Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BF9F051410575ACCCCAE92F9A4CE082A11A8172C79F9F63E2963ED7ACC2786CB/0/323830313a31643a383830313a3a2f34382d3438203d3e203133343839.roa
File: 323830313a31643a383830313a3a2f34382d3438203d3e203133343839.roa (raw, json)
Hash identifier: VyUrEfbMv+eIo1wfoRygKn6JkfKDX8pFw3oWWh7vaPM=
Subject key identifier: F8:AA:56:DA:1D:E6:28:BE:11:DD:41:23:E5:C0:25:BB:53:D7:87:A2
Certificate issuer: /CN=9E00446F94CC33DA37B373FAFF13F7E5B22B8813
Certificate serial: 163366D826760675C84F6BF2D9E567FE61A03C43
Authority key identifier: 9E:00:44:6F:94:CC:33:DA:37:B3:73:FA:FF:13:F7:E5:B2:2B:88:13
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E00446F94CC33DA37B373FAFF13F7E5B22B8813.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BF9F051410575ACCCCAE92F9A4CE082A11A8172C79F9F63E2963ED7ACC2786CB/0/323830313a31643a383830313a3a2f34382d3438203d3e203133343839.roa
Signing time: Tue 07 Jan 2025 15:25:00 +0000
ROA not before: Tue 07 Jan 2025 15:20:00 +0000
ROA not after: Tue 06 Jan 2026 15:25:00 +0000
asID: 13489
IP address blocks: 2801:1d:8801::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 13 Jan 2025 14:20:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:33:66:d8:26:76:06:75:c8:4f:6b:f2:d9:e5:67:fe:61:a0:3c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E00446F94CC33DA37B373FAFF13F7E5B22B8813
Validity
Not Before: Jan 7 15:20:00 2025 GMT
Not After : Jan 6 15:25:00 2026 GMT
Subject: CN=F8AA56DA1DE628BE11DD4123E5C025BB53D787A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d2:31:22:75:cf:9c:9c:83:27:c0:3d:59:2f:
e9:1d:e6:7c:38:84:82:a8:53:9f:42:a6:89:6c:62:
80:21:5e:94:f1:f8:32:d4:4a:f1:ea:08:b6:a0:13:
9d:a9:e9:56:12:d3:f4:bb:e2:cb:3c:91:e9:f8:aa:
d3:b3:0a:21:72:6e:db:ad:73:c4:6e:a2:d7:2e:c9:
cf:00:3c:4c:1a:6e:55:2b:03:49:ef:c2:ab:22:09:
60:16:88:ce:d2:1e:54:87:58:88:ee:83:01:9f:7a:
1b:4f:a7:80:55:74:4e:3e:09:2d:7b:15:81:31:db:
76:b4:05:97:93:2b:23:b0:17:13:86:b2:4d:f0:dd:
4c:9f:d4:c2:55:47:87:f3:63:9d:cd:71:41:4a:5b:
63:97:da:81:49:e3:68:c4:10:fd:d6:aa:a8:bb:92:
93:ac:c8:7e:dc:17:04:77:75:c4:ab:c0:6d:90:ec:
4a:09:1e:96:21:24:61:f6:aa:a0:fd:42:eb:05:af:
12:b2:e4:57:07:65:9b:11:81:41:af:fd:56:a0:ec:
b7:8e:6c:b9:c9:d1:c4:31:47:23:1c:2f:dd:af:e0:
5e:60:fa:a3:8d:23:ef:8b:3a:64:da:fb:12:c2:9c:
94:2f:23:fe:44:ed:21:75:95:2d:41:73:1d:46:ef:
ee:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AA:56:DA:1D:E6:28:BE:11:DD:41:23:E5:C0:25:BB:53:D7:87:A2
X509v3 Authority Key Identifier:
keyid:9E:00:44:6F:94:CC:33:DA:37:B3:73:FA:FF:13:F7:E5:B2:2B:88:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BF9F051410575ACCCCAE92F9A4CE082A11A8172C79F9F63E2963ED7ACC2786CB/0/9E00446F94CC33DA37B373FAFF13F7E5B22B8813.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E00446F94CC33DA37B373FAFF13F7E5B22B8813.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BF9F051410575ACCCCAE92F9A4CE082A11A8172C79F9F63E2963ED7ACC2786CB/0/323830313a31643a383830313a3a2f34382d3438203d3e203133343839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1d:8801::/48
Signature Algorithm: sha256WithRSAEncryption
35:98:15:22:df:3a:c6:18:52:8f:19:02:5d:50:df:c8:a5:2e:
87:ce:a7:fb:b6:ae:1f:d6:c8:dd:ab:13:c5:6e:93:33:39:3a:
b1:07:67:a0:9a:57:ff:06:cb:c2:7d:df:64:45:f0:f6:ea:46:
be:45:fe:01:6b:0a:a9:bb:75:ba:cb:75:f9:69:4b:58:8a:74:
e3:ee:71:86:4e:63:b8:ab:68:f9:22:1e:54:49:5b:2b:8e:86:
c7:74:53:3a:ab:f7:83:d7:58:21:f0:20:54:dd:d3:69:3f:21:
d1:ea:5c:61:a3:d4:ee:4b:a8:a2:16:c4:ec:7c:62:c0:2c:19:
8e:2d:2f:52:54:ba:c7:7d:16:c7:da:9c:a3:50:50:44:e4:9d:
00:03:92:5e:09:2a:36:88:9b:7d:07:94:de:46:3e:b6:02:84:
f2:fe:c6:a4:7b:36:18:03:f9:2f:67:33:a0:f3:d3:b3:46:b0:
bb:11:ed:26:a0:4d:8a:5d:d1:cd:cb:cc:f8:af:56:b3:c9:2e:
82:00:30:e2:2b:fa:5b:72:5a:74:71:ff:e5:d6:bb:f9:5a:bd:
b0:ac:c5:60:fb:01:24:4c:80:fb:4c:ba:32:8a:a9:00:c0:b9:
32:8c:80:af:d4:26:eb:d4:26:41:5d:14:47:b8:95:57:69:84:
62:1a:ea:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:28:06 2025 by rpki-client