Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/34352e3137362e3139312e302f32342d3234203d3e203233343730.roa
File: 34352e3137362e3139312e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier: Ov2hmS0r+6qn2OifzGPp+oHnTlti++Kpn5AnFeVYGVs=
Subject key identifier: C1:22:D7:B5:BE:DD:AD:9A:79:ED:FC:E5:69:83:B6:41:24:68:BC:ED
Certificate issuer: /CN=94E9005D15C15058534566156E00BB03244C911D
Certificate serial: 24437654049FFE5F46BC2697B19FCC6F13E0CB7B
Authority key identifier: 94:E9:00:5D:15:C1:50:58:53:45:66:15:6E:00:BB:03:24:4C:91:1D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94E9005D15C15058534566156E00BB03244C911D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/34352e3137362e3139312e302f32342d3234203d3e203233343730.roa
Signing time: Fri 26 Apr 2024 18:25:00 +0000
ROA not before: Fri 26 Apr 2024 18:20:00 +0000
ROA not after: Fri 25 Apr 2025 18:25:00 +0000
asID: 23470
IP address blocks: 45.176.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 26 Jan 2025 01:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:43:76:54:04:9f:fe:5f:46:bc:26:97:b1:9f:cc:6f:13:e0:cb:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94E9005D15C15058534566156E00BB03244C911D
Validity
Not Before: Apr 26 18:20:00 2024 GMT
Not After : Apr 25 18:25:00 2025 GMT
Subject: CN=C122D7B5BEDDAD9A79EDFCE56983B6412468BCED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d8:ae:6e:45:2f:bc:35:84:66:28:7f:e2:ea:
da:72:73:ec:02:d2:9c:93:38:3e:34:0b:f4:24:2d:
1b:1e:44:cd:78:81:79:b0:a1:1b:10:03:25:aa:ef:
63:42:6f:77:48:30:5b:a7:97:dc:dc:74:5c:71:ce:
ab:8f:46:5b:ac:b6:79:58:8a:16:5a:d4:7c:13:2f:
e3:c7:a4:af:70:26:5e:d6:44:31:e2:46:4d:05:f1:
78:0c:0e:aa:7d:ea:ef:c5:5b:76:52:25:14:c3:a1:
55:9a:3f:1d:cc:7b:2b:36:0e:62:4e:dc:83:d1:f5:
b8:83:10:b7:2d:2b:5a:7d:08:11:70:d4:85:f0:37:
d0:f9:cd:dd:65:d7:91:80:ec:51:cd:8f:9f:33:53:
11:41:85:ac:8e:2e:9a:44:22:84:50:46:9c:b7:7d:
db:2c:ce:c7:4a:63:6c:71:63:55:56:e3:96:71:3d:
ab:dd:af:2f:57:8d:41:50:cb:d2:6f:0f:91:ee:ee:
c4:7d:5a:4d:b7:1a:07:00:61:9b:74:de:48:99:35:
66:b6:82:99:58:cb:61:f3:63:90:82:37:8c:28:f6:
1a:73:74:3b:c3:91:07:e9:ce:36:37:5b:6b:54:ee:
60:73:3c:62:a8:6f:51:36:9f:f1:36:66:cb:87:f9:
de:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:22:D7:B5:BE:DD:AD:9A:79:ED:FC:E5:69:83:B6:41:24:68:BC:ED
X509v3 Authority Key Identifier:
keyid:94:E9:00:5D:15:C1:50:58:53:45:66:15:6E:00:BB:03:24:4C:91:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/94E9005D15C15058534566156E00BB03244C911D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94E9005D15C15058534566156E00BB03244C911D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/34352e3137362e3139312e302f32342d3234203d3e203233343730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.176.191.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:35:09:f5:19:ed:e1:ef:26:88:cd:04:03:6d:45:38:9d:be:
39:ce:d9:1c:94:20:84:fc:07:ae:2e:c9:9c:c1:d0:77:11:dc:
3e:30:a7:c1:07:c6:ba:b1:a6:7d:c7:35:cc:3c:1d:54:8e:43:
7f:ed:59:51:1f:f6:48:9e:54:7f:fa:6c:fa:ea:36:2a:0e:47:
60:1c:5a:02:70:0d:78:af:84:d0:0e:5d:b8:66:7d:ca:27:f5:
f8:f9:c6:c5:b0:c2:f8:05:7e:e8:1f:8a:02:e0:bd:e7:c7:c6:
f0:3e:74:74:d6:3b:c6:36:26:5b:00:b6:68:19:49:59:b5:77:
34:d5:17:ae:38:aa:05:eb:35:fb:21:6a:99:47:39:78:47:c6:
07:de:dc:9e:35:7c:1a:9d:e7:d0:6b:d1:15:8d:6d:b0:75:82:
0d:76:3a:26:fd:b5:23:8b:b2:f9:27:15:38:83:69:38:74:38:
70:6c:03:dd:7b:f0:3b:12:df:20:5f:66:b8:1f:41:33:9c:fb:
2c:f9:07:67:72:2e:1f:ce:9b:e2:4f:fc:a3:e1:f0:e4:ea:43:
4b:aa:36:cc:27:9e:32:c6:bb:9f:bb:29:dd:e1:96:03:d3:68:
06:3b:84:d6:5a:93:38:2c:1b:25:3f:92:62:f1:b4:a6:fd:13:
00:25:c6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:53:01 2025 by rpki-client