Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/3137302e3234362e39302e302f32342d3234203d3e20323635363339.roa
File: 3137302e3234362e39302e302f32342d3234203d3e20323635363339.roa (raw, json)
Hash identifier: 3tJkTZTQUKcH8K/NW0jJ6D/GxaXwZ6/4wbnfDiB8oNk=
Subject key identifier: 97:98:B3:E3:24:93:FA:1E:10:AF:24:61:C5:2E:E1:EB:DD:9C:41:8C
Certificate issuer: /CN=977DAB0EC7A954C08AF09602FA1EA52D5912541B
Certificate serial: 11389884A50FA14E6E9F06B7464387802E6F37EC
Authority key identifier: 97:7D:AB:0E:C7:A9:54:C0:8A:F0:96:02:FA:1E:A5:2D:59:12:54:1B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/3137302e3234362e39302e302f32342d3234203d3e20323635363339.roa
Signing time: Tue 05 Mar 2024 17:54:27 +0000
ROA not before: Tue 05 Mar 2024 17:49:27 +0000
ROA not after: Tue 04 Mar 2025 17:54:27 +0000
asID: 265639
IP address blocks: 170.246.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:38:98:84:a5:0f:a1:4e:6e:9f:06:b7:46:43:87:80:2e:6f:37:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977DAB0EC7A954C08AF09602FA1EA52D5912541B
Validity
Not Before: Mar 5 17:49:27 2024 GMT
Not After : Mar 4 17:54:27 2025 GMT
Subject: CN=9798B3E32493FA1E10AF2461C52EE1EBDD9C418C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5c:fd:fc:d4:51:16:e1:64:bc:c7:6b:dd:4d:
4e:79:9e:c4:94:05:e7:13:e5:aa:c6:07:85:40:75:
71:d1:ff:f5:de:e3:28:17:0a:ed:62:a3:28:a6:22:
1c:79:b9:4d:bb:ba:f5:d9:c9:bd:44:18:a0:eb:d5:
07:6e:59:fd:06:97:42:54:9d:53:f6:c2:dc:32:a8:
c2:21:f4:bd:6a:a2:95:0e:9a:62:be:2c:e2:de:01:
1e:19:e4:8d:78:db:11:65:40:f1:00:f2:76:ed:a2:
98:2c:40:93:ec:43:45:7a:b0:d6:b8:80:ce:8c:ec:
0c:4f:14:21:c1:0e:a4:e4:0a:fe:65:36:f7:39:4c:
bf:7d:79:d3:b5:41:78:e3:2e:4f:4b:b5:e1:3f:78:
2f:84:46:7a:4b:43:35:9f:d4:43:bf:74:48:8d:c3:
65:eb:4c:3c:65:9e:39:0e:7b:b1:79:60:77:38:7a:
d7:59:df:1f:87:da:55:02:65:97:bf:e0:19:2f:2f:
7b:68:96:ac:b9:93:67:fe:00:74:67:19:0a:20:75:
5c:3e:d4:1a:b0:92:e7:9c:2c:c9:24:26:af:0d:65:
4a:d1:62:cb:03:ca:4a:0a:0c:be:29:00:44:fc:dc:
e7:c4:7a:6c:70:39:ab:af:b0:7c:d6:86:c2:c8:fb:
0b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:98:B3:E3:24:93:FA:1E:10:AF:24:61:C5:2E:E1:EB:DD:9C:41:8C
X509v3 Authority Key Identifier:
keyid:97:7D:AB:0E:C7:A9:54:C0:8A:F0:96:02:FA:1E:A5:2D:59:12:54:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/3137302e3234362e39302e302f32342d3234203d3e20323635363339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.246.90.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:25:de:f7:f5:07:4c:94:d1:eb:b7:48:03:83:5f:ed:97:85:
c9:e1:02:c2:2d:e1:f8:b9:bb:81:7f:2a:30:67:d4:a9:35:ab:
ee:53:e7:2f:67:b4:c4:07:41:96:c8:bb:c4:31:74:f0:f9:21:
23:8f:b3:d2:52:3c:23:87:95:89:04:e2:73:7b:26:01:49:fd:
65:71:d8:84:7c:73:c0:b1:d2:19:7d:10:8d:36:b5:4f:69:0a:
ba:87:ec:65:92:af:2f:7c:f6:e8:f1:19:ef:7c:04:31:b0:6d:
fa:d4:8e:48:cf:e0:7d:13:c7:e0:78:df:c7:7a:d3:c3:9a:43:
48:d5:3b:4a:bc:6d:63:00:96:fa:e2:48:a1:fc:a1:d0:53:ac:
d6:7b:1a:c9:82:89:3c:8f:42:08:a6:bf:96:28:75:d8:ef:50:
48:dd:2a:19:f0:d1:77:75:da:20:46:51:c7:e2:52:d3:f5:06:
39:13:4d:bd:bd:ed:c6:e5:92:b0:24:fd:7e:4f:91:f4:02:a6:
8e:df:06:c7:3a:b2:07:99:11:bb:93:e7:fd:67:d2:13:0a:19:
20:cf:9b:f8:bd:08:30:ec:cf:92:86:de:7e:4f:2f:2f:c4:d0:
58:82:5d:ec:5c:9d:c0:9f:74:86:45:a6:cb:e1:28:95:7a:3b:
d9:3c:4d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:46 2025 by rpki-client