Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830303a65303a3a2f32382d3332203d3e203133343839.roa
File: 323830303a65303a3a2f32382d3332203d3e203133343839.roa (raw, json)
Hash identifier: b/56Fwg2yWtels+E3iP2myiFh9YA9aUG5lFMYBJ0Sh8=
Subject key identifier: 0D:ED:E4:D4:02:78:37:5B:82:D0:2A:B5:09:C3:5C:5A:3F:9A:8B:6E
Certificate issuer: /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial: 6BFA2F7C3B7154C9D8B3AB45CFDF5FF1EA29E82E
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830303a65303a3a2f32382d3332203d3e203133343839.roa
Signing time: Mon 30 Sep 2024 22:20:00 +0000
ROA not before: Mon 30 Sep 2024 22:15:00 +0000
ROA not after: Mon 29 Sep 2025 22:20:00 +0000
asID: 13489
IP address blocks: 2800:e0::/28 maxlen: 32
Validation: Failed, certificate revoked on Mon 30 Sep 2024 22:45:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:fa:2f:7c:3b:71:54:c9:d8:b3:ab:45:cf:df:5f:f1:ea:29:e8:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Validity
Not Before: Sep 30 22:15:00 2024 GMT
Not After : Sep 29 22:20:00 2025 GMT
Subject: CN=0DEDE4D40278375B82D02AB509C35C5A3F9A8B6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c7:5a:3d:21:9e:45:8f:ed:ad:2f:4f:b5:f1:
be:d8:5a:45:16:87:ea:dd:d4:19:f5:3c:53:f4:85:
ef:79:4b:f9:06:52:b9:24:4d:f4:49:d4:2d:68:03:
42:ce:06:54:07:46:31:61:0b:0b:fb:64:22:22:4f:
b3:37:21:50:8b:f8:37:dd:ec:61:21:81:fa:5c:26:
05:a6:88:6e:39:59:ab:8d:31:86:94:7b:34:83:d6:
95:b4:35:19:13:1a:8f:e6:05:b5:a0:0d:db:75:74:
94:c8:94:61:94:eb:c8:11:51:90:d9:ae:74:87:5e:
9f:b3:51:5f:e8:f7:ee:ed:23:16:7e:ff:c7:6e:cc:
cc:d5:7c:60:e3:82:54:b4:e2:59:9f:b0:41:3f:96:
9f:04:e5:12:9e:4e:64:95:c7:30:20:65:64:ad:96:
f6:96:82:8a:27:eb:5a:9a:c7:31:03:d0:75:4c:3c:
e8:5a:d5:68:a9:65:f4:c4:31:41:66:80:79:55:5d:
7e:64:92:4b:98:f0:91:d3:4e:71:ef:a1:78:8c:b7:
79:b3:cc:d9:83:dc:e4:4d:a9:b4:6d:5e:2f:33:d3:
53:fa:a6:83:c4:bb:ba:97:74:9f:0d:e7:ba:eb:12:
7f:13:86:fa:91:73:a4:04:d3:64:0c:ad:98:44:63:
54:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:ED:E4:D4:02:78:37:5B:82:D0:2A:B5:09:C3:5C:5A:3F:9A:8B:6E
X509v3 Authority Key Identifier:
keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830303a65303a3a2f32382d3332203d3e203133343839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:e0::/28
Signature Algorithm: sha256WithRSAEncryption
4f:65:0e:7e:9c:6b:60:be:58:05:20:6e:ae:3c:5f:3f:d2:d0:
93:c0:5a:fe:f9:f1:32:2c:39:bb:81:6b:cc:b7:b0:e3:dc:0d:
29:55:41:ce:fd:36:49:5a:01:b2:c6:92:3b:09:a5:6c:8e:c1:
d2:44:10:4f:a9:b6:7c:f9:bf:52:81:d2:f0:ef:7f:18:75:5a:
91:05:51:a4:31:8c:e2:5d:2c:1c:95:9d:7a:85:9a:11:77:91:
32:32:e0:72:9f:63:4a:ec:cb:c3:e4:e3:49:c6:9f:c8:19:8e:
3f:89:7b:df:94:e4:da:b8:26:74:97:b7:c5:7d:f9:45:a2:fe:
98:b8:41:7a:3d:88:75:06:01:8d:32:c2:e5:e5:78:16:13:c8:
4d:c3:a8:4d:9f:9c:6a:2b:ea:ee:16:62:36:f9:66:6c:44:de:
91:90:df:1d:23:59:08:7e:85:00:19:04:d3:74:58:bd:5a:ea:
03:35:d4:bd:6f:4c:e7:f4:c2:95:28:f7:48:2b:c0:d6:21:29:
cd:e8:99:30:f4:01:26:8c:1e:85:c9:14:58:b7:12:58:f2:be:
8d:ae:bf:15:9e:56:4e:c9:1d:ff:51:ad:40:b1:a3:1f:3b:93:
85:87:aa:ed:69:70:17:20:02:d9:2c:46:28:1c:e3:0d:71:1e:
ba:15:44:ae
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUa/ovfDtxVMnYs6tFz99f8eop6C4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQwMzlGNUJBREVDRDRERkI0MkUzRjRFMEM1RUNFOTdB
MzAxODBBNzAeFw0yNDA5MzAyMjE1MDBaFw0yNTA5MjkyMjIwMDBaMDMxMTAvBgNV
BAMTKDBERURFNEQ0MDI3ODM3NUI4MkQwMkFCNTA5QzM1QzVBM0Y5QThCNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9x1o9IZ5Fj+2tL0+18b7YWkUW
h+rd1Bn1PFP0he95S/kGUrkkTfRJ1C1oA0LOBlQHRjFhCwv7ZCIiT7M3IVCL+Dfd
7GEhgfpcJgWmiG45WauNMYaUezSD1pW0NRkTGo/mBbWgDdt1dJTIlGGU68gRUZDZ
rnSHXp+zUV/o9+7tIxZ+/8duzMzVfGDjglS04lmfsEE/lp8E5RKeTmSVxzAgZWSt
lvaWgoon61qaxzED0HVMPOha1WipZfTEMUFmgHlVXX5kkkuY8JHTTnHvoXiMt3mz
zNmD3ORNqbRtXi8z01P6poPEu7qXdJ8N57rrEn8ThvqRc6QE02QMrZhEY1SXAgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQUDe3k1AJ4N1uC0Cq1CcNcWj+ai24wHwYDVR0j
BBgwFoAUNAOfW63s1N+0Lj9ODF7Ol6MBgKcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MUU1MjNBNDc4NDNBOTZDQ0JEOTQ5RkRGNzJDODA2NDIy
MDVBNkY1QjYxQ0IzMjlGNjY1MzY4QTQ4QjJBNUExLzAvMzQwMzlGNUJBREVDRDRE
RkI0MkUzRjRFMEM1RUNFOTdBMzAxODBBNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNDAzOUY1QkFERUNENERGQjQy
RTNGNEUwQzVFQ0U5N0EzMDE4MEE3LmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTFFNTIzQTQ3ODQzQTk2Q0NCRDk0OUZERjcyQzgwNjQyMjA1QTZGNUI2
MUNCMzI5RjY2NTM2OEE0OEIyQTVBMS8wLzMyMzgzMDMwM2E2NTMwM2EzYTJmMzIz
ODJkMzMzMjIwM2QzZTIwMzEzMzM0MzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFBCgAAOAwDQYJKoZI
hvcNAQELBQADggEBAE9lDn6ca2C+WAUgbq48Xz/S0JPAWv758TIsObuBa8y3sOPc
DSlVQc79NklaAbLGkjsJpWyOwdJEEE+ptnz5v1KB0vDvfxh1WpEFUaQxjOJdLByV
nXqFmhF3kTIy4HKfY0rsy8Pk40nGn8gZjj+Je9+U5Nq4JnSXt8V9+UWi/pi4QXo9
iHUGAY0ywuXleBYTyE3DqE2fnGor6u4WYjb5ZmxE3pGQ3x0jWQh+hQAZBNN0WL1a
6gM11L1vTOf0wpUo90grwNYhKc3omTD0ASaMHoXJFFi3Eljyvo2uvxWeVk7JHf9R
rUCxox87k4WHqu1pcBcgAtksRigc4w1xHroVRK4=
-----END CERTIFICATE-----
Generated at Sat May 10 14:34:18 2025 by rpki-client