Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a3a2f33322d3332203d3e20323730313635.roa
File: 323830363a3365623a3a2f33322d3332203d3e20323730313635.roa (raw, json)
Hash identifier: EZxJuk0A+CBx/+s9gLoU0KE2kk+d7Z+d7Ky/bjxNLHs=
Subject key identifier: CA:6D:2A:8E:BD:E6:DC:6F:39:D0:C1:E2:46:B3:EF:E8:37:F7:45:B1
Certificate issuer: /CN=8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722
Certificate serial: 364809655DF01246E7461A81EB80E6C2BB05B300
Authority key identifier: 8A:3E:EB:5C:D5:9A:A0:CB:9A:B9:08:25:FC:C1:DD:80:92:45:E7:22
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a3a2f33322d3332203d3e20323730313635.roa
Signing time: Tue 05 Mar 2024 17:59:52 +0000
ROA not before: Tue 05 Mar 2024 17:54:52 +0000
ROA not after: Tue 04 Mar 2025 17:59:52 +0000
asID: 270165
IP address blocks: 2806:3eb::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 29 Apr 2024 18:05:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:48:09:65:5d:f0:12:46:e7:46:1a:81:eb:80:e6:c2:bb:05:b3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722
Validity
Not Before: Mar 5 17:54:52 2024 GMT
Not After : Mar 4 17:59:52 2025 GMT
Subject: CN=CA6D2A8EBDE6DC6F39D0C1E246B3EFE837F745B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e0:26:13:3c:2d:17:ab:ef:23:6e:15:21:69:
27:83:93:68:a4:c2:f9:b9:cc:00:45:a8:18:ed:2c:
f9:ec:68:33:7e:33:f8:12:72:90:2e:32:50:a2:be:
95:b4:51:f1:74:84:76:e9:30:b3:01:a9:c6:de:49:
79:1e:b0:e5:89:d9:c9:c9:2e:c5:5e:50:96:09:9d:
af:c7:87:fc:c4:fd:4a:f6:02:7b:00:33:94:6d:c7:
1e:d9:21:da:29:82:4f:0f:40:b2:46:32:1e:0f:65:
4f:f8:d3:c5:56:cc:ab:8d:e0:50:b9:58:4e:84:52:
52:22:cb:43:ff:36:1a:ae:d2:2c:72:f5:1d:70:b0:
90:20:6a:8b:d7:c2:51:9f:0d:66:73:0a:76:42:a8:
bc:cb:da:df:51:6b:74:e0:81:41:fb:2d:e2:d9:a4:
77:7a:8a:08:2f:c9:93:40:36:5d:5c:42:cf:6f:80:
d8:ed:84:1e:76:69:da:0d:bf:aa:41:96:5d:93:4f:
f4:d5:55:9a:0b:23:84:00:2d:71:84:9c:21:fa:e6:
ad:76:ae:3b:b8:eb:a9:8f:59:a4:fb:f9:81:0f:f0:
cc:b9:5a:a8:58:0a:7c:ee:a2:c1:ad:4c:1e:48:65:
a5:af:63:2f:8d:1f:5d:37:e6:13:6e:5d:6a:42:87:
62:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6D:2A:8E:BD:E6:DC:6F:39:D0:C1:E2:46:B3:EF:E8:37:F7:45:B1
X509v3 Authority Key Identifier:
keyid:8A:3E:EB:5C:D5:9A:A0:CB:9A:B9:08:25:FC:C1:DD:80:92:45:E7:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A3EEB5CD59AA0CB9AB90825FCC1DD809245E722.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD2CBDA216FD7E4F4CB3D387360940975C5878D720A50ECAB44188187892DFB1/0/323830363a3365623a3a2f33322d3332203d3e20323730313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2806:3eb::/32
Signature Algorithm: sha256WithRSAEncryption
44:e7:46:6c:0f:11:c6:1c:44:ee:dc:f0:0f:1a:61:27:f0:43:
f4:8b:fb:ee:96:38:89:4a:94:50:d7:99:cb:78:76:34:da:49:
ae:cf:24:39:51:a4:33:c4:ca:85:06:a3:8e:ad:2d:ad:5e:ee:
f8:87:0e:a7:3c:db:4c:c5:d0:21:0f:39:76:ff:88:a9:8a:11:
12:91:5b:96:fb:a9:a3:01:49:84:11:48:05:eb:a3:99:64:eb:
ee:15:0d:05:b7:75:20:28:8a:67:5b:55:6b:6e:70:18:be:52:
c3:fb:62:cd:ae:8d:cb:76:ff:03:b6:8c:b3:c2:47:2b:94:5f:
2d:15:9e:71:ca:b7:1e:9d:63:70:3d:5b:bd:18:c9:5c:b6:df:
66:c2:39:0f:3d:8a:44:85:7a:47:df:13:ca:90:67:81:4b:4d:
65:52:d7:af:c2:35:a2:0a:be:f8:c3:db:b8:a4:f2:d9:78:93:
47:4b:47:f1:d3:1f:17:4b:58:4d:3e:a4:33:af:7c:57:21:cf:
0d:ee:06:7d:38:0b:03:47:44:1a:52:6f:79:18:27:6f:1d:52:
24:95:eb:43:17:12:52:da:0f:0b:6a:cf:06:1a:af:1b:bf:8f:
a2:71:90:d6:33:ec:ab:be:f7:29:5e:29:5c:8e:59:dc:28:5e:
6b:5c:b6:9e
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUNkgJZV3wEkbnRhqB64DmwrsFswAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEEzRUVCNUNENTlBQTBDQjlBQjkwODI1RkNDMUREODA5
MjQ1RTcyMjAeFw0yNDAzMDUxNzU0NTJaFw0yNTAzMDQxNzU5NTJaMDMxMTAvBgNV
BAMTKENBNkQyQThFQkRFNkRDNkYzOUQwQzFFMjQ2QjNFRkU4MzdGNzQ1QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH4CYTPC0Xq+8jbhUhaSeDk2ik
wvm5zABFqBjtLPnsaDN+M/gScpAuMlCivpW0UfF0hHbpMLMBqcbeSXkesOWJ2cnJ
LsVeUJYJna/Hh/zE/Ur2AnsAM5Rtxx7ZIdopgk8PQLJGMh4PZU/408VWzKuN4FC5
WE6EUlIiy0P/Nhqu0ixy9R1wsJAgaovXwlGfDWZzCnZCqLzL2t9Ra3TggUH7LeLZ
pHd6iggvyZNANl1cQs9vgNjthB52adoNv6pBll2TT/TVVZoLI4QALXGEnCH65q12
rju466mPWaT7+YEP8My5WqhYCnzuosGtTB5IZaWvYy+NH1035hNuXWpCh2KvAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQUym0qjr3m3G850MHiRrPv6Df3RbEwHwYDVR0j
BBgwFoAUij7rXNWaoMuauQgl/MHdgJJF5yIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRDJDQkRBMjE2RkQ3RTRGNENCM0QzODczNjA5NDA5NzVD
NTg3OEQ3MjBBNTBFQ0FCNDQxODgxODc4OTJERkIxLzAvOEEzRUVCNUNENTlBQTBD
QjlBQjkwODI1RkNDMUREODA5MjQ1RTcyMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QTNFRUI1Q0Q1OUFBMENCOUFC
OTA4MjVGQ0MxREQ4MDkyNDVFNzIyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0QyQ0JEQTIxNkZEN0U0RjRDQjNEMzg3MzYwOTQwOTc1QzU4NzhENzIw
QTUwRUNBQjQ0MTg4MTg3ODkyREZCMS8wLzMyMzgzMDM2M2EzMzY1NjIzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzMjM3MzAzMTM2MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBgPrMA0G
CSqGSIb3DQEBCwUAA4IBAQBE50ZsDxHGHETu3PAPGmEn8EP0i/vuljiJSpRQ15nL
eHY02kmuzyQ5UaQzxMqFBqOOrS2tXu74hw6nPNtMxdAhDzl2/4ipihESkVuW+6mj
AUmEEUgF66OZZOvuFQ0Ft3UgKIpnW1VrbnAYvlLD+2LNro3Ldv8DtoyzwkcrlF8t
FZ5xyrcenWNwPVu9GMlctt9mwjkPPYpEhXpH3xPKkGeBS01lUtevwjWiCr74w9u4
pPLZeJNHS0fx0x8XS1hNPqQzr3xXIc8N7gZ9OAsDR0QaUm95GCdvHVIkletDFxJS
2g8Las8GGq8bv4+icZDWM+yrvvcpXilcjlncKF5rXLae
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-ams.rpki-client.org