Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB9C3EE1FD45792E24CB794F868C354E051D3CBE843C71C67B0B1A910F7C70A5/0/323830333a373465303a3a2f33322d3438203d3e20323635363838.roa
File: 323830333a373465303a3a2f33322d3438203d3e20323635363838.roa (raw, json)
Hash identifier: 4TWXGW270Le+GMJpgbpjJcj0HQUmGJmfmwKfxFKEwQg=
Subject key identifier: 47:BC:D8:62:15:AD:A6:E5:E2:83:D0:A0:7E:54:79:F5:28:0B:3D:F7
Certificate issuer: /CN=C88E06CCAFF9CD22AA83801DCA00A03F91548D6E
Certificate serial: 09DE79A2F839669B32A40A624FF62997F6E55E9E
Authority key identifier: C8:8E:06:CC:AF:F9:CD:22:AA:83:80:1D:CA:00:A0:3F:91:54:8D:6E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C88E06CCAFF9CD22AA83801DCA00A03F91548D6E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DB9C3EE1FD45792E24CB794F868C354E051D3CBE843C71C67B0B1A910F7C70A5/0/323830333a373465303a3a2f33322d3438203d3e20323635363838.roa
Signing time: Thu 26 Jun 2025 17:05:00 +0000
ROA not before: Thu 26 Jun 2025 17:00:00 +0000
ROA not after: Thu 25 Jun 2026 17:05:00 +0000
asID: 265688
IP address blocks: 2803:74e0::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 01 Jul 2025 21:40:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:de:79:a2:f8:39:66:9b:32:a4:0a:62:4f:f6:29:97:f6:e5:5e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C88E06CCAFF9CD22AA83801DCA00A03F91548D6E
Validity
Not Before: Jun 26 17:00:00 2025 GMT
Not After : Jun 25 17:05:00 2026 GMT
Subject: CN=47BCD86215ADA6E5E283D0A07E5479F5280B3DF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:76:b1:1c:3f:76:3a:71:c0:1c:11:d2:92:84:
54:7f:9a:b1:1e:a2:7f:a9:48:6b:3c:2d:d3:7d:8e:
4d:51:8d:40:84:2e:fa:72:92:59:f7:96:c1:bb:32:
39:64:91:2b:a3:9e:f8:f0:7e:20:1b:59:96:cf:58:
de:19:0d:89:3d:c5:18:a3:d6:87:b9:2d:82:ed:39:
9c:64:70:dc:4c:f9:4c:c9:be:0b:50:17:98:2b:33:
9c:95:80:39:75:b0:04:8b:e9:40:29:47:b2:c8:c7:
30:62:67:5d:a8:e2:97:f0:50:fd:24:68:18:8d:3e:
e6:26:c4:e9:92:a5:4a:66:5c:98:19:b1:a1:5b:68:
46:2a:f2:b8:00:04:8a:49:e2:e5:cc:cf:f0:be:8e:
47:88:2f:93:bb:df:fd:8a:11:0a:9e:58:b8:15:fa:
fa:b9:1b:53:50:16:be:b5:1b:a6:49:e9:af:8a:55:
24:41:2a:30:a4:e4:f6:eb:51:b8:b1:11:5c:c3:25:
a2:8a:20:25:2f:10:60:c0:d6:fe:79:8f:2c:9d:2a:
81:6c:5e:c1:5b:62:50:20:f2:ff:f1:b0:a5:55:79:
39:c2:fa:3d:51:0c:e4:17:ca:b4:67:5b:dc:9a:01:
49:23:55:38:0c:3f:bd:02:17:51:b3:66:1a:a7:c8:
9c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BC:D8:62:15:AD:A6:E5:E2:83:D0:A0:7E:54:79:F5:28:0B:3D:F7
X509v3 Authority Key Identifier:
keyid:C8:8E:06:CC:AF:F9:CD:22:AA:83:80:1D:CA:00:A0:3F:91:54:8D:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DB9C3EE1FD45792E24CB794F868C354E051D3CBE843C71C67B0B1A910F7C70A5/0/C88E06CCAFF9CD22AA83801DCA00A03F91548D6E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C88E06CCAFF9CD22AA83801DCA00A03F91548D6E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB9C3EE1FD45792E24CB794F868C354E051D3CBE843C71C67B0B1A910F7C70A5/0/323830333a373465303a3a2f33322d3438203d3e20323635363838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:74e0::/32
Signature Algorithm: sha256WithRSAEncryption
70:cc:d7:c5:c2:5e:8a:ba:14:6b:94:9a:f7:dc:5b:b6:27:7c:
c6:7b:1d:b8:41:d2:cf:ba:a1:b9:90:8a:53:0f:67:77:65:d1:
ce:66:c2:f9:9c:77:67:38:0b:dd:49:0f:6f:05:8c:51:f6:3f:
de:6e:6c:b7:7a:72:98:bc:69:01:32:dd:70:84:45:0d:45:1c:
3e:0f:ba:c5:e0:7f:08:74:76:1c:05:d1:9b:10:22:48:ba:7f:
0a:bc:b0:77:36:3d:f4:73:27:47:24:c5:f5:d7:14:f2:d9:55:
31:48:04:36:26:b8:e5:c9:58:5d:a8:50:11:c7:bc:75:ea:ba:
56:8a:f1:b2:29:b4:57:8e:05:a2:1c:bf:d3:0e:c9:25:32:48:
dc:69:c8:68:c9:5a:2b:a8:be:db:fe:1e:f2:1f:66:51:3f:06:
22:6e:33:e0:66:6a:b4:ac:ad:01:d9:f7:1c:b5:5f:15:ec:bc:
01:cf:f1:b1:c8:1f:1a:67:79:91:c5:d7:d9:0e:96:ff:01:62:
79:04:b1:1c:db:35:b8:d9:86:e6:b4:7d:25:f6:a3:34:83:64:
fb:41:fe:eb:a0:09:ce:e3:54:bc:25:d0:14:f8:8d:45:77:dd:
3d:a2:61:09:12:d2:ad:b8:bc:f1:cd:1e:8d:1c:7d:1b:4f:02:
68:c8:af:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 17:11:12 2025 by rpki-client