Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/34352e36382e39342e302f32342d3234203d3e203634313730.roa
File: 34352e36382e39342e302f32342d3234203d3e203634313730.roa (raw, json)
Hash identifier: zm9Jabm3hyB0wDi5Vi8WTiDBLn+pMRV0k9hfujVkZe8=
Subject key identifier: AA:BA:04:47:5A:29:B5:8A:B4:92:D7:A8:DF:8A:A6:B9:E0:87:A6:50
Certificate issuer: /CN=E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0
Certificate serial: 294804B4F88EB25F75375B2CFBFD8A0B55F612C8
Authority key identifier: E9:83:23:C8:F0:C8:DC:F5:1B:94:82:D5:6B:4B:DF:B8:B7:70:FE:E0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/34352e36382e39342e302f32342d3234203d3e203634313730.roa
Signing time: Tue 17 Jun 2025 01:50:00 +0000
ROA not before: Tue 17 Jun 2025 01:45:00 +0000
ROA not after: Tue 16 Jun 2026 01:50:00 +0000
asID: 64170
IP address blocks: 45.68.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Jun 2025 11:05:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:48:04:b4:f8:8e:b2:5f:75:37:5b:2c:fb:fd:8a:0b:55:f6:12:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0
Validity
Not Before: Jun 17 01:45:00 2025 GMT
Not After : Jun 16 01:50:00 2026 GMT
Subject: CN=AABA04475A29B58AB492D7A8DF8AA6B9E087A650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c2:aa:16:73:6d:85:b5:6e:80:9a:73:1f:88:
78:81:7d:d7:1b:08:53:1e:37:f0:37:5f:3d:f7:5c:
6e:5d:55:8b:eb:be:2a:47:4b:e0:24:71:60:49:c1:
76:d6:f2:e8:5a:50:41:8d:36:a8:d9:c5:12:ab:6c:
4d:fd:b3:ae:38:ad:23:8e:18:85:d5:c6:43:f5:99:
59:91:2c:31:1d:a4:6b:00:dc:fa:ec:ad:58:a0:64:
0a:11:d5:57:0d:0d:0c:cf:30:51:f7:fb:28:12:e6:
07:6b:4f:67:37:a7:86:c8:41:d2:21:6d:5b:51:9d:
eb:f6:88:cb:c0:fa:78:7e:21:0e:d0:ee:a0:0b:d2:
a0:93:bd:b3:e7:a3:6f:ee:23:b4:87:a4:b3:d1:41:
57:22:44:be:68:73:f1:7b:6f:9a:c4:f7:63:e9:90:
d7:80:6e:86:9e:07:8a:13:77:5b:8f:b1:24:fd:e8:
a3:8d:05:8a:1a:86:1d:d0:4d:56:8c:b6:31:34:a2:
97:2e:4e:77:f3:3f:65:01:62:26:ea:17:f4:d8:29:
e1:40:e0:ea:33:54:69:d8:56:e6:06:a8:73:4b:30:
84:bd:88:d6:29:e0:35:eb:8b:1a:20:a8:65:d5:4b:
82:8e:54:28:59:61:d3:35:ab:15:4a:28:65:75:30:
30:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BA:04:47:5A:29:B5:8A:B4:92:D7:A8:DF:8A:A6:B9:E0:87:A6:50
X509v3 Authority Key Identifier:
keyid:E9:83:23:C8:F0:C8:DC:F5:1B:94:82:D5:6B:4B:DF:B8:B7:70:FE:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/34352e36382e39342e302f32342d3234203d3e203634313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.68.94.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:6b:45:31:33:c8:1e:8a:29:30:f8:90:4e:46:4c:b6:69:5e:
de:1c:c6:45:a5:ac:35:ed:2e:5a:0c:2a:47:c4:9f:7d:9a:bf:
bc:09:b2:a4:ae:23:1e:a9:aa:f5:42:cd:7b:d4:2d:9a:7e:bc:
e1:32:4e:19:ad:9e:f2:50:df:6d:a9:a3:db:17:22:2f:44:5f:
29:8b:06:56:1d:e0:38:32:d6:4c:82:24:92:8f:57:f0:cc:87:
d5:cb:8e:8e:c0:53:e8:85:4d:cf:bc:32:d3:36:76:06:83:d0:
8e:a7:8b:9b:ad:62:54:5c:24:fa:5d:6e:e7:6b:c3:3b:4b:ad:
84:89:d9:fe:b5:5e:3b:dc:4a:7d:23:8b:b3:0c:f4:00:e7:13:
33:66:f1:a8:4b:ee:57:ea:c9:a7:d9:db:2b:ae:5a:bd:af:9b:
93:5a:8e:a2:da:5f:a6:f4:b9:83:94:3d:74:57:56:c1:ba:1f:
8b:fd:6f:ba:f3:30:f3:42:25:fc:50:ed:dc:e6:9a:d6:f4:13:
da:42:c6:aa:42:9c:6f:57:ad:1e:d3:36:53:60:10:99:dc:7e:
44:45:fa:79:4f:80:8f:15:a3:98:d1:29:62:a6:6d:9b:03:4d:
6e:6e:8d:dc:88:05:e3:37:38:1e:e7:bd:18:bf:57:24:bd:ec:
f7:f6:9d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 22:51:47 2025 by rpki-client