Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE52AC90C50FD22FE2521E5D54BBC6A5B30781F33450A62DEDDDAF3AB3F705ED/0/3133382e3131372e34302e302f32322d3234203d3e20323639393830.roa
File: 3133382e3131372e34302e302f32322d3234203d3e20323639393830.roa (raw, json)
Hash identifier: VYQ9rAY4X6DS7t8iHtRrzdtz3sxEoqLrSTxhsNWJQs4=
Subject key identifier: 5B:61:51:B2:25:A1:CA:49:06:98:1D:E1:E5:2D:9D:E9:2A:2B:67:D0
Certificate issuer: /CN=2FD825A27B2B347F806C2CACDF49209D17BBF654
Certificate serial: 5BCF23D0563DA1F9C5988B2931A17118D446C0D8
Authority key identifier: 2F:D8:25:A2:7B:2B:34:7F:80:6C:2C:AC:DF:49:20:9D:17:BB:F6:54
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FD825A27B2B347F806C2CACDF49209D17BBF654.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/FE52AC90C50FD22FE2521E5D54BBC6A5B30781F33450A62DEDDDAF3AB3F705ED/0/3133382e3131372e34302e302f32322d3234203d3e20323639393830.roa
Signing time: Mon 03 Feb 2025 20:25:00 +0000
ROA not before: Mon 03 Feb 2025 20:20:00 +0000
ROA not after: Mon 02 Feb 2026 20:25:00 +0000
asID: 269980
IP address blocks: 138.117.40.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Feb 2025 21:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:cf:23:d0:56:3d:a1:f9:c5:98:8b:29:31:a1:71:18:d4:46:c0:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FD825A27B2B347F806C2CACDF49209D17BBF654
Validity
Not Before: Feb 3 20:20:00 2025 GMT
Not After : Feb 2 20:25:00 2026 GMT
Subject: CN=5B6151B225A1CA4906981DE1E52D9DE92A2B67D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f7:08:ec:b2:c9:55:6e:19:30:ed:4b:06:97:
3b:1f:15:7e:09:b4:20:ee:75:5d:8c:3a:0e:58:47:
bb:19:3e:ee:c0:37:96:58:0f:58:cd:00:03:17:02:
d2:53:aa:08:9f:df:45:44:3a:bc:a5:35:a2:be:44:
17:c6:0f:99:b1:1a:75:1a:ff:66:a3:fd:75:a7:b3:
9e:d6:fa:cb:fa:9c:ce:88:b6:2b:87:57:24:23:6c:
50:b6:c7:9b:58:fc:0a:f4:c2:55:24:4a:ef:64:0e:
a9:12:ef:f5:13:31:ff:67:57:f9:f7:5a:35:09:8d:
fa:08:f2:b4:db:c7:0c:ac:d2:55:00:e2:28:de:42:
7e:e7:d1:1e:68:6f:4a:52:df:95:f4:3a:8f:fc:3a:
69:fc:4c:12:01:a7:a4:1a:00:a8:4d:3b:ef:22:4d:
35:34:0b:51:52:3f:da:48:a3:62:61:dc:51:cc:b3:
08:ec:32:4f:f1:a0:46:a5:b1:5f:9e:33:25:6b:fa:
2b:dc:85:8f:f6:5e:56:f9:52:59:72:dc:77:6a:f4:
47:d0:eb:b0:55:0f:31:08:b7:f0:b8:fd:5a:64:8c:
09:29:67:bf:f3:25:68:cd:bd:ee:e1:2e:6e:0a:9e:
50:98:ff:51:04:ed:8e:97:49:9e:2a:4a:06:01:68:
d2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:61:51:B2:25:A1:CA:49:06:98:1D:E1:E5:2D:9D:E9:2A:2B:67:D0
X509v3 Authority Key Identifier:
keyid:2F:D8:25:A2:7B:2B:34:7F:80:6C:2C:AC:DF:49:20:9D:17:BB:F6:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FE52AC90C50FD22FE2521E5D54BBC6A5B30781F33450A62DEDDDAF3AB3F705ED/0/2FD825A27B2B347F806C2CACDF49209D17BBF654.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FD825A27B2B347F806C2CACDF49209D17BBF654.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE52AC90C50FD22FE2521E5D54BBC6A5B30781F33450A62DEDDDAF3AB3F705ED/0/3133382e3131372e34302e302f32322d3234203d3e20323639393830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.40.0/22
Signature Algorithm: sha256WithRSAEncryption
34:ad:41:b2:c1:91:bb:f7:6f:2c:b6:26:ea:f4:79:4b:c8:ec:
2e:a4:f8:82:30:99:6e:87:7a:df:26:06:8c:5b:45:ff:14:d5:
e3:dc:1a:4d:da:e6:dc:d6:17:a4:29:29:35:e0:8a:da:20:a5:
5b:47:ba:c8:b0:bc:25:96:59:42:8c:c4:8d:e0:a0:ae:d7:cd:
f7:ac:6c:e6:79:7d:9a:f3:3e:22:0b:c7:38:5a:30:66:fd:77:
cd:93:05:4a:01:61:a3:da:d7:fc:16:cf:14:31:71:fb:5a:78:
26:96:88:f3:6e:e4:75:4e:dc:2a:f6:5c:0d:1b:ab:2a:67:82:
d3:bb:9f:8d:6b:b3:5e:98:64:89:c9:40:f9:18:69:7d:24:0b:
4f:1e:25:a4:5c:36:08:8f:a0:74:15:4f:08:d1:5b:f0:53:2e:
1a:e1:18:32:80:bc:67:85:d3:6a:ac:84:70:22:33:da:84:1c:
53:52:84:8e:28:6c:00:92:dd:05:ae:3d:c3:52:ff:e3:18:cd:
e4:12:53:b5:67:6f:4e:fc:17:0b:a2:66:35:d3:51:95:c9:ab:
6c:fe:81:4a:7e:30:bf:fc:32:9a:1a:43:49:4c:8a:83:02:aa:
8e:20:c0:16:bf:82:1a:ce:27:f3:3f:bc:c6:e1:88:03:ea:46:
a0:b6:f3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:06:24 2025 by rpki-client