Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32342e302e302f31372d3137203d3e2036333036.roa
File: 3138362e32342e302e302f31372d3137203d3e2036333036.roa (raw, json)
Hash identifier: 8l6aTaKZpcPMubvBvECgXDgqL/6QKCwtMQjz850CprU=
Subject key identifier: 6A:CE:35:C5:EC:17:47:AF:14:66:2C:94:9D:F2:4E:B7:CA:68:02:04
Certificate issuer: /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial: 51C0BE96926C48953E81A3F26D9DBFC542770B29
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32342e302e302f31372d3137203d3e2036333036.roa
Signing time: Tue 04 Feb 2025 18:33:00 +0000
ROA not before: Tue 04 Feb 2025 18:28:00 +0000
ROA not after: Tue 03 Feb 2026 18:33:00 +0000
asID: 6306
IP address blocks: 186.24.0.0/17 maxlen: 17
Validation: Failed, certificate revoked on Tue 25 Feb 2025 20:50:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:c0:be:96:92:6c:48:95:3e:81:a3:f2:6d:9d:bf:c5:42:77:0b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Validity
Not Before: Feb 4 18:28:00 2025 GMT
Not After : Feb 3 18:33:00 2026 GMT
Subject: CN=6ACE35C5EC1747AF14662C949DF24EB7CA680204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a2:5c:df:45:68:0a:df:59:14:c9:c0:f8:73:
f5:53:19:c2:16:a6:49:f8:c9:9f:a6:ac:94:f5:19:
e3:4a:c2:e3:e9:e6:5b:cc:bc:53:06:83:39:f8:5d:
bf:30:52:33:a6:8e:44:bb:c3:30:07:0b:58:8e:c0:
9f:2c:01:b1:a3:f7:66:16:0f:f6:a3:23:82:da:03:
69:19:48:23:5d:2a:c0:3c:e7:06:55:aa:2a:13:a1:
97:78:9f:9b:4a:29:e2:28:09:5c:41:69:18:bd:5c:
13:7f:ce:c2:27:7c:8f:79:cd:36:01:18:3f:89:a2:
49:dd:7f:b4:ef:34:f2:ad:a4:19:fb:f5:4d:7d:24:
c5:19:1f:76:a5:58:f6:a6:f7:c4:0b:ea:14:09:96:
5a:df:db:24:da:fe:8c:2f:02:5c:74:f4:9b:84:d5:
30:3c:d3:28:34:85:4d:0c:3a:c8:25:63:54:67:60:
92:1e:c5:f1:6a:d8:bf:58:2a:2c:af:87:17:04:ba:
12:5d:d5:9d:f0:0f:e0:5e:0d:52:c0:fa:b8:e2:78:
c5:14:ee:86:b1:89:fd:5d:bf:d1:25:ad:ef:5d:0d:
85:bb:10:0f:8b:30:f2:de:6c:cd:88:d8:f6:82:0d:
4a:ea:5c:71:64:97:e5:d8:23:0f:12:c2:c8:c7:fe:
63:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:CE:35:C5:EC:17:47:AF:14:66:2C:94:9D:F2:4E:B7:CA:68:02:04
X509v3 Authority Key Identifier:
keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138362e32342e302e302f31372d3137203d3e2036333036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.24.0.0/17
Signature Algorithm: sha256WithRSAEncryption
67:8a:7a:c2:c9:44:63:d5:7b:aa:93:93:41:e4:29:06:85:2f:
8b:e6:ff:71:7c:de:ba:f5:4f:37:eb:c9:90:d3:58:f2:a3:47:
16:37:97:0c:e0:22:7d:c7:1c:c9:76:4d:e7:2b:3f:15:9c:88:
d6:0c:69:db:4d:f3:ea:eb:e9:08:3a:23:16:3c:f4:a8:e2:63:
f2:b0:75:03:51:68:6a:da:2b:2f:0b:df:db:cc:f3:01:8e:1e:
ef:a7:6f:5a:d0:9b:a5:3a:6e:e0:2d:f6:e5:08:d1:f0:d1:ba:
b7:0f:a0:23:7b:a6:37:3e:d7:26:c1:b4:cd:ba:0e:0c:1b:d5:
49:d1:7e:24:0e:33:77:5b:fc:cb:95:61:e1:5d:18:fc:9a:d1:
b6:89:20:be:7f:35:f7:67:b0:e7:d0:3b:df:9a:77:1f:08:84:
0c:21:98:54:7d:f7:36:65:74:8f:b1:1a:f6:19:5d:10:7c:4e:
e8:1f:98:84:85:6a:d2:ad:a7:61:08:64:db:c5:16:d7:9c:c7:
a8:a4:3c:26:4e:75:d1:d3:37:33:fd:c3:f2:07:65:8f:60:f8:
a2:28:1a:03:c5:ce:ba:5c:08:df:37:18:87:7e:c0:79:80:4f:
83:a6:59:2e:06:0d:da:e1:51:f3:fb:c0:6f:9f:f8:c2:6a:cb:
10:b5:7d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:06:53 2025 by rpki-client