Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E659A24729D583AF75EA741170344486EA22DF8651AC5C2CCB7D51BC71522175/0/3138312e3232342e33362e302f32322d3234203d3e20323633313839.roa
File: 3138312e3232342e33362e302f32322d3234203d3e20323633313839.roa (raw, json)
Hash identifier: Lz3Q+LKqjTML+ZhDvzt2LurlTEnFmI5DdhR5jDFuclE=
Subject key identifier: D4:E2:54:9C:64:70:EE:84:E4:F5:05:0B:BE:12:09:DF:CB:F1:B2:6E
Certificate issuer: /CN=F703CFFB535FEE1646CAB72A418F7A397899234D
Certificate serial: 4054E3CEAB7CD435C11C2E8A9365213A532A4D8B
Authority key identifier: F7:03:CF:FB:53:5F:EE:16:46:CA:B7:2A:41:8F:7A:39:78:99:23:4D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F703CFFB535FEE1646CAB72A418F7A397899234D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E659A24729D583AF75EA741170344486EA22DF8651AC5C2CCB7D51BC71522175/0/3138312e3232342e33362e302f32322d3234203d3e20323633313839.roa
Signing time: Tue 11 Mar 2025 21:55:00 +0000
ROA not before: Tue 11 Mar 2025 21:50:00 +0000
ROA not after: Tue 10 Mar 2026 21:55:00 +0000
asID: 263189
IP address blocks: 181.224.36.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Apr 2025 07:45:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:54:e3:ce:ab:7c:d4:35:c1:1c:2e:8a:93:65:21:3a:53:2a:4d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F703CFFB535FEE1646CAB72A418F7A397899234D
Validity
Not Before: Mar 11 21:50:00 2025 GMT
Not After : Mar 10 21:55:00 2026 GMT
Subject: CN=D4E2549C6470EE84E4F5050BBE1209DFCBF1B26E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e7:96:47:93:c8:94:07:fb:73:91:12:34:53:
c6:4d:79:80:28:fa:8b:cb:75:2c:4a:11:34:76:cf:
53:4d:83:be:a3:13:28:b1:2c:bc:41:e1:d5:63:5d:
4c:f6:17:ec:b0:9d:c9:e3:ee:b7:5c:b4:b4:4b:f7:
1f:64:28:3c:f3:85:b5:d9:37:46:29:6d:0b:a8:85:
4e:7b:54:63:e7:34:c7:15:13:4e:36:7d:0e:32:61:
e9:85:1a:46:47:82:f3:8d:d2:34:44:73:4e:28:4d:
63:a7:39:3e:8a:54:b3:c5:35:ee:c6:a4:ed:20:d4:
3b:d6:05:84:9f:8b:25:7f:d1:49:fc:7f:5a:71:a5:
c8:79:41:22:25:4a:cc:91:13:59:78:8d:16:6e:22:
16:4f:0c:03:05:fd:b8:24:2e:2d:f2:32:37:bb:a4:
61:02:af:a9:ca:90:7d:da:69:ca:c2:d2:dc:2a:5e:
e7:ea:53:57:aa:b5:f7:94:ef:2d:0c:28:83:5d:dd:
69:a1:3f:5e:62:87:fd:00:16:39:2a:c1:d2:5a:fd:
75:c5:e7:5f:a5:24:69:69:a0:9a:72:e3:b5:05:0d:
dd:c0:8d:13:6b:63:a9:35:13:d4:66:be:c2:db:8d:
39:25:e6:8a:2f:4d:ff:54:b2:3a:8e:03:96:86:7a:
e0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E2:54:9C:64:70:EE:84:E4:F5:05:0B:BE:12:09:DF:CB:F1:B2:6E
X509v3 Authority Key Identifier:
keyid:F7:03:CF:FB:53:5F:EE:16:46:CA:B7:2A:41:8F:7A:39:78:99:23:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E659A24729D583AF75EA741170344486EA22DF8651AC5C2CCB7D51BC71522175/0/F703CFFB535FEE1646CAB72A418F7A397899234D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F703CFFB535FEE1646CAB72A418F7A397899234D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E659A24729D583AF75EA741170344486EA22DF8651AC5C2CCB7D51BC71522175/0/3138312e3232342e33362e302f32322d3234203d3e20323633313839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.224.36.0/22
Signature Algorithm: sha256WithRSAEncryption
30:b8:dc:e7:6d:1c:f2:4d:d7:99:98:88:94:82:2e:ff:51:ff:
00:3b:48:94:33:fa:77:a0:80:63:ba:f9:af:c2:29:b8:56:a8:
40:4c:44:ee:4b:3c:74:b1:00:7f:99:4f:92:bd:3a:84:cb:ab:
e9:78:62:f7:cc:45:b7:b0:eb:24:6a:c1:cb:4b:53:80:88:9b:
cf:dc:62:e7:f1:f9:30:73:61:5b:be:95:41:05:64:58:9a:4f:
f9:e3:05:25:8d:1e:30:7b:10:21:72:b9:f9:4a:58:d9:05:b8:
8a:57:3e:31:fe:d9:63:dc:b5:28:cc:36:14:70:fa:ef:df:4b:
57:6a:d9:b2:56:1c:c3:54:46:be:41:3f:0b:20:ee:41:52:3c:
3d:23:e2:a1:08:23:58:26:d3:f7:97:d9:26:7a:fc:b5:b0:34:
90:55:ac:69:e4:36:bc:24:d1:50:98:93:3c:d0:42:5b:7b:c3:
66:f6:8e:84:d8:90:a9:dd:d0:f5:e2:89:fd:8d:3b:79:ad:4d:
96:b8:b5:71:b8:43:4b:8c:63:41:0f:68:43:c0:fe:5a:35:a4:
04:0a:b0:9b:a7:5c:6a:4a:f5:3f:cc:4f:a1:46:62:59:57:e8:
bd:f1:36:6c:9e:b4:11:83:64:70:94:9e:da:18:e7:43:e5:d1:
6d:ae:a9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:02:25 2025 by rpki-client