Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D7DD4937B63A683B9BF81631E20DBA403FFE434FD4861D98DE839478345B033/0/3138312e3137362e3132322e302f32342d3234203d3e20323033353937.roa
File: 3138312e3137362e3132322e302f32342d3234203d3e20323033353937.roa (raw, json)
Hash identifier: jmI1ULm09IV7mq5M/LOnqCW3y2JAr4d7PFa5LYL/ETc=
Subject key identifier: 3D:0F:C3:D2:78:13:30:B1:F2:2D:B8:92:C0:8A:6F:64:11:15:39:80
Certificate issuer: /CN=2AB6FC0008E3CB5A059B1D935090BD3A42310F93
Certificate serial: 5E707487055978F62039A39D12860F0EC353EBA3
Authority key identifier: 2A:B6:FC:00:08:E3:CB:5A:05:9B:1D:93:50:90:BD:3A:42:31:0F:93
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AB6FC0008E3CB5A059B1D935090BD3A42310F93.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9D7DD4937B63A683B9BF81631E20DBA403FFE434FD4861D98DE839478345B033/0/3138312e3137362e3132322e302f32342d3234203d3e20323033353937.roa
Signing time: Thu 09 Jan 2025 22:45:00 +0000
ROA not before: Thu 09 Jan 2025 22:40:00 +0000
ROA not after: Thu 08 Jan 2026 22:45:00 +0000
asID: 203597
IP address blocks: 181.176.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Jan 2025 19:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:70:74:87:05:59:78:f6:20:39:a3:9d:12:86:0f:0e:c3:53:eb:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2AB6FC0008E3CB5A059B1D935090BD3A42310F93
Validity
Not Before: Jan 9 22:40:00 2025 GMT
Not After : Jan 8 22:45:00 2026 GMT
Subject: CN=3D0FC3D2781330B1F22DB892C08A6F6411153980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:40:bf:9b:f4:b9:7e:0b:e7:43:eb:4e:45:b1:
4c:41:fc:7b:07:bf:2c:f6:2c:d9:3c:33:e2:08:a0:
c5:8f:df:0f:78:da:4c:f0:0b:0b:c2:0d:33:ae:bf:
d7:10:11:10:b6:8c:38:f7:be:69:90:6b:31:4d:8b:
c1:86:52:50:ad:cc:0c:97:2e:ee:b1:a7:11:5c:2b:
4a:64:a2:ec:6e:9d:3e:73:10:2a:d5:76:6c:ca:b5:
3d:4d:bb:8e:ae:6e:79:33:47:e8:ad:9c:37:a7:16:
6d:3f:03:64:a9:5a:4b:05:e5:1f:d2:34:1c:00:87:
3d:49:f5:45:d9:73:6e:c6:7e:d5:52:b7:b5:84:9e:
0e:d6:5b:d9:d8:7f:e8:e2:b1:a7:be:7d:0e:94:d8:
5c:e8:41:5a:68:e6:77:75:40:2b:1e:2c:ea:5c:e6:
db:27:76:14:1e:96:ba:4f:d8:5c:a3:47:3f:6b:9f:
59:ff:ca:91:aa:da:51:c9:7d:c2:e0:7d:9a:4d:c4:
bc:94:6d:57:e1:ec:c2:6b:ab:d3:7b:d2:35:2b:ac:
a7:5f:0e:80:73:a9:15:9c:5c:94:31:06:72:3e:fe:
41:5a:49:6d:08:2a:fb:df:08:ed:c5:6e:92:d5:95:
ef:71:fb:f3:e1:bb:ac:a3:ad:f5:8e:e3:3b:ac:9a:
71:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0F:C3:D2:78:13:30:B1:F2:2D:B8:92:C0:8A:6F:64:11:15:39:80
X509v3 Authority Key Identifier:
keyid:2A:B6:FC:00:08:E3:CB:5A:05:9B:1D:93:50:90:BD:3A:42:31:0F:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9D7DD4937B63A683B9BF81631E20DBA403FFE434FD4861D98DE839478345B033/0/2AB6FC0008E3CB5A059B1D935090BD3A42310F93.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AB6FC0008E3CB5A059B1D935090BD3A42310F93.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D7DD4937B63A683B9BF81631E20DBA403FFE434FD4861D98DE839478345B033/0/3138312e3137362e3132322e302f32342d3234203d3e20323033353937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.176.122.0/24
Signature Algorithm: sha256WithRSAEncryption
87:02:f1:18:7c:c6:e9:a9:d1:b6:a0:bf:0b:e4:60:84:08:04:
0c:15:34:3d:a5:c3:38:17:7f:aa:f9:6d:88:52:59:14:b6:7f:
49:1d:02:e6:6e:04:3a:a3:0f:d0:2b:5d:c8:8d:de:cf:3f:ae:
56:a3:d4:6b:13:91:4f:46:ab:93:65:3d:ed:12:f3:74:b8:21:
72:3e:e9:d7:0c:d0:33:ca:af:7d:74:2b:4b:f8:69:db:64:75:
ab:bf:ce:ec:b5:fc:fc:ec:6c:25:04:48:38:0c:8b:af:da:e0:
f1:c4:65:02:43:9b:88:76:ff:a9:fd:97:3a:30:d3:82:6c:d8:
47:c3:61:dc:57:c6:1e:5c:f5:d1:c7:aa:83:5e:fa:ac:3b:eb:
65:77:77:0b:b3:27:ea:57:3c:64:f1:d7:de:8f:8f:c5:03:90:
b6:30:70:f9:67:71:58:93:de:97:55:3a:51:9b:e1:1b:18:ed:
c5:76:81:62:d3:a2:f9:32:13:c0:eb:b9:67:44:6c:a2:68:a5:
11:5c:a3:39:14:75:48:a2:62:14:41:94:9f:af:79:27:4a:34:
b9:1d:b4:4b:f6:b8:7c:47:f0:57:55:93:69:ab:b5:f8:11:06:
9e:bc:8f:94:97:2d:15:70:f4:32:2e:d6:d8:de:03:10:0c:0e:
e8:cc:75:6b
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUXnB0hwVZePYgOaOdEoYPDsNT66MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkFCNkZDMDAwOEUzQ0I1QTA1OUIxRDkzNTA5MEJEM0E0
MjMxMEY5MzAeFw0yNTAxMDkyMjQwMDBaFw0yNjAxMDgyMjQ1MDBaMDMxMTAvBgNV
BAMTKDNEMEZDM0QyNzgxMzMwQjFGMjJEQjg5MkMwOEE2RjY0MTExNTM5ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzQL+b9Ll+C+dD605FsUxB/HsH
vyz2LNk8M+IIoMWP3w942kzwCwvCDTOuv9cQERC2jDj3vmmQazFNi8GGUlCtzAyX
Lu6xpxFcK0pkouxunT5zECrVdmzKtT1Nu46ubnkzR+itnDenFm0/A2SpWksF5R/S
NBwAhz1J9UXZc27GftVSt7WEng7WW9nYf+jisae+fQ6U2FzoQVpo5nd1QCseLOpc
5tsndhQelrpP2FyjRz9rn1n/ypGq2lHJfcLgfZpNxLyUbVfh7MJrq9N70jUrrKdf
DoBzqRWcXJQxBnI+/kFaSW0IKvvfCO3FbpLVle9x+/Phu6yjrfWO4zusmnElAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUPQ/D0ngTMLHyLbiSwIpvZBEVOYAwHwYDVR0j
BBgwFoAUKrb8AAjjy1oFmx2TUJC9OkIxD5MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RDdERDQ5MzdCNjNBNjgzQjlCRjgxNjMxRTIwREJBNDAz
RkZFNDM0RkQ0ODYxRDk4REU4Mzk0NzgzNDVCMDMzLzAvMkFCNkZDMDAwOEUzQ0I1
QTA1OUIxRDkzNTA5MEJEM0E0MjMxMEY5My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQUI2RkMwMDA4RTNDQjVBMDU5
QjFEOTM1MDkwQkQzQTQyMzEwRjkzLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUQ3REQ0OTM3QjYzQTY4M0I5QkY4MTYzMUUyMERCQTQwM0ZGRTQzNEZE
NDg2MUQ5OERFODM5NDc4MzQ1QjAzMy8wLzMxMzgzMTJlMzEzNzM2MmUzMTMyMzIy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzMzNTM5Mzcucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC1
sHowDQYJKoZIhvcNAQELBQADggEBAIcC8Rh8xump0bagvwvkYIQIBAwVND2lwzgX
f6r5bYhSWRS2f0kdAuZuBDqjD9ArXciN3s8/rlaj1GsTkU9Gq5NlPe0S83S4IXI+
6dcM0DPKr310K0v4adtkdau/zuy1/PzsbCUESDgMi6/a4PHEZQJDm4h2/6n9lzow
04Js2EfDYdxXxh5c9dHHqoNe+qw762V3dwuzJ+pXPGTx196Pj8UDkLYwcPlncViT
3pdVOlGb4RsY7cV2gWLTovkyE8DruWdEbKJopRFcozkUdUiiYhRBlJ+veSdKNLkd
tEv2uHxH8FdVk2mrtfgRBp68j5SXLRVw9DIu1tjeAxAMDujMdWs=
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:47:54 2025 by rpki-client