Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FB80E8ADAA77BD517BB952045EA56E0FD41A53E4B9AE5E7E1544A0EF08CA7C3A/0/34352e3233382e3135362e302f32342d3234203d3e2037303138.roa
File: 34352e3233382e3135362e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier: nJMwR94KhwUIbNm255ehPNA/nnlM3uJZQoUyTZkUJH0=
Subject key identifier: 7F:DB:E6:11:D2:C8:42:8F:6C:2C:0A:3D:69:E6:E5:46:0A:7D:6C:FB
Certificate issuer: /CN=99AC90C6431B27F29FD3D3C3FECE807D86BFE025
Certificate serial: 5C0E11955F89D164F956D39439A210C192695644
Authority key identifier: 99:AC:90:C6:43:1B:27:F2:9F:D3:D3:C3:FE:CE:80:7D:86:BF:E0:25
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99AC90C6431B27F29FD3D3C3FECE807D86BFE025.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/FB80E8ADAA77BD517BB952045EA56E0FD41A53E4B9AE5E7E1544A0EF08CA7C3A/0/34352e3233382e3135362e302f32342d3234203d3e2037303138.roa
Signing time: Fri 21 Feb 2025 16:55:00 +0000
ROA not before: Fri 21 Feb 2025 16:50:00 +0000
ROA not after: Fri 20 Feb 2026 16:55:00 +0000
asID: 7018
IP address blocks: 45.238.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Apr 2025 19:35:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:0e:11:95:5f:89:d1:64:f9:56:d3:94:39:a2:10:c1:92:69:56:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99AC90C6431B27F29FD3D3C3FECE807D86BFE025
Validity
Not Before: Feb 21 16:50:00 2025 GMT
Not After : Feb 20 16:55:00 2026 GMT
Subject: CN=7FDBE611D2C8428F6C2C0A3D69E6E5460A7D6CFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d6:28:6b:ed:12:f5:13:a0:3d:58:9b:f4:8d:
0e:60:4f:b9:fd:bd:79:f3:72:21:e0:3c:2a:ff:be:
67:ba:55:20:3c:2c:73:a7:5a:58:26:e8:3c:73:f6:
84:6f:26:d9:14:be:a4:3f:21:22:4e:92:87:99:18:
ba:bd:46:22:99:da:0b:21:f8:a4:55:a9:52:98:27:
7a:9a:8d:00:35:8b:1d:ab:25:0d:24:1c:5a:8c:aa:
69:e8:6f:7a:dd:9c:e9:24:80:d8:e9:70:fb:b5:a8:
54:57:22:87:d9:fb:23:bf:4c:88:34:ab:96:f9:f3:
93:19:83:f2:f4:3c:2b:82:e9:c6:4e:6e:1d:9e:c3:
9e:75:38:8b:8a:3b:19:db:a3:aa:76:f5:6a:d7:4b:
6f:02:c0:66:0f:52:af:36:f2:19:00:5f:4c:93:ff:
81:88:34:09:de:96:10:5e:e8:5b:f0:ce:9b:69:b0:
8b:71:5e:19:d0:54:80:92:00:e9:d8:b0:aa:18:bf:
db:f7:77:8d:32:ab:f9:c1:6c:9a:ab:cd:b6:5c:22:
8a:4e:95:f3:8a:06:e8:4f:58:a4:0d:6b:7b:65:33:
8e:78:af:07:90:c4:83:96:b4:13:c0:da:6c:b7:dc:
69:fe:84:45:66:82:31:b7:36:b6:b7:43:78:0f:75:
13:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DB:E6:11:D2:C8:42:8F:6C:2C:0A:3D:69:E6:E5:46:0A:7D:6C:FB
X509v3 Authority Key Identifier:
keyid:99:AC:90:C6:43:1B:27:F2:9F:D3:D3:C3:FE:CE:80:7D:86:BF:E0:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FB80E8ADAA77BD517BB952045EA56E0FD41A53E4B9AE5E7E1544A0EF08CA7C3A/0/99AC90C6431B27F29FD3D3C3FECE807D86BFE025.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99AC90C6431B27F29FD3D3C3FECE807D86BFE025.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FB80E8ADAA77BD517BB952045EA56E0FD41A53E4B9AE5E7E1544A0EF08CA7C3A/0/34352e3233382e3135362e302f32342d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.156.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:70:73:fe:f3:ec:d9:f0:b2:54:5b:44:8b:bc:8c:97:5a:da:
2e:33:40:e8:76:62:85:67:ce:59:53:f1:5c:e8:92:90:91:d1:
d7:c2:57:c2:13:99:ee:ca:d6:7e:5a:58:42:3c:46:de:5c:69:
a4:c2:3d:56:15:5d:81:40:cc:0d:03:b1:c4:7c:1b:db:b3:6a:
f2:ca:fc:39:a6:54:c9:d8:f4:48:68:21:2d:bf:ee:4c:b2:f3:
a3:34:81:76:ed:ad:3d:eb:4e:02:5d:b4:a8:f1:f0:ad:af:d3:
7b:d4:79:52:55:df:4b:81:75:3e:88:f0:60:0e:c1:e0:97:d1:
c0:ce:29:a1:6b:e3:4c:a9:97:f5:af:89:af:8d:95:06:48:8b:
02:c3:d7:d2:5f:d4:9b:d8:3b:5c:85:be:f3:a9:33:a9:fe:19:
98:93:63:6a:93:44:cc:da:92:c8:ad:8c:98:1c:f4:1f:ae:64:
8d:cb:ce:d2:60:25:f9:24:20:60:25:f8:92:b4:04:2d:89:82:
f8:03:64:e2:32:07:ee:3e:3b:41:35:11:97:2c:66:91:32:e0:
72:a1:0e:4d:f3:74:e2:5d:55:e4:3a:c2:8b:0c:27:82:77:f7:
fb:59:3e:ea:57:a5:e3:68:47:9a:47:9b:35:64:2f:c7:f1:e8:
ee:71:40:c6
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUXA4RlV+J0WT5VtOUOaIQwZJpVkQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTlBQzkwQzY0MzFCMjdGMjlGRDNEM0MzRkVDRTgwN0Q4
NkJGRTAyNTAeFw0yNTAyMjExNjUwMDBaFw0yNjAyMjAxNjU1MDBaMDMxMTAvBgNV
BAMTKDdGREJFNjExRDJDODQyOEY2QzJDMEEzRDY5RTZFNTQ2MEE3RDZDRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC71ihr7RL1E6A9WJv0jQ5gT7n9
vXnzciHgPCr/vme6VSA8LHOnWlgm6Dxz9oRvJtkUvqQ/ISJOkoeZGLq9RiKZ2gsh
+KRVqVKYJ3qajQA1ix2rJQ0kHFqMqmnob3rdnOkkgNjpcPu1qFRXIofZ+yO/TIg0
q5b585MZg/L0PCuC6cZObh2ew551OIuKOxnbo6p29WrXS28CwGYPUq828hkAX0yT
/4GINAnelhBe6FvwzptpsItxXhnQVICSAOnYsKoYv9v3d40yq/nBbJqrzbZcIopO
lfOKBuhPWKQNa3tlM454rweQxIOWtBPA2my33Gn+hEVmgjG3Nra3Q3gPdRO3AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUf9vmEdLIQo9sLAo9aeblRgp9bPswHwYDVR0j
BBgwFoAUmayQxkMbJ/Kf09PD/s6AfYa/4CUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GQjgwRThBREFBNzdCRDUxN0JCOTUyMDQ1RUE1NkUwRkQ0
MUE1M0U0QjlBRTVFN0UxNTQ0QTBFRjA4Q0E3QzNBLzAvOTlBQzkwQzY0MzFCMjdG
MjlGRDNEM0MzRkVDRTgwN0Q4NkJGRTAyNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85OUFDOTBDNjQzMUIyN0YyOUZE
M0QzQzNGRUNFODA3RDg2QkZFMDI1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkI4MEU4QURBQTc3QkQ1MTdCQjk1MjA0NUVBNTZFMEZENDFBNTNFNEI5
QUU1RTdFMTU0NEEwRUYwOENBN0MzQS8wLzM0MzUyZTMyMzMzODJlMzEzNTM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzczMDMxMzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAt7pwwDQYJ
KoZIhvcNAQELBQADggEBAExwc/7z7NnwslRbRIu8jJda2i4zQOh2YoVnzllT8Vzo
kpCR0dfCV8ITme7K1n5aWEI8Rt5caaTCPVYVXYFAzA0DscR8G9uzavLK/DmmVMnY
9EhoIS2/7kyy86M0gXbtrT3rTgJdtKjx8K2v03vUeVJV30uBdT6I8GAOweCX0cDO
KaFr40ypl/Wvia+NlQZIiwLD19Jf1JvYO1yFvvOpM6n+GZiTY2qTRMzaksitjJgc
9B+uZI3LztJgJfkkIGAl+JK0BC2JgvgDZOIyB+4+O0E1EZcsZpEy4HKhDk3zdOJd
VeQ6wosMJ4J39/tZPupXpeNoR5pHmzVkL8fx6O5xQMY=
-----END CERTIFICATE-----
Generated at Tue Apr 8 21:59:21 2025 by rpki-client