Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FB80E8ADAA77BD517BB952045EA56E0FD41A53E4B9AE5E7E1544A0EF08CA7C3A/0/34352e3233382e3135362e302f32342d3234203d3e20323636383432.roa
File: 34352e3233382e3135362e302f32342d3234203d3e20323636383432.roa (raw, json)
Hash identifier: 8DuLB1Lu1LfbL5LmGS87Ldaik2ENoA08A9GE7tBMrYQ=
Subject key identifier: A5:BA:11:61:17:67:9E:39:A4:FA:09:49:84:31:6E:61:48:60:48:77
Certificate issuer: /CN=99AC90C6431B27F29FD3D3C3FECE807D86BFE025
Certificate serial: 756373CEAE01390863ED992E4378D0DA3337C830
Authority key identifier: 99:AC:90:C6:43:1B:27:F2:9F:D3:D3:C3:FE:CE:80:7D:86:BF:E0:25
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99AC90C6431B27F29FD3D3C3FECE807D86BFE025.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/FB80E8ADAA77BD517BB952045EA56E0FD41A53E4B9AE5E7E1544A0EF08CA7C3A/0/34352e3233382e3135362e302f32342d3234203d3e20323636383432.roa
Signing time: Tue 04 Feb 2025 18:30:30 +0000
ROA not before: Tue 04 Feb 2025 18:25:30 +0000
ROA not after: Tue 03 Feb 2026 18:30:30 +0000
asID: 266842
IP address blocks: 45.238.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Apr 2025 19:35:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:63:73:ce:ae:01:39:08:63:ed:99:2e:43:78:d0:da:33:37:c8:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99AC90C6431B27F29FD3D3C3FECE807D86BFE025
Validity
Not Before: Feb 4 18:25:30 2025 GMT
Not After : Feb 3 18:30:30 2026 GMT
Subject: CN=A5BA116117679E39A4FA094984316E6148604877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f6:50:a6:87:30:52:f8:3a:e6:fb:df:74:f4:
50:b1:b5:ba:0b:71:06:8d:90:16:de:ef:e0:74:c7:
e4:6f:33:81:b5:ca:24:03:3d:aa:63:5d:5e:27:73:
4b:c2:07:1a:85:b6:51:c9:22:72:b9:a2:34:78:36:
96:d7:80:b3:2e:5a:9a:3c:28:7a:3c:ec:9e:85:8b:
2c:a0:95:0c:38:21:74:1d:70:b4:4e:53:89:a0:17:
be:0d:91:e1:6e:0e:aa:2f:d4:52:f0:6b:0c:ba:5e:
9b:db:38:1e:e4:7d:c7:b1:b1:ea:30:ca:5b:a0:1a:
3d:df:8a:5c:b4:63:14:1e:b6:0d:db:72:81:ef:2c:
d2:9f:e1:a9:94:13:38:49:b8:b7:de:cd:8e:6c:d6:
c9:89:5e:bc:a3:40:fd:0b:02:9c:69:c2:19:4c:f3:
3a:1b:03:43:d6:63:fa:b6:87:ea:1f:87:74:84:7f:
de:34:ba:52:87:e4:34:06:ce:25:a4:12:a7:f2:8f:
2d:09:e1:f2:8a:49:fe:f1:4c:39:fd:34:cf:7d:0c:
e5:14:40:b7:00:d1:19:cf:51:73:6b:bd:07:d8:0c:
9b:36:9d:eb:e9:b2:03:bc:8c:c1:05:2f:17:02:84:
10:4f:1d:08:30:52:75:b9:0d:6e:6e:7b:24:70:fd:
c3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BA:11:61:17:67:9E:39:A4:FA:09:49:84:31:6E:61:48:60:48:77
X509v3 Authority Key Identifier:
keyid:99:AC:90:C6:43:1B:27:F2:9F:D3:D3:C3:FE:CE:80:7D:86:BF:E0:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FB80E8ADAA77BD517BB952045EA56E0FD41A53E4B9AE5E7E1544A0EF08CA7C3A/0/99AC90C6431B27F29FD3D3C3FECE807D86BFE025.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99AC90C6431B27F29FD3D3C3FECE807D86BFE025.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FB80E8ADAA77BD517BB952045EA56E0FD41A53E4B9AE5E7E1544A0EF08CA7C3A/0/34352e3233382e3135362e302f32342d3234203d3e20323636383432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.156.0/24
Signature Algorithm: sha256WithRSAEncryption
93:25:19:48:ec:fd:d1:70:5f:4f:07:11:fc:e7:93:3c:f3:17:
8d:54:88:41:62:91:00:e8:b6:52:13:bc:4b:d5:a6:cb:ef:83:
a7:d9:ab:10:af:1f:11:6b:12:b4:9f:09:7c:28:17:b8:44:e4:
1c:9d:a1:35:ea:69:e8:18:02:ca:45:10:71:28:f6:6b:97:f6:
3b:86:a3:f1:00:48:1d:dc:5a:4f:44:aa:5c:6e:f4:df:ff:57:
0c:96:f8:1b:c4:a7:8a:6d:21:98:f8:a5:21:a9:8c:41:c1:ab:
5a:ee:02:57:be:4d:ae:30:9f:48:69:0e:b6:07:92:c9:fb:4a:
91:a5:af:a4:91:e4:9a:99:88:6c:90:3f:83:4c:d4:1d:8c:af:
76:da:3f:ea:58:13:1c:49:34:82:b5:cd:51:32:9a:3f:e6:0b:
fc:2b:e0:52:ee:f8:42:ac:f3:5b:3a:de:41:54:ce:85:ca:ad:
fe:be:fa:99:f5:dc:42:5c:53:21:a5:e3:2f:25:0c:80:01:4e:
79:32:bf:d6:56:f0:f7:28:85:f4:58:2c:05:f8:ae:c9:6e:28:
13:8a:29:88:5d:f9:e1:f2:b8:3d:5c:8a:84:d2:d5:c1:c6:76:
39:f7:03:1e:04:1b:b7:15:f1:fb:dc:f8:5e:89:31:36:c3:cb:
05:34:86:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:59:15 2025 by rpki-client