Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e302e302f31362d3136203d3e203232383834.roa
File: 3134382e3232342e302e302f31362d3136203d3e203232383834.roa (raw, json)
Hash identifier: 98xSh62wuaZZ+IKyJww+2Mk2KrJOejAGvRdGyDRdzwI=
Subject key identifier: 8C:71:0B:B4:51:4C:C6:05:AF:94:94:4B:8F:52:C2:E9:B8:90:C2:9A
Certificate issuer: /CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Certificate serial: 5A6B5EA35A38B86D99CCC6758FA581551D428273
Authority key identifier: 29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e302e302f31362d3136203d3e203232383834.roa
Signing time: Fri 21 Feb 2025 16:20:00 +0000
ROA not before: Fri 21 Feb 2025 16:15:00 +0000
ROA not after: Fri 20 Feb 2026 16:20:00 +0000
asID: 22884
IP address blocks: 148.224.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Sat 22 Feb 2025 19:25:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:6b:5e:a3:5a:38:b8:6d:99:cc:c6:75:8f:a5:81:55:1d:42:82:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=290C0689C5A4825DBE1353374A1CF148FF4180E8
Validity
Not Before: Feb 21 16:15:00 2025 GMT
Not After : Feb 20 16:20:00 2026 GMT
Subject: CN=8C710BB4514CC605AF94944B8F52C2E9B890C29A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:52:98:3b:4f:9c:2a:82:a0:6b:56:ed:b6:0c:
af:16:1b:67:1c:40:7c:70:1a:d7:a2:54:9a:8a:06:
f4:38:90:fd:69:1c:e9:96:e6:40:de:22:76:54:0c:
8b:3d:6e:ae:1c:52:73:e8:37:6d:cf:a0:29:c9:04:
83:76:d4:e1:a0:aa:07:fa:c1:92:0e:42:73:b0:f0:
25:01:d7:f8:e0:8f:f6:00:12:31:e3:20:0e:e8:c9:
54:ec:8d:9b:6a:69:23:06:4c:a5:47:ab:ee:d6:6c:
41:ea:61:2b:35:2e:84:e8:28:93:90:fb:e5:3e:29:
df:ca:e1:ec:5a:c9:3f:2d:35:35:b0:8d:c5:f9:87:
d9:92:21:0f:54:7e:85:d7:e9:f4:8a:13:13:ef:23:
3a:04:ab:13:8c:c8:23:df:96:41:86:bb:55:4a:7f:
b4:17:a3:90:b3:6c:af:4c:be:c2:d2:26:75:52:31:
4c:eb:6d:33:bb:4d:6b:1b:f4:9b:dc:b5:d4:5e:55:
e1:4e:9d:5e:2c:54:17:df:a1:82:2e:ee:1f:58:d8:
fb:b9:f2:74:5b:a1:87:02:d0:0d:74:d2:ca:e3:8b:
49:48:ad:80:81:0d:7e:80:7e:0d:75:11:4f:d8:04:
c0:ec:70:2e:90:bf:20:1a:0a:a6:ae:85:39:54:ce:
ba:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:71:0B:B4:51:4C:C6:05:AF:94:94:4B:8F:52:C2:E9:B8:90:C2:9A
X509v3 Authority Key Identifier:
keyid:29:0C:06:89:C5:A4:82:5D:BE:13:53:37:4A:1C:F1:48:FF:41:80:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/290C0689C5A4825DBE1353374A1CF148FF4180E8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0348D9E70C4B676ED067D5183023E7F4D27E66B876E8878BEB4A8F0DFA664C4/0/3134382e3232342e302e302f31362d3136203d3e203232383834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.224.0.0/16
Signature Algorithm: sha256WithRSAEncryption
81:ce:ba:8e:0a:d0:70:c7:67:e2:1f:b1:0e:33:7a:57:e6:98:
93:15:c5:2f:94:38:e5:11:4f:6e:c0:f1:15:f0:20:4d:79:fb:
bb:74:35:93:00:3a:83:65:7b:62:fd:e7:c7:94:b4:fa:70:00:
9d:7d:d8:6f:77:0c:60:16:32:6c:85:6d:f2:b4:0e:bc:c7:cc:
29:e7:8a:fc:d2:72:4b:38:e7:41:6f:3f:10:d5:d8:e1:bf:3c:
c9:a2:b2:9e:0b:9c:13:4a:f1:99:34:f4:5b:43:b1:6b:46:0e:
9d:e3:89:9b:f3:cf:11:38:2e:a0:6b:51:31:bb:5d:c0:52:8c:
63:52:f6:b8:97:0f:66:89:c2:33:a1:e5:08:18:d5:2a:50:c7:
72:c9:c6:64:fc:ef:de:52:e1:13:36:61:ec:06:d6:c0:7c:74:
1a:40:d1:30:74:62:be:f2:cb:f3:23:5f:f2:17:14:d5:8c:5b:
a7:e7:fe:45:f9:46:7a:b0:4d:b4:a5:6b:37:c9:97:b8:f8:e5:
dd:c4:96:f6:c1:8e:51:9d:1c:96:49:5e:6e:11:51:91:bd:84:
ea:38:5e:fa:35:75:36:ca:a4:24:fa:b7:c2:63:c5:d7:63:bf:
99:22:d7:da:8a:3f:79:1a:11:c5:0f:37:17:1a:23:47:dc:21:
91:44:a4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:01:07 2025 by rpki-client