
72:70:a4:a3:50:51:db:5b:cc:88:09:02:de:2c:f5:1a:82:c7:
72:db:01:b2:75:14:25:26:66:71:0f:92:cc:a6:1a:b3:3e:b5:
d8:b8:d3:d7
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUKDI3y7XFBl3Jsi+3+C7jgH6B2k4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUMxRjA2OEFBNTdCQkY4OUJBM0Q3RDVBRDMyQTkzRUM0
NDdEQzU3QjAeFw0yNTAzMTQxNDQwMDBaFw0yNjAzMTMxNDQ1MDBaMDMxMTAvBgNV
BAMTKDgyOUI5NjA5NzgzRjg1MjBEQUU5QUIyRUEzN0REMjI4NjlDRTAyOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3qaROBcpbxaKmR+0jIjbR7h49
iyK3PYb6ieER8vqQEK757lHhD02eUApDi+9Ky/03eRCwhMY82Wu929FbkxbKJ48p
W2hFEa5QgiHWtm4Vlh3GFlSW59I/eDLxXMJhMneNDv/nzRtEkLJCaUIstf2m6KYr
9JG46yhC+pW5xNdWu8lv5Ur6fI+wFo7tg86eqSAUWZt1jOUt+4iyG7xSkjLhZqcn
GEBJ0oDmxn/Eg1BylFyhu96m17QPXZTETcf/449tqSGq1h9/jWX1apMSu/5RDrOd
nzGQZ6cb4I1vi61IvvNU2sz91K1mWu1m9E2/ELfDXSmlL3BdtqNAxRYTkzydAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUgpuWCXg/hSDa6asuo33SKGnOAp8wHwYDVR0j
BBgwFoAU7B8GiqV7v4m6PX1a0yqT7ER9xXswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NENBN0JDNzI3OEM3Mzg5RkU4MUUyQTc2OUE5NTBCMzAz
Mjg0RTlDMURFOTNCMTY0OUIyNjFDM0MwOTk0NzYwLzAvRUMxRjA2OEFBNTdCQkY4
OUJBM0Q3RDVBRDMyQTkzRUM0NDdEQzU3Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQzFGMDY4QUE1N0JCRjg5QkEz
RDdENUFEMzJBOTNFQzQ0N0RDNTdCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTRDQTdCQzcyNzhDNzM4OUZFODFFMkE3NjlBOTUwQjMwMzI4NEU5QzFE
RTkzQjE2NDlCMjYxQzNDMDk5NDc2MC8wLzMyMzAzMDJlMzkzMDJlMzEzNDM0MmUz
MDJmMzIzMTJkMzIzMTIwM2QzZTIwMzIzNzM4MzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8hakDAN
BgkqhkiG9w0BAQsFAAOCAQEAEAzMdvgtb7znG7Q1D3QkrU+guKEqO21qEj6k7uX7
I2gQB5eDJ/locwxd6rUp9PNunyQslMhaoDteZGhTf9/qBvIsneELbQsSfg7TTx46
2o1+c1o0QwBxCULzot2liizVCO0BvFXrbgkVCAfeoXovGg5I2VQMpBgFLpsQmBXd
gqRjcoVZObqf3t13iSARwS55Hh4rp3dmxd2S8GbpR9/gsz7gH6LKfBTvqpe2O7Yy
lxnqrzA3hlA7yNv56cEgITGNC4f3zMvjE2CTExPdjbwaVv77tslzA0fJcnCko1BR
21vMiAkC3iz1GoLHctsBsnUUJSZmcQ+SzKYasz612LjT1w==
-----END CERTIFICATE-----
Generated at Fri Aug 1 18:26:48 2025 by rpki-client