
Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323136303a3a2f34332d3433203d3e203634313230.roa
File: 323830333a663038303a323136303a3a2f34332d3433203d3e203634313230.roa (raw, json)
Hash identifier: hC7gwl9BFJl01RztGndZomkkIQySaK4HulBqx9eVu6c=
Subject key identifier: 2A:0F:20:B6:78:04:8C:EB:E5:DC:AC:04:B4:6E:75:F0:E3:98:3F:AB
Certificate issuer: /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial: 7BE4E870AB30CF36701DDD09C64EBD99AD1448DB
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323136303a3a2f34332d3433203d3e203634313230.roa
Signing time: Sat 07 Jun 2025 22:55:00 +0000
ROA not before: Sat 07 Jun 2025 22:50:00 +0000
ROA not after: Sat 06 Jun 2026 22:55:00 +0000
asID: 64120
IP address blocks: 2803:f080:2160::/43 maxlen: 43
Validation: Failed, certificate revoked on Mon 30 Jun 2025 23:15:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:e4:e8:70:ab:30:cf:36:70:1d:dd:09:c6:4e:bd:99:ad:14:48:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Validity
Not Before: Jun 7 22:50:00 2025 GMT
Not After : Jun 6 22:55:00 2026 GMT
Subject: CN=2A0F20B678048CEBE5DCAC04B46E75F0E3983FAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:98:c5:f9:9c:6c:20:20:20:c2:78:78:19:91:
97:3d:8e:ff:fa:e3:7d:17:fb:51:99:f8:17:13:b0:
10:6a:19:77:3e:5b:5b:5f:37:35:2b:16:96:0b:51:
ac:be:67:43:98:70:f0:24:08:a7:2f:77:95:77:bc:
db:bd:72:b9:07:d6:83:6f:0e:36:8a:1b:f6:10:5d:
ca:ee:c2:25:d0:9c:7c:e3:3f:d5:56:61:c1:f2:34:
89:59:fc:0c:a3:74:99:29:98:0f:15:81:b3:6c:d5:
cf:d4:f5:8e:c4:bb:31:f9:e0:16:d5:cb:cb:85:76:
a1:ee:9d:cc:7a:47:95:7d:c9:28:32:d5:ef:07:83:
2f:e9:a1:19:ba:50:63:bf:ad:78:83:77:e9:5b:18:
82:f6:08:62:84:64:c1:f9:5c:19:cf:bc:11:4e:c6:
6b:38:7b:2b:c9:61:fd:59:85:60:cd:6f:09:c1:de:
5e:aa:84:ee:91:71:8f:ac:29:a0:53:22:84:30:00:
55:c2:ed:51:b0:d9:a8:6f:b2:70:68:86:e0:10:de:
85:0d:57:d4:a4:f1:03:b4:de:65:14:ef:49:a9:fd:
c0:36:19:59:e5:ca:d9:2e:16:f3:fd:d0:4e:b2:b6:
ff:12:19:ec:00:43:82:32:ae:1a:e3:b3:e0:00:60:
04:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:0F:20:B6:78:04:8C:EB:E5:DC:AC:04:B4:6E:75:F0:E3:98:3F:AB
X509v3 Authority Key Identifier:
keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323136303a3a2f34332d3433203d3e203634313230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:f080:2160::/43
Signature Algorithm: sha256WithRSAEncryption
74:da:c4:10:20:6e:3e:85:85:65:24:a5:1b:36:bd:91:02:79:
4b:65:df:94:39:3b:fb:ba:19:3f:1d:39:e6:41:77:1c:f5:a0:
25:ae:b8:a4:3c:93:c4:ff:2a:4a:26:40:8a:ac:f4:d8:42:df:
ce:0e:9f:22:f2:40:ee:08:82:03:b3:79:29:c8:5f:08:d3:9c:
6a:a4:37:10:5a:56:3e:17:8c:16:01:88:c8:3e:41:75:11:5e:
9a:8a:3e:02:c0:c1:34:72:64:4b:0e:b0:76:af:58:3f:c9:40:
e8:7a:b7:20:fa:c7:0f:84:29:ec:9d:78:f2:e4:ca:41:a1:30:
e6:73:bd:84:6d:7a:61:5f:df:3d:e0:da:82:e7:f7:34:53:39:
52:ae:49:04:f1:b9:0c:32:80:7f:2a:d0:1e:1b:eb:ac:1c:70:
4b:f7:0c:a2:50:c2:89:f9:bf:79:db:8e:8f:2f:64:31:6b:23:
b7:fc:37:68:56:e3:86:9a:eb:e0:7e:15:49:f9:1b:b7:be:14:
ff:08:f6:ae:9c:54:b4:3a:10:81:30:e5:33:82:ab:fe:f2:a4:
32:36:bd:c0:e6:8d:2a:06:0a:80:dc:3c:37:e5:1b:90:13:f4:
50:a2:ad:2a:90:d2:34:ef:00:5f:28:31:d2:55:16:65:32:2c:
64:0e:f0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 20:27:22 2025 by rpki-client