Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B9F88FEFA10AD3C74FA5F98AFBCD23FC6FAA4C78F1D4EB18464ED3704CACA7DC/0/3230312e3135302e39392e302f32342d3234203d3e20323632313931.roa
File: 3230312e3135302e39392e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier: SyzgckhIPv5T/x5eKo1gt3NYKejflAIfybPv7p9YxYk=
Subject key identifier: FE:64:F0:0A:5E:A8:E1:71:51:55:39:34:51:97:DA:84:4E:7A:0F:03
Certificate issuer: /CN=6FE8D9F326C94974AC24CD1CC75E4E49EFAF1CFF
Certificate serial: 607CF3729D000DC488684E212307152ADF6825EC
Authority key identifier: 6F:E8:D9:F3:26:C9:49:74:AC:24:CD:1C:C7:5E:4E:49:EF:AF:1C:FF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6FE8D9F326C94974AC24CD1CC75E4E49EFAF1CFF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B9F88FEFA10AD3C74FA5F98AFBCD23FC6FAA4C78F1D4EB18464ED3704CACA7DC/0/3230312e3135302e39392e302f32342d3234203d3e20323632313931.roa
Signing time: Thu 06 Mar 2025 14:35:00 +0000
ROA not before: Thu 06 Mar 2025 14:30:00 +0000
ROA not after: Thu 05 Mar 2026 14:35:00 +0000
asID: 262191
IP address blocks: 201.150.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Mar 2025 19:05:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:7c:f3:72:9d:00:0d:c4:88:68:4e:21:23:07:15:2a:df:68:25:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FE8D9F326C94974AC24CD1CC75E4E49EFAF1CFF
Validity
Not Before: Mar 6 14:30:00 2025 GMT
Not After : Mar 5 14:35:00 2026 GMT
Subject: CN=FE64F00A5EA8E171515539345197DA844E7A0F03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:45:ff:6b:cc:74:7f:01:2b:e4:8c:b6:42:6a:
5e:f6:29:97:c7:12:ef:ed:21:29:71:6a:98:79:76:
4f:7b:51:14:b7:53:83:fe:73:97:7c:cf:25:9c:09:
28:eb:c0:a3:6f:61:ed:6e:00:51:45:5c:8b:a9:ea:
d6:aa:c3:d1:87:2c:31:e1:37:10:af:cd:3f:58:d0:
29:b1:06:c1:b6:63:8c:d3:d4:d9:b3:76:b4:b8:50:
d5:90:98:21:72:13:03:53:4f:47:0b:a9:6b:94:6d:
11:61:21:71:eb:cf:cb:c8:3c:f7:d2:97:83:8e:6b:
c4:df:70:95:fd:22:bd:d9:af:78:ce:05:f5:13:0c:
9d:30:a4:00:95:a8:95:95:eb:9b:41:d9:16:12:01:
dd:71:76:e8:50:41:82:72:ad:70:2c:ab:3d:f4:81:
0e:11:8c:5e:eb:7b:a9:f3:89:5c:f0:4b:ba:99:68:
a5:7a:bb:12:fa:9a:88:75:1a:ae:cc:fb:98:e1:41:
fa:af:1d:38:68:32:9f:76:29:45:57:88:05:ee:3c:
ae:95:25:73:67:c2:a7:6d:83:ae:56:16:4f:a0:3a:
b9:eb:f6:3d:bc:2e:98:7b:4d:57:af:d2:95:18:5a:
39:28:a4:9e:ea:52:f9:8e:f3:7a:f3:c1:7a:93:05:
44:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:64:F0:0A:5E:A8:E1:71:51:55:39:34:51:97:DA:84:4E:7A:0F:03
X509v3 Authority Key Identifier:
keyid:6F:E8:D9:F3:26:C9:49:74:AC:24:CD:1C:C7:5E:4E:49:EF:AF:1C:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B9F88FEFA10AD3C74FA5F98AFBCD23FC6FAA4C78F1D4EB18464ED3704CACA7DC/0/6FE8D9F326C94974AC24CD1CC75E4E49EFAF1CFF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6FE8D9F326C94974AC24CD1CC75E4E49EFAF1CFF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B9F88FEFA10AD3C74FA5F98AFBCD23FC6FAA4C78F1D4EB18464ED3704CACA7DC/0/3230312e3135302e39392e302f32342d3234203d3e20323632313931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.150.99.0/24
Signature Algorithm: sha256WithRSAEncryption
25:07:7f:50:5d:35:a1:8f:db:c3:ea:76:59:1d:da:7d:2e:74:
c1:fa:37:98:74:89:a8:11:52:37:a5:e0:53:9a:82:6f:56:5e:
7f:ac:12:6d:d5:6c:09:0e:fe:f6:16:8d:97:d2:c3:8d:43:e1:
3a:dc:86:7b:72:57:9e:30:91:40:e4:07:3d:d2:4f:f8:df:c2:
31:7f:e4:c3:98:8b:65:79:77:4e:53:4c:d7:a3:76:b1:e6:38:
b2:2c:a9:5c:ff:17:ed:d3:7c:57:e1:47:1d:00:08:1a:92:24:
91:93:c3:17:ca:52:a7:3d:ee:52:1f:f1:f1:55:c2:31:ca:e1:
23:bc:c9:3f:a8:2f:2b:a6:64:a7:04:b4:21:bd:c4:46:7b:03:
8a:d1:46:59:40:5a:db:ff:e1:f4:ee:cb:51:94:36:70:e1:b7:
dd:bf:0f:8a:a8:fa:9e:8e:fc:03:fe:61:26:9c:96:19:f6:9f:
8c:ff:aa:8f:43:6d:ae:f5:e2:04:2b:50:7e:eb:7d:df:b4:7a:
a4:48:aa:9e:15:fc:5d:f0:fb:e5:5b:78:51:f4:3e:03:a9:65:
af:ff:30:5c:34:10:28:21:42:ad:3d:e4:d6:c1:46:53:79:0d:
13:88:f1:3b:83:fd:24:c9:a3:b3:4b:ae:c6:33:a8:b1:62:eb:
71:13:b0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:25 2025 by rpki-client