Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3132392e302f32342d3234203d3e203134373534.roa
File: 3136352e39382e3132392e302f32342d3234203d3e203134373534.roa (raw, json)
Hash identifier: qrGZgxapgzq7gnbN/OuaTAqdEVGFIcry5lLSU4jzpgA=
Subject key identifier: 6E:69:D2:0C:D4:EC:3F:51:6A:A1:5A:B5:03:0F:DF:1C:C0:DD:C5:4F
Certificate issuer: /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial: 332F8AF5D88088AC6E2C76D12379B1E83692A54A
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3132392e302f32342d3234203d3e203134373534.roa
Signing time: Fri 13 Dec 2024 17:00:00 +0000
ROA not before: Fri 13 Dec 2024 16:55:00 +0000
ROA not after: Fri 12 Dec 2025 17:00:00 +0000
asID: 14754
IP address blocks: 165.98.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Mar 2025 16:35:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:2f:8a:f5:d8:80:88:ac:6e:2c:76:d1:23:79:b1:e8:36:92:a5:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Validity
Not Before: Dec 13 16:55:00 2024 GMT
Not After : Dec 12 17:00:00 2025 GMT
Subject: CN=6E69D20CD4EC3F516AA15AB5030FDF1CC0DDC54F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:96:1f:38:f2:e6:ca:ac:4f:4e:2d:e4:b8:78:
3e:d8:f6:b5:da:f7:2d:d8:65:18:d6:60:84:ad:b6:
25:b6:1a:73:8b:e0:92:0e:f0:a3:3a:26:20:10:a7:
f2:40:6f:d7:a6:6b:44:c1:1a:41:12:13:58:0a:a4:
41:7f:3b:a0:ee:81:53:6a:b7:fd:dd:63:f3:8a:f4:
cc:bc:eb:d6:20:73:bf:c4:42:cc:bc:76:ad:f6:4d:
35:3c:6e:5b:25:e5:b3:22:94:3f:bb:b3:18:f3:9c:
2f:2a:a9:41:88:bb:ab:a4:f6:0b:5e:a7:79:12:d5:
cc:79:ce:73:da:6c:9a:0d:3e:cf:ba:eb:16:d4:51:
15:41:12:11:5f:6d:71:ae:d4:13:a8:93:48:2d:13:
be:8b:ec:4a:04:6e:31:27:3c:f2:62:40:69:84:f4:
72:6b:50:5d:df:ac:bc:2e:f4:8d:cf:a2:c9:cc:48:
5b:f1:7c:79:0f:75:12:61:5c:8e:2f:26:74:05:93:
0a:3a:54:e8:64:89:6c:04:11:4b:0e:c6:09:7c:6d:
57:0d:99:4f:17:9c:31:77:c3:d3:f1:b2:34:f1:85:
40:f3:26:30:66:54:f5:20:ef:c4:2d:a6:19:ce:bf:
cf:87:32:3c:b8:b9:d4:d9:db:3d:01:63:d7:bc:32:
be:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:69:D2:0C:D4:EC:3F:51:6A:A1:5A:B5:03:0F:DF:1C:C0:DD:C5:4F
X509v3 Authority Key Identifier:
keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e3132392e302f32342d3234203d3e203134373534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
165.98.129.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:35:71:f7:0e:e6:c9:f1:d8:0b:9a:1a:7a:0c:84:80:e1:85:
71:20:3e:7a:8a:0e:e9:6d:01:bd:21:40:ae:5e:5a:47:a4:32:
27:39:60:02:bb:90:1a:e6:04:11:8d:08:30:fb:ad:3f:79:0b:
ae:e2:dd:a4:27:90:8b:88:e0:8f:d5:6c:d9:29:cb:5e:c8:61:
f1:26:43:93:f2:3a:2b:d1:8a:66:01:7e:c7:59:8c:83:9d:bc:
8e:59:bd:97:d9:15:a4:9b:3b:df:d0:d9:f6:69:c7:a0:ca:fd:
b0:8d:db:80:7a:ff:ad:61:00:2b:8d:d3:17:cd:40:11:4d:d2:
73:b4:30:49:6a:35:f1:3b:5d:c9:f2:c2:13:90:66:7c:d2:f6:
ad:1d:43:ec:1d:33:be:a8:b2:eb:0f:c7:7f:2c:07:5f:21:45:
fd:99:90:4d:48:97:1b:cf:76:32:ac:1f:d3:ab:1e:73:d5:90:
f1:d0:47:c3:2d:8a:76:72:a5:3e:bb:ce:81:a9:af:b4:9a:43:
81:2c:71:d0:7e:d8:c1:ed:a1:12:3a:41:95:fa:b9:8c:aa:6b:
3e:5a:3d:df:38:55:4b:7d:d0:51:70:95:b5:1b:5a:31:ba:99:
b6:15:9a:b6:ae:5e:74:88:8d:58:f2:0e:fc:8d:b0:78:9e:42:
c8:c7:4c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 00:23:54 2025 by rpki-client