Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6CDC5DE2D7CD6AC9AF27F2C749BE2DB823BF4D531F23C0C35E1743B2D7F11C09/0/323830333a313036303a3a2f33322d3332203d3e20323637383039.roa
File: 323830333a313036303a3a2f33322d3332203d3e20323637383039.roa (raw, json)
Hash identifier: WQ5sMngzQR3FD4qd+/KztoDpJWw0xBugfxE2LHi9q9k=
Subject key identifier: BE:4D:AE:37:AE:01:C7:E1:0C:00:63:9F:B9:FE:D4:7A:AA:13:37:6A
Certificate issuer: /CN=95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA
Certificate serial: 09A89E9968FECCC6396B6C4F4ACE8B60C6713892
Authority key identifier: 95:A8:CE:A1:F7:11:5C:0D:99:08:32:8A:0B:91:BA:4C:ED:D4:B6:DA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6CDC5DE2D7CD6AC9AF27F2C749BE2DB823BF4D531F23C0C35E1743B2D7F11C09/0/323830333a313036303a3a2f33322d3332203d3e20323637383039.roa
Signing time: Tue 04 Feb 2025 18:48:30 +0000
ROA not before: Tue 04 Feb 2025 18:43:30 +0000
ROA not after: Tue 03 Feb 2026 18:48:30 +0000
asID: 267809
IP address blocks: 2803:1060::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 02 May 2025 15:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:a8:9e:99:68:fe:cc:c6:39:6b:6c:4f:4a:ce:8b:60:c6:71:38:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA
Validity
Not Before: Feb 4 18:43:30 2025 GMT
Not After : Feb 3 18:48:30 2026 GMT
Subject: CN=BE4DAE37AE01C7E10C00639FB9FED47AAA13376A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4c:5a:5e:69:97:82:a2:73:48:a5:86:11:95:
94:07:f1:06:93:52:df:94:46:60:19:14:4f:ed:d5:
f2:4c:96:5d:96:b0:2d:12:bc:b0:b1:52:fa:b3:5f:
a4:8c:86:96:07:ef:6d:b6:79:55:e8:2b:16:5c:75:
ea:a5:b4:3e:cd:5e:e8:d6:a1:53:99:08:10:00:b2:
0a:8c:ad:8b:29:81:b2:6b:4f:b0:db:ff:6e:4a:df:
44:a2:a7:3d:26:ad:8b:83:22:82:6c:ae:b9:00:c0:
e3:b5:c6:60:fe:45:49:b6:5c:bb:d7:02:21:90:78:
39:55:17:15:79:ac:58:34:0c:ca:c9:81:cf:b8:5a:
24:2a:c5:b5:9b:aa:b5:87:90:dc:0c:a3:43:b6:b2:
4a:51:54:37:7b:83:da:fe:c6:6c:12:c7:30:b6:42:
17:b9:2c:83:cd:1c:81:49:06:19:20:c8:04:94:a4:
95:f1:17:2a:29:df:e5:30:61:c1:89:be:94:3a:ba:
8d:17:4b:1c:61:6d:e3:df:4a:c2:e0:ac:63:4c:6b:
d3:b2:fe:36:59:5f:44:3e:bc:3b:a7:3f:2b:b9:50:
aa:09:8a:02:f6:3a:0d:8e:07:54:ba:75:0d:a4:8d:
36:08:4f:d6:aa:9b:10:b0:9f:ae:86:c5:52:53:18:
05:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4D:AE:37:AE:01:C7:E1:0C:00:63:9F:B9:FE:D4:7A:AA:13:37:6A
X509v3 Authority Key Identifier:
keyid:95:A8:CE:A1:F7:11:5C:0D:99:08:32:8A:0B:91:BA:4C:ED:D4:B6:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6CDC5DE2D7CD6AC9AF27F2C749BE2DB823BF4D531F23C0C35E1743B2D7F11C09/0/95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6CDC5DE2D7CD6AC9AF27F2C749BE2DB823BF4D531F23C0C35E1743B2D7F11C09/0/323830333a313036303a3a2f33322d3332203d3e20323637383039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:1060::/32
Signature Algorithm: sha256WithRSAEncryption
1b:49:cd:bd:f0:01:61:58:87:5f:80:b6:06:d7:ca:90:63:4b:
b2:39:9b:d9:a6:a9:ab:8d:c1:a1:c4:3b:54:cc:91:0f:d6:9f:
0a:76:29:9d:6f:cf:05:29:2d:15:52:32:b8:96:35:6e:eb:b4:
eb:5e:fa:96:78:b3:85:a1:62:41:84:49:d5:60:16:02:d6:97:
32:49:c8:70:a4:2b:8f:40:08:d4:04:27:65:77:36:43:d6:5b:
20:3b:97:1c:89:0f:cf:b1:36:06:9d:96:86:53:fc:a3:6d:1a:
d8:dc:96:e9:62:79:8f:ab:b6:5b:70:08:f2:1d:dc:f9:6b:4e:
bf:06:cd:bc:5e:15:c8:92:bd:77:6f:a6:2d:29:a7:41:1a:f9:
00:4c:78:1a:92:7e:73:6b:d1:98:7d:94:86:60:c5:5b:bf:7b:
99:9f:84:15:36:5f:55:e9:6d:c1:21:d1:f4:46:08:f8:51:a1:
ce:ee:d4:15:26:30:b6:60:f9:3e:1e:c4:c1:4c:18:9d:69:9b:
00:a3:a7:c6:7c:ee:6f:96:d9:31:d8:f0:61:8c:10:3b:8c:50:
f3:57:f3:06:49:d5:7d:9c:bd:3a:d5:dc:2c:5b:3c:41:68:d5:
c9:a8:ed:70:e2:50:01:a7:0c:08:6a:a7:cf:cd:7d:a3:c4:43:
0f:b8:65:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 10:28:13 2025 by rpki-client