Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3F96CB4CDE56AB24C3225B6CF65D5E42EEA040389832BF960408FE15474F9A59/0/323830333a333131303a3a2f33322d3438203d3e20323731393936.roa
File: 323830333a333131303a3a2f33322d3438203d3e20323731393936.roa (raw, json)
Hash identifier: BNAdxa+31dmSosUFkkxxfx8KRqWHf+LEbL78LVhiIp4=
Subject key identifier: 74:18:A4:C6:BC:12:59:A4:E6:27:94:9F:1B:0B:E2:22:AF:C7:B6:79
Certificate issuer: /CN=917ECF9FCF80262D23621352984A4B294B9FBCDC
Certificate serial: 08AEF94C7FA3B66259A7E8C48FBDB40518752F73
Authority key identifier: 91:7E:CF:9F:CF:80:26:2D:23:62:13:52:98:4A:4B:29:4B:9F:BC:DC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/917ECF9FCF80262D23621352984A4B294B9FBCDC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3F96CB4CDE56AB24C3225B6CF65D5E42EEA040389832BF960408FE15474F9A59/0/323830333a333131303a3a2f33322d3438203d3e20323731393936.roa
Signing time: Fri 25 Apr 2025 20:45:00 +0000
ROA not before: Fri 25 Apr 2025 20:40:00 +0000
ROA not after: Fri 24 Apr 2026 20:45:00 +0000
asID: 271996
IP address blocks: 2803:3110::/32 maxlen: 48
Validation: Failed, certificate revoked on Fri 25 Apr 2025 20:55:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:ae:f9:4c:7f:a3:b6:62:59:a7:e8:c4:8f:bd:b4:05:18:75:2f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917ECF9FCF80262D23621352984A4B294B9FBCDC
Validity
Not Before: Apr 25 20:40:00 2025 GMT
Not After : Apr 24 20:45:00 2026 GMT
Subject: CN=7418A4C6BC1259A4E627949F1B0BE222AFC7B679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:08:e5:bf:96:ac:f0:63:a1:4c:9a:5c:80:12:
0a:5c:4f:db:48:95:6d:3d:aa:93:63:34:b6:a3:a9:
74:af:1f:45:f1:0d:f0:25:97:e2:a2:ec:7e:e7:d9:
ef:a9:99:9f:9f:c2:ad:74:db:b3:84:da:6d:d4:33:
74:a3:0d:50:a7:76:58:d4:02:4f:d6:a3:1e:0f:b3:
fd:cf:75:ef:5e:f3:fa:58:53:ba:b4:c1:26:9b:31:
b2:4c:5d:6f:6f:60:b2:4c:21:ca:5d:d8:2e:6e:83:
d0:11:c4:8c:10:3e:8f:70:52:a9:ad:73:6c:ce:3c:
37:dd:58:d5:9e:9d:7d:3b:9a:23:0d:aa:78:8e:0c:
65:bd:c3:9d:ae:cd:fc:c8:6b:82:40:5c:73:a8:3e:
11:90:da:ce:41:97:b9:79:bc:80:9f:37:64:a8:f9:
ef:b7:71:a5:b4:a5:4e:e6:6c:5f:d2:73:56:55:92:
d9:b6:70:c4:50:fd:38:48:15:31:1b:09:c0:ff:2d:
d3:e1:94:91:5f:c4:23:d6:1e:cf:32:bf:28:34:15:
53:cf:ae:6c:13:38:d0:42:19:e3:8b:ad:e3:ab:d0:
3b:2a:7a:59:9e:c8:cc:2f:bc:95:41:07:8d:81:bc:
88:56:3d:ee:aa:9a:f0:02:53:b6:38:dc:ce:7e:a9:
69:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:18:A4:C6:BC:12:59:A4:E6:27:94:9F:1B:0B:E2:22:AF:C7:B6:79
X509v3 Authority Key Identifier:
keyid:91:7E:CF:9F:CF:80:26:2D:23:62:13:52:98:4A:4B:29:4B:9F:BC:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3F96CB4CDE56AB24C3225B6CF65D5E42EEA040389832BF960408FE15474F9A59/0/917ECF9FCF80262D23621352984A4B294B9FBCDC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/917ECF9FCF80262D23621352984A4B294B9FBCDC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F96CB4CDE56AB24C3225B6CF65D5E42EEA040389832BF960408FE15474F9A59/0/323830333a333131303a3a2f33322d3438203d3e20323731393936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:3110::/32
Signature Algorithm: sha256WithRSAEncryption
0e:56:94:77:b6:fc:cc:a1:96:73:21:9c:42:51:c0:7c:1d:e4:
bf:a5:d1:f6:60:de:cd:3d:4e:41:98:6c:ff:95:6d:75:45:3e:
5c:df:90:8d:cf:97:b6:21:fb:6d:29:f7:7f:72:62:58:d7:af:
ed:68:07:f2:29:aa:0e:bb:b7:ad:43:5a:49:36:e6:d6:e3:e0:
9c:dc:1f:6c:c7:45:50:af:9d:e6:6f:02:93:32:97:0a:14:61:
b2:2d:dd:82:ca:43:93:8a:04:89:e8:62:53:99:46:c3:13:6b:
6c:e1:37:82:68:e8:27:b5:d9:5b:bb:b6:a4:2f:5a:38:83:34:
f3:b8:5e:f8:07:35:46:8c:21:e1:85:1e:54:8b:94:3c:fc:85:
8c:64:7e:7c:f0:e5:70:16:d6:85:93:4c:dd:df:ec:5c:0e:7b:
8b:68:c0:fb:73:67:7c:76:cd:4e:f7:b0:58:6b:f5:bd:fb:cd:
96:f8:25:70:19:cd:26:1b:28:5c:a6:de:b4:41:00:5c:bf:07:
d7:6e:b8:be:e7:86:ec:f0:b7:ff:1c:cc:06:01:86:75:43:54:
52:22:6c:33:22:08:da:17:5a:a4:97:78:f2:19:69:e6:4e:5d:
da:2a:ba:51:c5:c3:d0:62:f8:a0:02:8a:1e:3f:29:ed:e1:57:
37:c9:e7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 15:16:59 2025 by rpki-client