Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323136303a3a2f34332d3634203d3e203634313230.roa
File: 323830333a663038303a323136303a3a2f34332d3634203d3e203634313230.roa (raw, json)
Hash identifier: azjXvDunMx7t9JGTbd5XvvcleGYELTxU1rNpJCgThr0=
Subject key identifier: 8E:D0:28:42:7A:EF:26:6B:54:E2:ED:EF:37:30:F9:CC:6F:D1:EC:10
Certificate issuer: /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial: 425B1DD5AC26CDC0209655DC77E3969273620180
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323136303a3a2f34332d3634203d3e203634313230.roa
Signing time: Sat 22 Mar 2025 04:00:00 +0000
ROA not before: Sat 22 Mar 2025 03:55:00 +0000
ROA not after: Sat 21 Mar 2026 04:00:00 +0000
asID: 64120
IP address blocks: 2803:f080:2160::/43 maxlen: 64
Validation: Failed, certificate revoked on Sun 30 Mar 2025 03:50:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:5b:1d:d5:ac:26:cd:c0:20:96:55:dc:77:e3:96:92:73:62:01:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Validity
Not Before: Mar 22 03:55:00 2025 GMT
Not After : Mar 21 04:00:00 2026 GMT
Subject: CN=8ED028427AEF266B54E2EDEF3730F9CC6FD1EC10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:19:29:27:3f:f2:96:da:3f:09:61:e6:48:8c:
aa:a5:5e:c6:9f:35:83:9b:4f:82:09:0c:0e:f8:eb:
38:51:67:eb:0b:29:43:75:de:f9:42:cc:4b:4a:8d:
8e:c6:71:be:88:a6:2a:d0:f0:8e:a8:f0:0a:e7:24:
a1:f4:a8:e5:e1:b6:cd:4f:03:fa:54:d4:17:60:84:
ff:25:41:f1:26:f7:aa:88:da:d9:c2:1a:f9:c7:38:
8f:3d:9a:ed:3e:e2:b1:be:1f:07:4c:42:8c:27:d0:
05:88:36:1a:bf:9f:53:52:bd:d7:ad:4e:f2:29:ee:
16:7b:88:c5:bc:d9:19:bb:ae:15:0a:95:5e:9a:48:
f7:f8:03:d1:3e:08:1b:ce:17:c6:75:e4:25:18:66:
a6:26:dd:c9:9c:66:3e:cf:35:24:89:ed:02:03:8e:
fe:10:5c:f0:c6:6d:7f:30:32:6e:e4:e5:64:80:42:
e6:c8:62:93:1f:1c:19:a5:e4:d5:a8:7b:d0:48:73:
b1:68:5e:c8:f6:01:54:85:06:7f:6e:7b:b3:71:56:
c4:b7:21:c3:ee:48:8d:24:c4:5d:bf:79:7c:dc:e7:
4c:2a:38:10:c9:6c:36:0b:36:3a:b7:f5:bf:f3:d8:
e8:a8:0d:79:67:82:f8:c1:5d:ab:30:5f:6b:d3:e4:
ea:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D0:28:42:7A:EF:26:6B:54:E2:ED:EF:37:30:F9:CC:6F:D1:EC:10
X509v3 Authority Key Identifier:
keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323136303a3a2f34332d3634203d3e203634313230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:f080:2160::/43
Signature Algorithm: sha256WithRSAEncryption
18:81:2f:10:44:7e:ab:95:7d:4e:35:8a:40:fe:58:1b:ee:3f:
44:d7:77:e7:17:b0:97:23:9f:e7:b8:4f:7f:24:ef:f2:d7:37:
ad:b4:96:94:04:53:64:d3:fe:be:aa:ee:a7:ee:a6:d7:f8:ee:
4d:fa:55:8c:6b:0b:cc:1b:81:7a:24:88:ad:df:d2:10:7c:8b:
9a:f2:88:e5:9b:54:c2:98:4e:a8:c8:0c:ba:7b:5a:d1:5d:8e:
be:f8:64:60:87:ee:51:00:b8:46:ba:fb:c5:b2:a5:bd:27:59:
ff:56:ff:16:e3:14:3a:e1:56:cb:4a:44:ad:30:20:29:08:1d:
d4:0d:5a:67:a1:a8:a3:39:26:7f:e3:95:4a:20:23:7a:dc:27:
85:85:b4:ea:3f:9a:19:bc:d2:ec:8d:60:9c:3a:12:56:82:67:
f4:ec:80:11:fd:81:fa:9b:ac:69:19:c2:45:36:f7:f2:38:36:
bc:cc:b9:5f:36:1a:e0:77:f1:d6:e0:d7:08:21:32:12:51:0d:
bf:de:ec:22:fa:32:e8:a7:a2:73:47:32:7f:c4:08:05:52:94:
67:70:f4:30:3d:75:87:38:fa:9f:c3:d8:89:55:2a:d9:fc:5a:
a4:3c:3a:12:a0:10:2b:2e:86:2f:68:77:66:44:00:45:18:a4:
a7:e2:34:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 08:37:44 2025 by rpki-client