Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/3137392e36332e3139312e302f32342d3234203d3e20323733323434.roa
File: 3137392e36332e3139312e302f32342d3234203d3e20323733323434.roa (raw, json)
Hash identifier: zjEvlBSn9RSIYuLT8rjg6or3zA+68xAxPdwqVqSgn/4=
Subject key identifier: 33:84:25:58:AD:F8:00:CB:C2:4E:E1:C8:1B:69:E7:F8:C8:5F:14:0C
Certificate issuer: /CN=4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A
Certificate serial: 08909BC797793FD4D5079E0A758AA97FD7A03545
Authority key identifier: 4B:16:7B:48:38:74:A1:27:B2:C4:F0:C2:AC:D9:F1:EF:CD:B0:21:0A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/3137392e36332e3139312e302f32342d3234203d3e20323733323434.roa
Signing time: Fri 20 Dec 2024 15:00:00 +0000
ROA not before: Fri 20 Dec 2024 14:55:00 +0000
ROA not after: Fri 19 Dec 2025 15:00:00 +0000
asID: 273244
IP address blocks: 179.63.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Feb 2025 22:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:90:9b:c7:97:79:3f:d4:d5:07:9e:0a:75:8a:a9:7f:d7:a0:35:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A
Validity
Not Before: Dec 20 14:55:00 2024 GMT
Not After : Dec 19 15:00:00 2025 GMT
Subject: CN=33842558ADF800CBC24EE1C81B69E7F8C85F140C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5a:ca:c8:1b:96:66:ca:06:1e:67:27:de:cd:
25:07:cd:e6:92:09:5c:2c:86:18:a9:98:60:67:27:
cd:d3:66:a0:fd:02:36:16:02:d2:6e:6c:6a:39:81:
f5:43:16:16:57:17:20:0d:10:71:85:a0:89:5c:65:
86:cc:cb:76:6d:dd:5d:64:8b:eb:c7:33:29:33:ee:
3d:70:8f:5a:11:8c:c8:94:99:4e:b7:d9:20:00:f4:
98:55:93:41:76:8a:11:ce:bb:89:9c:33:df:7c:dd:
0a:03:68:3a:27:be:bb:01:b9:34:f0:fb:3a:83:ff:
44:63:c2:3c:69:70:c1:49:cc:10:66:8a:dc:2e:2d:
33:aa:b4:8d:ce:dc:41:ae:da:f5:dd:bb:83:77:83:
18:0d:0d:ef:f5:a7:72:40:10:a9:1b:fa:d5:f0:04:
bb:4c:93:9c:d2:dc:38:47:a4:41:57:ef:ff:1c:b6:
7b:6b:49:59:3e:02:17:18:bd:28:25:ac:45:bf:19:
a7:0f:e0:5c:ab:7b:89:3d:3d:d1:49:15:c1:7c:79:
3a:e0:98:de:53:b0:cf:a1:f5:01:a2:a3:60:40:e4:
7e:04:86:17:a2:4e:08:0f:dd:c2:23:9d:af:a9:26:
84:31:32:90:23:13:26:eb:30:b5:6a:56:4d:0e:65:
7e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:84:25:58:AD:F8:00:CB:C2:4E:E1:C8:1B:69:E7:F8:C8:5F:14:0C
X509v3 Authority Key Identifier:
keyid:4B:16:7B:48:38:74:A1:27:B2:C4:F0:C2:AC:D9:F1:EF:CD:B0:21:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/3137392e36332e3139312e302f32342d3234203d3e20323733323434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.63.191.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:4f:04:4c:c4:1a:7f:46:af:2b:2d:60:82:b9:7e:5d:a3:95:
33:8f:68:d2:ad:c0:d2:43:23:95:b3:d0:95:5e:88:8d:27:28:
ca:ac:3c:f6:9c:23:9a:4e:27:ab:6e:8f:08:97:1e:c7:1c:80:
6c:a1:eb:c1:88:40:e1:ac:82:af:d5:13:d2:81:fb:dd:06:b3:
77:0b:ba:a1:f9:68:ab:76:60:c1:66:dc:3e:33:66:a2:99:9c:
a8:e2:a8:6f:14:33:5a:e8:e2:a1:c8:a1:68:aa:08:19:92:d9:
6b:1c:2c:2f:70:55:b3:f3:54:d1:d1:1a:ae:07:2e:2c:43:06:
3e:06:7c:4e:1f:21:db:f7:ff:4c:c3:68:f7:0c:4f:fb:22:77:
ac:39:b2:67:42:94:d1:2d:42:6b:92:c6:92:fa:7e:15:5d:a7:
99:9f:27:e6:7a:0d:a4:9f:26:46:c4:9f:60:28:e2:c5:69:45:
81:fb:a2:28:44:33:80:54:1d:f7:4a:79:a3:56:60:0c:55:ec:
ef:6d:5e:8c:db:60:7a:d2:20:82:a3:75:7a:30:26:83:bd:01:
63:83:ec:98:a5:0f:e3:28:53:dc:1e:ec:42:79:c4:fe:99:b7:
7c:20:55:3b:ba:2d:97:33:7f:11:91:7e:3f:88:30:1e:d4:f2:
35:d5:ed:00
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUCJCbx5d5P9TVB54KdYqpf9egNUUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEIxNjdCNDgzODc0QTEyN0IyQzRGMEMyQUNEOUYxRUZD
REIwMjEwQTAeFw0yNDEyMjAxNDU1MDBaFw0yNTEyMTkxNTAwMDBaMDMxMTAvBgNV
BAMTKDMzODQyNTU4QURGODAwQ0JDMjRFRTFDODFCNjlFN0Y4Qzg1RjE0MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUWsrIG5ZmygYeZyfezSUHzeaS
CVwshhipmGBnJ83TZqD9AjYWAtJubGo5gfVDFhZXFyANEHGFoIlcZYbMy3Zt3V1k
i+vHMykz7j1wj1oRjMiUmU632SAA9JhVk0F2ihHOu4mcM9983QoDaDonvrsBuTTw
+zqD/0RjwjxpcMFJzBBmitwuLTOqtI3O3EGu2vXdu4N3gxgNDe/1p3JAEKkb+tXw
BLtMk5zS3DhHpEFX7/8ctntrSVk+AhcYvSglrEW/GacP4Fyre4k9PdFJFcF8eTrg
mN5TsM+h9QGio2BA5H4EhheiTggP3cIjna+pJoQxMpAjEybrMLVqVk0OZX7zAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUM4QlWK34AMvCTuHIG2nn+MhfFAwwHwYDVR0j
BBgwFoAUSxZ7SDh0oSeyxPDCrNnx782wIQowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNzFERjhFODM5QUYzNDMxMkREN0Q3MUZCMzk5MDc4NDJG
RDI3REU3RUMxQjMzMTgyOUZGMTgyRTFBMTBDM0U5LzAvNEIxNjdCNDgzODc0QTEy
N0IyQzRGMEMyQUNEOUYxRUZDREIwMjEwQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80QjE2N0I0ODM4NzRBMTI3QjJD
NEYwQzJBQ0Q5RjFFRkNEQjAyMTBBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjcxREY4RTgzOUFGMzQzMTJERDdENzFGQjM5OTA3ODQyRkQyN0RFN0VD
MUIzMzE4MjlGRjE4MkUxQTEwQzNFOS8wLzMxMzczOTJlMzYzMzJlMzEzOTMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMzMzIzNDM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsz+/
MA0GCSqGSIb3DQEBCwUAA4IBAQArTwRMxBp/Rq8rLWCCuX5do5Uzj2jSrcDSQyOV
s9CVXoiNJyjKrDz2nCOaTierbo8Ilx7HHIBsoevBiEDhrIKv1RPSgfvdBrN3C7qh
+WirdmDBZtw+M2aimZyo4qhvFDNa6OKhyKFoqggZktlrHCwvcFWz81TR0RquBy4s
QwY+BnxOHyHb9/9Mw2j3DE/7InesObJnQpTRLUJrksaS+n4VXaeZnyfmeg2knyZG
xJ9gKOLFaUWB+6IoRDOAVB33SnmjVmAMVezvbV6M22B60iCCo3V6MCaDvQFjg+yY
pQ/jKFPcHuxCecT+mbd8IFU7ui2XM38RkX4/iDAe1PI11e0A
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:00:15 2025 by rpki-client