Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/34352e36382e39342e302f32332d3233203d3e203634313730.roa
File: 34352e36382e39342e302f32332d3233203d3e203634313730.roa (raw, json)
Hash identifier: mBbtMg2VdFIojSIYPPbG78u+E3/wTj1E5dXZpgtXgvQ=
Subject key identifier: 64:70:4C:77:10:2B:4D:42:6E:CF:CF:76:1F:2F:99:2F:C5:C6:64:50
Certificate issuer: /CN=E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0
Certificate serial: 604810115C87933390BFEBF0C023F18A8C4DFB67
Authority key identifier: E9:83:23:C8:F0:C8:DC:F5:1B:94:82:D5:6B:4B:DF:B8:B7:70:FE:E0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/34352e36382e39342e302f32332d3233203d3e203634313730.roa
Signing time: Tue 17 Jun 2025 01:50:01 +0000
ROA not before: Tue 17 Jun 2025 01:45:01 +0000
ROA not after: Tue 16 Jun 2026 01:50:01 +0000
asID: 64170
IP address blocks: 45.68.94.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 17 Jun 2025 11:05:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:48:10:11:5c:87:93:33:90:bf:eb:f0:c0:23:f1:8a:8c:4d:fb:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0
Validity
Not Before: Jun 17 01:45:01 2025 GMT
Not After : Jun 16 01:50:01 2026 GMT
Subject: CN=64704C77102B4D426ECFCF761F2F992FC5C66450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a4:04:00:c2:27:88:14:40:bd:7d:be:8b:10:
93:a8:cb:a4:69:2e:9d:f9:78:04:46:98:cd:b4:d3:
e6:a5:3a:f1:2d:5c:fa:f6:0c:3e:5b:0b:15:f4:b3:
71:67:fe:2c:0d:d7:df:07:44:8b:1b:e3:3b:ed:8c:
ed:e5:c1:70:b2:9a:89:5a:05:13:5a:1c:7b:62:cb:
0b:8d:70:c3:77:bc:0d:5c:04:49:ef:50:a9:75:f1:
64:cb:13:05:ba:b4:7a:59:ae:48:42:32:5f:eb:b9:
ba:4d:ef:ec:04:ae:6c:5d:f7:90:ed:0a:65:98:91:
1e:63:2a:c2:eb:32:3d:8c:2a:8f:32:3d:75:61:ca:
76:cc:26:a2:fe:16:24:b7:99:13:c2:15:35:6c:68:
0b:28:bc:5e:1d:e9:fe:96:e2:bc:3d:d2:2c:46:94:
f8:20:36:aa:89:4d:66:10:71:dc:43:0f:6f:8e:c5:
e8:f7:0f:63:2a:9a:4a:cf:8d:e0:eb:3d:fc:3c:50:
72:3a:6f:41:76:b4:74:e9:43:96:15:bc:c0:4a:10:
0e:bc:e9:9f:81:ca:90:a4:da:9b:44:6b:74:34:2a:
33:c9:2a:27:cd:df:9e:a8:d4:c6:ee:f8:ce:33:d6:
63:6c:f9:dd:4d:a1:bb:26:ab:fd:97:6d:30:ea:a7:
24:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:70:4C:77:10:2B:4D:42:6E:CF:CF:76:1F:2F:99:2F:C5:C6:64:50
X509v3 Authority Key Identifier:
keyid:E9:83:23:C8:F0:C8:DC:F5:1B:94:82:D5:6B:4B:DF:B8:B7:70:FE:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/34352e36382e39342e302f32332d3233203d3e203634313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.68.94.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:de:dd:97:8e:91:f6:c4:8f:d6:b7:d7:c3:3f:c6:d3:e0:49:
12:c6:f1:08:9b:12:74:d2:63:eb:9f:5d:a7:9c:21:37:c1:46:
1b:32:e8:98:94:fd:ee:04:49:a8:5a:cc:94:d2:8f:54:b8:7a:
73:fb:b2:1a:1b:86:64:e4:d5:9b:1c:fe:51:33:38:b0:86:7a:
b0:0b:a0:37:38:4e:41:9c:a6:ed:3f:3b:10:d2:15:19:07:eb:
67:d2:18:6e:1e:0e:50:49:16:2a:a4:07:1c:7e:75:65:6b:91:
1e:84:40:70:c6:b5:8c:47:a5:e3:9c:ea:d7:86:6e:cd:ca:e4:
ca:3b:d1:f7:d3:37:19:cb:7d:e5:c4:95:51:f9:d6:fb:46:b6:
ed:fe:3e:59:fb:cd:c1:09:83:a5:2a:cb:94:a0:0c:eb:f0:d4:
29:ab:be:7d:8e:a3:0a:cb:a7:86:46:82:86:48:31:35:fa:3e:
3c:94:3c:8a:4b:bd:a8:2e:32:cb:d3:e0:ef:e7:94:30:3b:3d:
94:67:05:0e:23:7b:05:d2:c8:47:54:a1:58:15:aa:c3:4d:6b:
1e:fe:01:8a:13:fb:b5:cc:7d:10:4e:d5:b8:54:7b:b1:a0:bd:
cb:1a:7e:eb:25:75:eb:c9:20:81:53:38:ee:6e:79:38:0e:de:
ed:44:68:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 13:12:06 2025 by rpki-client