Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/323830333a643235303a3a2f33322d313238203d3e20323733313637.roa
File: 323830333a643235303a3a2f33322d313238203d3e20323733313637.roa (raw, json)
Hash identifier: kK4wE408rMaDzT39ihKptxLSZFyZ+DhCifuKIWB/vbs=
Subject key identifier: 1B:AC:BC:F3:76:64:2E:2E:EA:A0:11:12:11:AB:BC:2B:AC:97:D3:22
Certificate issuer: /CN=D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD
Certificate serial: 48C7A0569A932450B08C35B742B6E3ED04E33D91
Authority key identifier: D4:3E:AD:E5:B8:CD:6D:CD:80:F7:0F:D4:6A:6D:1B:F4:C7:50:DC:BD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/323830333a643235303a3a2f33322d313238203d3e20323733313637.roa
Signing time: Fri 14 Feb 2025 18:15:00 +0000
ROA not before: Fri 14 Feb 2025 18:10:00 +0000
ROA not after: Fri 13 Feb 2026 18:15:00 +0000
asID: 273167
IP address blocks: 2803:d250::/32 maxlen: 128
Validation: Failed, certificate revoked on Wed 26 Feb 2025 20:15:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:c7:a0:56:9a:93:24:50:b0:8c:35:b7:42:b6:e3:ed:04:e3:3d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD
Validity
Not Before: Feb 14 18:10:00 2025 GMT
Not After : Feb 13 18:15:00 2026 GMT
Subject: CN=1BACBCF376642E2EEAA0111211ABBC2BAC97D322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f6:8f:cb:f0:17:3c:36:84:f5:c6:ae:0f:76:
bd:c4:7b:c9:4e:80:5c:03:91:32:1e:28:d1:c3:87:
07:83:78:8a:19:89:10:91:33:95:ad:53:e6:e7:bd:
b8:bf:cb:fc:e7:cf:bb:ee:84:d8:05:1e:43:8b:3f:
c9:c3:95:99:b9:0a:ab:15:24:f6:a5:00:35:99:dd:
2b:c2:f1:7e:a5:b7:41:14:b5:77:3e:95:b0:c9:62:
4b:a4:a0:ca:d1:fe:bb:7e:0b:85:d8:c2:6f:ce:52:
cb:fe:a3:f3:c7:1a:1a:28:ff:77:b2:66:a7:b3:8e:
0e:96:6f:f6:0f:ca:58:50:ea:89:40:8e:02:b6:ea:
74:2a:11:35:00:28:23:72:f6:9f:76:f1:62:d8:1d:
a6:ef:e7:69:0d:2e:8f:de:07:88:d2:34:ea:61:08:
cd:59:fd:5f:4b:5f:5f:7f:99:8c:ab:bf:ac:aa:e0:
09:66:f1:b6:fb:5d:64:ea:b8:da:62:98:bf:76:62:
ba:b1:90:89:32:0d:83:7b:b0:a9:de:79:cd:c6:a9:
59:56:25:34:af:a3:dc:9d:36:b5:94:57:e3:41:d2:
38:e0:f2:61:c4:d1:62:0d:0b:07:1e:c7:37:ad:28:
65:6b:f9:c2:04:0b:b3:c2:28:5b:e5:0f:1d:2a:3f:
26:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AC:BC:F3:76:64:2E:2E:EA:A0:11:12:11:AB:BC:2B:AC:97:D3:22
X509v3 Authority Key Identifier:
keyid:D4:3E:AD:E5:B8:CD:6D:CD:80:F7:0F:D4:6A:6D:1B:F4:C7:50:DC:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D43EADE5B8CD6DCD80F70FD46A6D1BF4C750DCBD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D74CA2E530D5D876513430983AA42BBE8EFEB06912539DB7D2B8DECFEA516219/0/323830333a643235303a3a2f33322d313238203d3e20323733313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:d250::/32
Signature Algorithm: sha256WithRSAEncryption
84:95:f5:7b:6b:6f:74:14:27:e4:82:2f:6f:c5:3e:9a:4c:ac:
80:67:bc:20:07:1c:4c:19:2f:76:25:d7:69:57:80:c5:1f:fd:
5b:4c:67:4b:b0:a7:2a:f6:0b:e0:97:93:23:9f:68:b7:7f:f6:
1b:6a:d5:19:05:5a:87:1f:80:e0:53:4d:54:ed:de:8f:3c:0d:
87:e8:2a:06:01:65:b5:6d:6c:1f:99:b2:1e:03:3b:7e:56:98:
89:2f:c9:3a:49:de:3c:de:d0:67:3c:8c:a4:6e:cd:18:b5:b2:
af:28:02:14:ec:ac:ee:ed:12:98:c0:aa:bc:09:3b:a7:94:1a:
5b:29:59:96:e8:0b:a3:4f:56:5d:3b:81:66:92:80:de:87:e0:
ba:4a:7a:bb:d4:6d:31:67:c3:12:6d:e3:14:4c:3a:6c:62:b9:
d2:9f:95:ba:e4:ae:fe:24:1f:9a:ed:70:dd:72:a0:2e:81:19:
79:a9:a4:c1:e5:09:f7:73:8b:e6:92:ad:21:8f:41:bd:78:d4:
69:a9:46:b5:41:a5:59:83:17:18:0d:39:2f:21:42:3c:d6:5f:
0a:23:3d:d1:27:70:3f:64:07:f9:3e:69:6c:ce:68:e9:5b:48:
4b:3b:31:09:46:a8:0f:b8:70:8e:48:35:7e:40:c2:f3:e7:7d:
8d:a0:05:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:59:07 2025 by rpki-client