Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E7781D1B7DCD36BA55EBDAFBF509D645DD7F4339B193E862A1571C4A1146DBC0/0/3137302e3135302e38382e302f32322d3232203d3e203630343538.roa
File: 3137302e3135302e38382e302f32322d3232203d3e203630343538.roa (raw, json)
Hash identifier: pI1jRYW0uEj0U1OIRHDqFuJloXK76DmVv0wzyRHVg8A=
Subject key identifier: EA:29:79:D6:27:33:7B:59:66:94:13:06:D7:AA:35:01:A7:17:88:DE
Certificate issuer: /CN=03A6A69649FF3B8207574889C062EB9EB55CB389
Certificate serial: 111ABB5ECE11D287950C726380694F94AE33E550
Authority key identifier: 03:A6:A6:96:49:FF:3B:82:07:57:48:89:C0:62:EB:9E:B5:5C:B3:89
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03A6A69649FF3B8207574889C062EB9EB55CB389.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E7781D1B7DCD36BA55EBDAFBF509D645DD7F4339B193E862A1571C4A1146DBC0/0/3137302e3135302e38382e302f32322d3232203d3e203630343538.roa
Signing time: Tue 04 Feb 2025 18:10:51 +0000
ROA not before: Tue 04 Feb 2025 18:05:51 +0000
ROA not after: Tue 03 Feb 2026 18:10:51 +0000
asID: 60458
IP address blocks: 170.150.88.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 17 Mar 2025 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:1a:bb:5e:ce:11:d2:87:95:0c:72:63:80:69:4f:94:ae:33:e5:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03A6A69649FF3B8207574889C062EB9EB55CB389
Validity
Not Before: Feb 4 18:05:51 2025 GMT
Not After : Feb 3 18:10:51 2026 GMT
Subject: CN=EA2979D627337B5966941306D7AA3501A71788DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:57:b0:43:18:c4:0f:be:eb:b3:39:73:64:b7:
09:c1:11:b5:67:8b:53:14:f8:7b:c1:15:0a:99:f5:
58:25:ec:66:4b:f0:e5:87:28:20:ae:4c:3f:ce:82:
35:c7:6f:17:cc:c3:08:50:e9:ce:2f:df:21:40:c2:
37:9f:e5:80:4e:48:ac:af:0b:9e:8e:25:39:d9:b3:
5f:23:17:40:4e:d5:d4:da:c3:53:f6:a6:e7:4d:d5:
1a:3b:66:2d:97:11:79:63:19:13:07:55:aa:fc:c1:
23:3a:21:f4:ff:78:1e:3c:81:4e:52:9d:09:6b:b3:
20:6d:36:7f:f5:cf:dc:6d:b9:24:d0:1a:0e:0b:d8:
e0:64:44:ea:c1:2e:8e:2c:f8:6f:42:2d:d1:7e:fd:
f1:28:1c:ea:a5:3b:ac:9e:c2:d7:44:d9:36:09:e3:
fb:08:08:8e:ac:e0:69:1f:9e:e1:9b:bc:0e:3a:0f:
fe:b6:2b:f1:bc:0b:0f:cb:9c:3e:61:e1:56:92:72:
f0:3c:ee:bf:62:05:78:5c:cd:22:69:3b:20:89:f6:
76:b0:9e:32:6e:8f:d2:26:0b:25:0b:aa:30:cd:56:
1a:ef:e9:28:d5:48:48:78:22:6e:21:68:d9:d3:60:
14:18:19:2d:a9:66:ac:1e:9d:29:c5:c4:db:34:5e:
c1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:29:79:D6:27:33:7B:59:66:94:13:06:D7:AA:35:01:A7:17:88:DE
X509v3 Authority Key Identifier:
keyid:03:A6:A6:96:49:FF:3B:82:07:57:48:89:C0:62:EB:9E:B5:5C:B3:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E7781D1B7DCD36BA55EBDAFBF509D645DD7F4339B193E862A1571C4A1146DBC0/0/03A6A69649FF3B8207574889C062EB9EB55CB389.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03A6A69649FF3B8207574889C062EB9EB55CB389.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E7781D1B7DCD36BA55EBDAFBF509D645DD7F4339B193E862A1571C4A1146DBC0/0/3137302e3135302e38382e302f32322d3232203d3e203630343538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.150.88.0/22
Signature Algorithm: sha256WithRSAEncryption
25:f9:cf:4d:c3:57:69:7e:16:61:b5:e5:22:1c:7a:af:16:c3:
56:40:7f:e8:bd:89:ce:39:aa:74:cc:cc:48:ba:89:43:e3:fa:
e4:ab:97:ab:19:c6:fb:9c:74:0d:d3:13:12:16:36:42:0b:7e:
90:02:5d:2f:fc:55:d0:6f:9b:d5:72:b8:76:a4:84:71:c6:14:
c1:a0:09:8a:d0:10:1b:e4:67:61:98:8c:5d:ac:b4:2e:ec:bc:
39:8b:6a:8e:09:44:78:e8:31:ec:26:a3:ca:a4:6e:df:cf:d0:
21:c0:c6:7a:51:eb:2f:67:ed:fe:64:5d:03:0f:83:02:4f:29:
c8:f3:2a:56:c4:bf:6e:91:01:7b:72:11:0e:91:f0:41:60:ce:
65:3a:16:f9:24:f6:f8:f4:63:25:69:17:da:b9:3d:a0:0f:3b:
7b:af:11:ef:9b:31:7b:aa:bc:15:b3:ca:a2:83:9e:00:a2:b1:
98:19:29:f6:57:aa:21:51:6b:a4:a0:78:28:eb:1f:49:c9:78:
d4:75:3c:8e:05:41:b4:57:e3:84:1f:23:91:24:81:21:88:c5:
4b:6b:ad:8a:25:91:cf:d3:71:13:5b:89:21:cc:ad:c5:ad:5b:
2f:96:21:cf:08:ae:64:f3:0a:97:b9:17:df:8e:71:bf:82:21:
b9:39:9b:13
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUERq7Xs4R0oeVDHJjgGlPlK4z5VAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNBNkE2OTY0OUZGM0I4MjA3NTc0ODg5QzA2MkVCOUVC
NTVDQjM4OTAeFw0yNTAyMDQxODA1NTFaFw0yNjAyMDMxODEwNTFaMDMxMTAvBgNV
BAMTKEVBMjk3OUQ2MjczMzdCNTk2Njk0MTMwNkQ3QUEzNTAxQTcxNzg4REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZV7BDGMQPvuuzOXNktwnBEbVn
i1MU+HvBFQqZ9Vgl7GZL8OWHKCCuTD/OgjXHbxfMwwhQ6c4v3yFAwjef5YBOSKyv
C56OJTnZs18jF0BO1dTaw1P2pudN1Ro7Zi2XEXljGRMHVar8wSM6IfT/eB48gU5S
nQlrsyBtNn/1z9xtuSTQGg4L2OBkROrBLo4s+G9CLdF+/fEoHOqlO6yewtdE2TYJ
4/sICI6s4GkfnuGbvA46D/62K/G8Cw/LnD5h4VaScvA87r9iBXhczSJpOyCJ9naw
njJuj9ImCyULqjDNVhrv6SjVSEh4Im4haNnTYBQYGS2pZqwenSnFxNs0XsH7AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU6il51icze1lmlBMG16o1AacXiN4wHwYDVR0j
BBgwFoAUA6amlkn/O4IHV0iJwGLrnrVcs4kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNzc4MUQxQjdEQ0QzNkJBNTVFQkRBRkJGNTA5RDY0NURE
N0Y0MzM5QjE5M0U4NjJBMTU3MUM0QTExNDZEQkMwLzAvMDNBNkE2OTY0OUZGM0I4
MjA3NTc0ODg5QzA2MkVCOUVCNTVDQjM4OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wM0E2QTY5NjQ5RkYzQjgyMDc1
NzQ4ODlDMDYyRUI5RUI1NUNCMzg5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTc3ODFEMUI3RENEMzZCQTU1RUJEQUZCRjUwOUQ2NDVERDdGNDMzOUIx
OTNFODYyQTE1NzFDNEExMTQ2REJDMC8wLzMxMzczMDJlMzEzNTMwMmUzODM4MmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzYzMDM0MzUzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqqWWDAN
BgkqhkiG9w0BAQsFAAOCAQEAJfnPTcNXaX4WYbXlIhx6rxbDVkB/6L2JzjmqdMzM
SLqJQ+P65KuXqxnG+5x0DdMTEhY2Qgt+kAJdL/xV0G+b1XK4dqSEccYUwaAJitAQ
G+RnYZiMXay0Luy8OYtqjglEeOgx7CajyqRu38/QIcDGelHrL2ft/mRdAw+DAk8p
yPMqVsS/bpEBe3IRDpHwQWDOZToW+ST2+PRjJWkX2rk9oA87e68R75sxe6q8FbPK
ooOeAKKxmBkp9leqIVFrpKB4KOsfScl41HU8jgVBtFfjhB8jkSSBIYjFS2utiiWR
z9NxE1uJIcytxa1bL5YhzwiuZPMKl7kX345xv4IhuTmbEw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 21:08:05 2025 by rpki-client