Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/34352e3233392e34352e302f32342d3234203d3e20323636383538.roa
File: 34352e3233392e34352e302f32342d3234203d3e20323636383538.roa (raw, json)
Hash identifier: O5XntlZT5jmOqlk80fFi6nZSH+8TREr2c/u9U/NF1yU=
Subject key identifier: 18:8D:96:CC:CF:71:1D:7A:8B:66:85:7D:F2:76:F8:A8:97:44:8C:EF
Certificate issuer: /CN=8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1
Certificate serial: 662E3C7B1D8F31D02275B168D7AB3956221EC3A0
Authority key identifier: 8A:B8:9B:D2:DC:DA:B7:BD:FF:8F:56:8C:10:0B:26:8C:A2:2E:6B:C1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/34352e3233392e34352e302f32342d3234203d3e20323636383538.roa
Signing time: Tue 04 Feb 2025 18:23:12 +0000
ROA not before: Tue 04 Feb 2025 18:18:12 +0000
ROA not after: Tue 03 Feb 2026 18:23:12 +0000
asID: 266858
IP address blocks: 45.239.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Apr 2025 16:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:2e:3c:7b:1d:8f:31:d0:22:75:b1:68:d7:ab:39:56:22:1e:c3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1
Validity
Not Before: Feb 4 18:18:12 2025 GMT
Not After : Feb 3 18:23:12 2026 GMT
Subject: CN=188D96CCCF711D7A8B66857DF276F8A897448CEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5d:fb:f3:31:82:af:37:71:f1:51:91:de:6a:
b2:8b:af:9e:06:96:ef:65:8e:37:ee:10:80:ec:87:
29:d3:41:a8:4e:c7:c5:97:90:08:5a:14:d8:14:6f:
cd:85:0f:40:96:16:9c:a7:6c:1b:92:b3:b1:60:91:
e2:83:75:f1:2b:48:17:e1:36:7f:f5:65:4e:13:fc:
ec:d1:f2:ec:8b:f2:f1:2f:64:bd:a2:de:08:05:8a:
d7:88:5f:5b:43:5a:8c:5f:dc:54:b8:3b:b3:38:54:
da:98:0c:a0:bb:30:18:c8:b7:91:68:4d:a8:57:7c:
bb:ce:25:60:74:9a:e9:1b:50:13:28:5a:97:bc:9d:
1e:dd:44:bc:f6:cd:ee:fa:f7:f2:38:8b:1d:c1:09:
41:96:73:5a:54:1a:69:19:65:6f:8a:bb:d6:75:57:
d0:e5:51:b4:33:14:12:ba:81:4e:c7:0d:e9:43:2c:
e9:5b:98:03:e5:8f:32:c1:3b:00:74:20:78:30:2c:
7f:6a:15:3d:b0:f3:cf:96:40:f3:2a:17:2a:84:c0:
23:b4:14:f1:c7:d4:bc:fc:30:08:0b:a2:52:fd:f8:
12:35:5f:f9:65:92:e6:65:26:b6:e9:f5:c9:7e:9a:
30:a3:50:93:3e:8b:84:90:47:03:fb:81:63:bf:fe:
69:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8D:96:CC:CF:71:1D:7A:8B:66:85:7D:F2:76:F8:A8:97:44:8C:EF
X509v3 Authority Key Identifier:
keyid:8A:B8:9B:D2:DC:DA:B7:BD:FF:8F:56:8C:10:0B:26:8C:A2:2E:6B:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/34352e3233392e34352e302f32342d3234203d3e20323636383538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.45.0/24
Signature Algorithm: sha256WithRSAEncryption
37:94:44:07:bc:fb:64:48:69:37:35:80:cf:66:a7:9c:26:48:
14:e6:ab:75:13:63:06:2e:d5:a2:85:a6:83:0a:9d:02:46:e7:
ec:bc:95:46:d2:02:3e:3b:64:81:b9:c1:fd:8f:3c:88:18:41:
c5:9b:84:1d:93:f4:bc:81:02:28:f3:72:1e:37:d3:72:c0:05:
a6:fb:52:9c:79:cf:f2:9b:4c:7b:b7:fb:64:0c:a4:97:f0:74:
d7:62:55:67:4c:9f:d7:d3:6f:f5:d0:56:b3:16:f5:78:77:9e:
68:97:91:6d:44:b3:4c:29:df:79:40:c7:ac:89:c5:4e:67:7e:
9f:40:aa:14:b5:6f:2e:4f:86:a1:23:83:b3:5d:0c:6f:85:c8:
75:f8:7a:10:70:14:5c:d0:e1:2f:44:c9:6f:14:3f:8b:00:42:
82:ee:ad:c0:a5:15:56:f1:7f:4f:2a:92:1c:6b:30:bc:55:e1:
02:5d:48:4a:5a:14:90:5a:a6:71:6b:29:95:6a:41:ad:d0:1f:
06:00:45:06:c0:89:32:ee:53:6f:f5:a3:93:d6:29:87:c2:3f:
75:08:78:77:d4:75:dd:c9:63:4f:a9:35:5a:17:e9:69:b2:9d:
81:fe:11:71:59:40:bc:05:c7:f2:5f:1e:5b:e8:f7:5a:c5:3c:
19:14:e2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:25:50 2025 by rpki-client