Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE52AC90C50FD22FE2521E5D54BBC6A5B30781F33450A62DEDDDAF3AB3F705ED/0/3133382e3131372e34322e302f32332d3234203d3e20323639393830.roa
File: 3133382e3131372e34322e302f32332d3234203d3e20323639393830.roa (raw, json)
Hash identifier: r+p8EZP6Zt6R7GULKmXBNyFPhVK5wXEtUwU64TMnBuQ=
Subject key identifier: 9D:20:84:7F:FC:65:D7:26:CD:BF:2F:0E:5C:B6:3D:62:DA:15:2D:35
Certificate issuer: /CN=2FD825A27B2B347F806C2CACDF49209D17BBF654
Certificate serial: 577A3A1C474E59A6BCCC1E61415CCD08B8063DA2
Authority key identifier: 2F:D8:25:A2:7B:2B:34:7F:80:6C:2C:AC:DF:49:20:9D:17:BB:F6:54
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FD825A27B2B347F806C2CACDF49209D17BBF654.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/FE52AC90C50FD22FE2521E5D54BBC6A5B30781F33450A62DEDDDAF3AB3F705ED/0/3133382e3131372e34322e302f32332d3234203d3e20323639393830.roa
Signing time: Tue 03 Dec 2024 20:50:00 +0000
ROA not before: Tue 03 Dec 2024 20:45:00 +0000
ROA not after: Tue 02 Dec 2025 20:50:00 +0000
asID: 269980
IP address blocks: 138.117.42.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Feb 2025 20:25:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:7a:3a:1c:47:4e:59:a6:bc:cc:1e:61:41:5c:cd:08:b8:06:3d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FD825A27B2B347F806C2CACDF49209D17BBF654
Validity
Not Before: Dec 3 20:45:00 2024 GMT
Not After : Dec 2 20:50:00 2025 GMT
Subject: CN=9D20847FFC65D726CDBF2F0E5CB63D62DA152D35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9b:37:87:77:d8:70:e1:22:11:2e:d7:fe:cf:
16:04:9a:39:63:0b:57:4d:8f:8d:f7:79:80:1a:88:
3b:b8:86:c1:9c:d5:c6:30:73:6a:f1:cf:2c:a4:8d:
7a:38:fb:01:9e:c4:8f:e5:37:cd:e2:2d:88:76:09:
78:05:d9:68:ee:de:6b:39:a9:92:13:c3:1c:44:82:
a7:53:be:6b:bd:64:83:98:58:8d:4b:59:fa:e1:b8:
f3:a8:9e:2d:c1:bc:b7:20:f4:45:d1:fa:9b:32:9c:
57:d9:cf:c1:57:62:9d:e0:64:73:56:e3:92:5f:e1:
ce:dd:9f:b7:4a:33:b3:7b:51:53:56:00:37:48:e6:
5d:0d:92:66:db:e0:a0:ad:a3:18:b1:6c:62:c8:cc:
44:7f:3c:19:c6:3a:e2:b0:13:84:6a:22:66:85:2e:
64:c4:2b:a2:0a:03:80:55:dc:ad:2d:6d:83:f4:47:
16:f7:9d:be:44:9c:b6:f9:38:db:50:8d:d1:62:a3:
18:d4:99:96:a0:f1:b6:af:51:ca:58:79:ac:cf:2b:
67:8a:69:70:76:2e:73:b7:fd:9d:f1:ae:9b:7c:8b:
45:e3:7e:83:a7:58:74:d9:ed:6b:74:de:f0:47:68:
10:f8:f8:41:16:27:2e:1b:43:27:f9:9f:9c:ca:f1:
65:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:20:84:7F:FC:65:D7:26:CD:BF:2F:0E:5C:B6:3D:62:DA:15:2D:35
X509v3 Authority Key Identifier:
keyid:2F:D8:25:A2:7B:2B:34:7F:80:6C:2C:AC:DF:49:20:9D:17:BB:F6:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FE52AC90C50FD22FE2521E5D54BBC6A5B30781F33450A62DEDDDAF3AB3F705ED/0/2FD825A27B2B347F806C2CACDF49209D17BBF654.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FD825A27B2B347F806C2CACDF49209D17BBF654.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE52AC90C50FD22FE2521E5D54BBC6A5B30781F33450A62DEDDDAF3AB3F705ED/0/3133382e3131372e34322e302f32332d3234203d3e20323639393830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.42.0/23
Signature Algorithm: sha256WithRSAEncryption
80:18:50:6d:07:f1:62:db:7d:9b:24:05:a1:86:bb:33:50:55:
8e:2f:5e:87:a1:7d:7f:0e:16:14:2d:24:a9:ab:f2:f2:b3:d8:
b3:0c:57:68:f5:ff:46:a5:24:7c:0a:c1:b5:3f:4c:d8:d1:81:
d5:6a:23:89:df:93:5b:d1:db:fc:98:91:38:6f:dc:29:c5:1e:
db:15:f1:b0:42:14:3a:40:5b:99:1b:f9:49:6d:66:0c:71:89:
ad:d2:9b:0e:57:c0:6a:1d:fe:a5:ee:5a:14:5c:3a:6f:02:db:
86:40:d5:ae:b1:11:94:f1:71:0e:ce:aa:9f:37:56:74:7e:5d:
63:2a:be:0e:cf:69:52:df:ff:ca:ab:10:6f:0c:77:ed:6c:61:
3f:0f:7a:d6:32:2c:e6:49:e3:1b:6d:13:68:be:8d:62:ed:31:
85:84:c8:8a:00:44:e0:70:c0:40:99:a2:f7:76:e8:8d:bf:30:
32:4c:2a:92:f0:7c:4d:12:2f:21:6f:35:78:da:fc:6d:33:a8:
d4:34:ec:75:6d:23:0d:b3:9b:31:bb:b5:74:55:21:23:24:58:
27:cd:22:cf:07:37:76:6f:51:7f:02:f8:d9:1c:9c:ab:9d:f1:
48:3f:40:7f:39:f4:26:b3:12:9b:3b:d6:4d:0a:0b:d9:62:b1:
95:01:3d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:08:50 2025 by rpki-client