Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/3136382e3139362e3234342e302f32322d3332203d3e20323633383031.roa
File: 3136382e3139362e3234342e302f32322d3332203d3e20323633383031.roa (raw, json)
Hash identifier: CpXuQeFgyuCjVRIimEXKmht6Lnz+O/zG8xt+TgHlSZ4=
Subject key identifier: AB:4E:58:3B:08:81:C7:FF:04:7E:6E:0C:5B:7F:5F:97:73:85:F7:5C
Certificate issuer: /CN=E450DBD4224F12B91D8B103471C79E21494AAABE
Certificate serial: 306F5532C4F8012946DBEE45C4F6DA36BB4B7603
Authority key identifier: E4:50:DB:D4:22:4F:12:B9:1D:8B:10:34:71:C7:9E:21:49:4A:AA:BE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/3136382e3139362e3234342e302f32322d3332203d3e20323633383031.roa
Signing time: Tue 04 Feb 2025 18:08:01 +0000
ROA not before: Tue 04 Feb 2025 18:03:01 +0000
ROA not after: Tue 03 Feb 2026 18:08:01 +0000
asID: 263801
IP address blocks: 168.196.244.0/22 maxlen: 32
Validation: Failed, certificate revoked on Mon 05 May 2025 00:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:6f:55:32:c4:f8:01:29:46:db:ee:45:c4:f6:da:36:bb:4b:76:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E450DBD4224F12B91D8B103471C79E21494AAABE
Validity
Not Before: Feb 4 18:03:01 2025 GMT
Not After : Feb 3 18:08:01 2026 GMT
Subject: CN=AB4E583B0881C7FF047E6E0C5B7F5F977385F75C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ee:e3:e1:b9:bd:c5:2f:4c:40:33:af:60:0a:
cf:0c:1c:af:02:af:9f:67:23:56:51:92:c5:9d:c7:
64:d7:4d:79:2d:d9:48:14:53:c9:80:5a:39:02:89:
93:3b:b6:93:09:80:cc:4d:49:0a:09:c2:0b:44:eb:
b5:53:15:75:10:c1:7f:df:59:8e:99:40:e8:d4:44:
7f:2a:d9:ed:e8:5e:b9:c8:a6:c1:13:78:0d:21:39:
be:d0:1e:50:86:19:75:c2:8c:ac:17:92:0f:19:bb:
96:bb:db:af:25:b0:f4:a5:d7:1b:5b:3d:90:d0:81:
86:6b:59:a4:c7:ab:30:b7:46:8d:72:50:ed:af:0f:
ef:0b:e7:9d:02:4e:2e:8b:dc:e9:5a:d5:1f:76:0b:
50:f2:49:a9:56:21:79:5b:bc:2c:b9:d9:10:01:56:
d6:1a:a0:6f:8c:27:30:45:95:d4:04:2c:30:c9:c1:
a8:38:47:0b:3e:de:1b:2a:34:4f:12:74:c0:fe:db:
e6:84:c9:f3:e3:4f:b8:ca:ea:88:56:e1:8a:d1:af:
8a:7a:33:01:66:78:8b:bb:15:28:8d:53:9e:03:8f:
a2:e0:d4:2b:56:3e:95:14:67:04:ef:12:cb:11:03:
c2:e7:b8:3e:28:17:40:50:86:db:27:44:70:e9:71:
78:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4E:58:3B:08:81:C7:FF:04:7E:6E:0C:5B:7F:5F:97:73:85:F7:5C
X509v3 Authority Key Identifier:
keyid:E4:50:DB:D4:22:4F:12:B9:1D:8B:10:34:71:C7:9E:21:49:4A:AA:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/3136382e3139362e3234342e302f32322d3332203d3e20323633383031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.196.244.0/22
Signature Algorithm: sha256WithRSAEncryption
77:09:75:9e:3e:14:09:20:80:fa:6c:e8:bd:9f:db:3c:e9:f1:
1d:13:a0:84:a2:78:ab:5c:77:84:ea:70:78:f8:78:be:19:c4:
04:b4:7c:2d:e2:b1:e2:38:b3:f7:3a:f5:b5:9d:d7:0d:27:a3:
d2:f1:54:ae:41:23:99:11:61:03:31:e7:d5:78:68:5a:9c:2e:
77:17:e4:84:4c:a1:5f:7a:8c:8c:0e:eb:c8:c2:4f:79:e6:cb:
d3:e3:30:e6:eb:01:08:f7:1e:72:01:04:08:01:41:a5:5b:bb:
2d:3e:30:c5:31:c8:65:b0:51:32:87:08:2a:c2:80:a8:2b:e5:
b5:69:bd:1c:50:df:47:7f:69:9f:60:52:59:e2:55:92:95:38:
d9:f1:ad:80:c9:ef:fb:49:f8:f6:7d:d8:c1:41:4c:24:48:4e:
f6:48:b1:2b:02:f7:3b:85:19:4c:d6:a7:9c:eb:bc:92:9e:d4:
4e:56:a3:5d:d2:73:57:9c:58:dc:e5:cd:b3:3f:a0:69:9d:55:
a9:d9:77:92:b4:4b:3c:07:6c:eb:78:20:16:06:91:64:2c:60:
8d:2f:99:e6:64:f1:c4:26:cc:0e:ff:16:b2:8f:1b:86:ed:6f:
6a:b4:69:db:54:31:06:18:a1:93:6d:95:65:08:7a:a6:a4:7a:
36:24:2c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:03:43 2025 by rpki-client