Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/3137392e36302e3230342e302f32322d3234203d3e203634313230.roa
File: 3137392e36302e3230342e302f32322d3234203d3e203634313230.roa (raw, json)
Hash identifier: KJ45+DbTpkbMlWtImNpxlm1b9XerKcGiBOZZU144g7I=
Subject key identifier: 93:F8:47:4E:57:69:8D:AF:76:D7:15:84:6A:1A:C4:F6:6F:EB:CB:E0
Certificate issuer: /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial: 1DEDAFCF29E0AC23C190F8676F76B2948C3387DF
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/3137392e36302e3230342e302f32322d3234203d3e203634313230.roa
Signing time: Tue 04 Feb 2025 18:42:01 +0000
ROA not before: Tue 04 Feb 2025 18:37:01 +0000
ROA not after: Tue 03 Feb 2026 18:42:01 +0000
asID: 64120
IP address blocks: 179.60.204.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Mar 2025 21:00:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:ed:af:cf:29:e0:ac:23:c1:90:f8:67:6f:76:b2:94:8c:33:87:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Validity
Not Before: Feb 4 18:37:01 2025 GMT
Not After : Feb 3 18:42:01 2026 GMT
Subject: CN=93F8474E57698DAF76D715846A1AC4F66FEBCBE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3a:a9:5e:b4:55:9b:e1:53:4b:23:ce:a3:35:
42:06:ca:1f:ce:85:46:24:2f:bc:b4:57:4f:de:75:
37:0b:8f:8b:d5:75:9f:a5:e1:7f:01:aa:86:88:fe:
9b:e4:a2:82:bc:8c:5a:cc:0b:25:cf:5d:6d:ca:9d:
cc:8e:f6:7a:f5:0a:90:1f:5c:e5:e1:94:3a:e8:f2:
e7:bd:c3:c0:7e:c2:80:b1:8f:20:70:0e:74:00:69:
ae:90:bb:df:20:f8:72:92:41:ca:a1:59:e7:60:e9:
e4:4a:4e:10:67:8b:78:74:01:2b:4a:91:90:ca:cd:
24:5e:ea:1f:40:f3:ae:55:8b:62:29:5a:da:09:26:
3f:f7:6f:24:a7:45:ff:1f:89:22:6e:cc:4d:0c:a0:
c5:db:8b:9c:d6:a9:88:02:a2:cc:d9:af:83:ad:22:
05:3d:b0:1d:7e:8d:91:ec:f2:d9:a2:36:d0:35:f1:
24:97:4e:2a:ef:b6:37:32:60:e9:0a:dd:97:cc:8c:
8d:f4:2f:36:ed:54:db:ad:25:14:78:6c:cd:7f:a2:
3c:b0:76:ae:ce:bb:9d:f7:aa:5d:36:1f:cf:fb:4f:
8d:bc:ba:fd:da:61:3d:d2:c3:bd:1b:0f:82:3a:12:
c9:3e:08:2e:8c:88:3c:c7:e9:9a:97:8e:4c:c2:cb:
cd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F8:47:4E:57:69:8D:AF:76:D7:15:84:6A:1A:C4:F6:6F:EB:CB:E0
X509v3 Authority Key Identifier:
keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/3137392e36302e3230342e302f32322d3234203d3e203634313230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.60.204.0/22
Signature Algorithm: sha256WithRSAEncryption
81:79:d4:d4:d9:f3:2d:a8:e1:1c:a2:0e:1d:c5:87:18:21:ad:
13:f9:ef:bd:70:5c:ee:36:c7:a0:47:22:57:95:b9:85:15:7c:
fb:a2:2c:23:6a:f9:26:39:08:9a:46:c5:41:a9:9c:88:b7:14:
5f:4a:6f:2a:45:9a:b9:f6:24:35:cd:e3:cd:ed:64:3b:6f:cf:
73:9c:0c:33:03:09:91:09:a6:8d:93:c9:a3:5d:00:e6:c1:6b:
87:d9:7e:d0:fa:8e:f1:60:93:a6:49:f8:9d:fd:8d:91:cf:1c:
56:24:cb:5d:21:ed:3b:a4:03:72:63:4f:83:fd:41:1c:85:f5:
e8:13:5c:f1:80:fc:e1:e4:b7:b5:22:5f:c8:c9:b3:00:a1:c8:
b8:9f:40:2d:93:1e:5d:64:94:77:cf:34:b8:11:d8:a1:0a:67:
2b:b3:1f:84:4e:29:aa:83:ad:29:fb:71:19:7a:19:48:94:7a:
93:be:16:a1:68:04:5f:26:9c:97:5c:a8:52:58:aa:98:5f:b4:
15:63:bd:cc:bf:78:0c:5d:1f:f8:34:15:b4:73:94:18:e3:20:
ca:5f:c0:52:96:27:3a:91:3c:4a:c3:e2:22:f5:9a:ea:39:77:
bf:b3:02:29:3a:c3:36:9e:1b:57:52:e3:35:b7:f0:8b:be:36:
06:aa:72:9f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUHe2vzyngrCPBkPhnb3aylIwzh98wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYwMTdBQUNGQjc4NUVBQjdFQTU2RDI0MzM3Q0RDRDcy
NEVBQzJBRDAeFw0yNTAyMDQxODM3MDFaFw0yNjAyMDMxODQyMDFaMDMxMTAvBgNV
BAMTKDkzRjg0NzRFNTc2OThEQUY3NkQ3MTU4NDZBMUFDNEY2NkZFQkNCRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuOqletFWb4VNLI86jNUIGyh/O
hUYkL7y0V0/edTcLj4vVdZ+l4X8BqoaI/pvkooK8jFrMCyXPXW3KncyO9nr1CpAf
XOXhlDro8ue9w8B+woCxjyBwDnQAaa6Qu98g+HKSQcqhWedg6eRKThBni3h0AStK
kZDKzSRe6h9A865Vi2IpWtoJJj/3bySnRf8fiSJuzE0MoMXbi5zWqYgCoszZr4Ot
IgU9sB1+jZHs8tmiNtA18SSXTirvtjcyYOkK3ZfMjI30LzbtVNutJRR4bM1/ojyw
dq7Ou533ql02H8/7T428uv3aYT3Sw70bD4I6Esk+CC6MiDzH6ZqXjkzCy82TAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUk/hHTldpja921xWEahrE9m/ry+AwHwYDVR0j
BBgwFoAU1gF6rPt4Xqt+pW0kM3zc1yTqwq0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQzIxREZEOTYxODhGRjAzMTg3NDA5M0JFRjc4QjdGQzdF
NUUzQ0M0MEYyMzkyMkQ5Q0RFNTlDRDExNjU4Qzg0LzAvRDYwMTdBQUNGQjc4NUVB
QjdFQTU2RDI0MzM3Q0RDRDcyNEVBQzJBRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENjAxN0FBQ0ZCNzg1RUFCN0VB
NTZEMjQzMzdDRENENzI0RUFDMkFELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUMyMURGRDk2MTg4RkYwMzE4NzQwOTNCRUY3OEI3RkM3RTVFM0NDNDBG
MjM5MjJEOUNERTU5Q0QxMTY1OEM4NC8wLzMxMzczOTJlMzYzMDJlMzIzMDM0MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzNDMxMzIzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArM8zDAN
BgkqhkiG9w0BAQsFAAOCAQEAgXnU1NnzLajhHKIOHcWHGCGtE/nvvXBc7jbHoEci
V5W5hRV8+6IsI2r5JjkImkbFQamciLcUX0pvKkWaufYkNc3jze1kO2/Pc5wMMwMJ
kQmmjZPJo10A5sFrh9l+0PqO8WCTpkn4nf2Nkc8cViTLXSHtO6QDcmNPg/1BHIX1
6BNc8YD84eS3tSJfyMmzAKHIuJ9ALZMeXWSUd880uBHYoQpnK7MfhE4pqoOtKftx
GXoZSJR6k74WoWgEXyacl1yoUliqmF+0FWO9zL94DF0f+DQVtHOUGOMgyl/AUpYn
OpE8SsPiIvWa6jl3v7MCKTrDNp4bV1LjNbfwi742Bqpynw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 04:29:18 2025 by rpki-client