Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/34352e36382e39352e302f32342d3234203d3e203634313730.roa
File: 34352e36382e39352e302f32342d3234203d3e203634313730.roa (raw, json)
Hash identifier: p1LsuTnlN+kjelkXwRkTXp9Gerta+qLM4x+IGb6k4j8=
Subject key identifier: 56:E3:74:94:43:33:6A:EA:14:7B:3B:2C:35:21:DE:CE:66:34:01:17
Certificate issuer: /CN=E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0
Certificate serial: 550D3A68FA790C390CB12F8D1CADEE89E346EB3C
Authority key identifier: E9:83:23:C8:F0:C8:DC:F5:1B:94:82:D5:6B:4B:DF:B8:B7:70:FE:E0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/34352e36382e39352e302f32342d3234203d3e203634313730.roa
Signing time: Tue 17 Jun 2025 01:50:01 +0000
ROA not before: Tue 17 Jun 2025 01:45:01 +0000
ROA not after: Tue 16 Jun 2026 01:50:01 +0000
asID: 64170
IP address blocks: 45.68.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Jun 2025 11:05:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:0d:3a:68:fa:79:0c:39:0c:b1:2f:8d:1c:ad:ee:89:e3:46:eb:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0
Validity
Not Before: Jun 17 01:45:01 2025 GMT
Not After : Jun 16 01:50:01 2026 GMT
Subject: CN=56E3749443336AEA147B3B2C3521DECE66340117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:46:d0:ae:11:d2:89:f5:83:d4:4d:6d:59:5f:
12:1c:a7:85:f8:82:29:d5:d1:b6:29:ac:ea:9c:92:
69:a8:14:67:9a:7e:3f:50:bd:ee:27:f6:bf:a9:2f:
6f:ff:b0:62:d6:0d:c8:ce:b3:06:f6:fa:5d:0c:bf:
d5:6e:fd:79:60:ad:89:b4:18:ed:3c:c9:80:fe:f7:
ad:24:53:25:71:cf:82:67:4f:50:1b:8b:3a:ab:e5:
50:90:8d:15:f2:fe:25:5a:96:7d:ca:ba:7c:73:4a:
fb:48:ab:6b:e2:b4:32:ca:eb:b6:5c:3e:da:ed:31:
3d:1b:67:83:bf:37:6e:3b:6c:68:fd:bb:78:8f:15:
a8:d7:ac:f1:83:22:fc:61:ee:95:8c:80:9d:6d:f8:
ab:eb:9a:60:ec:79:e3:a4:7f:88:3f:ce:7f:c9:94:
c7:2f:90:01:05:cc:b8:b4:b2:52:39:03:01:b8:d6:
b0:1f:42:59:8e:8f:20:7b:65:fc:03:ef:4f:06:b4:
64:4f:37:39:7a:47:63:4b:48:b2:44:f6:5f:18:13:
73:39:f5:fe:7b:a3:c6:74:08:11:f2:ad:d1:0e:09:
59:c1:3a:89:ea:22:ed:a5:ae:b2:89:d2:ed:6e:96:
a4:71:32:39:57:35:f7:d6:c3:88:38:c9:10:77:b0:
c7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E3:74:94:43:33:6A:EA:14:7B:3B:2C:35:21:DE:CE:66:34:01:17
X509v3 Authority Key Identifier:
keyid:E9:83:23:C8:F0:C8:DC:F5:1B:94:82:D5:6B:4B:DF:B8:B7:70:FE:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E98323C8F0C8DCF51B9482D56B4BDFB8B770FEE0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9AC7748F9094642EED5B16AEF280E02926DFE6989A99FBF440486BACFB09015D/0/34352e36382e39352e302f32342d3234203d3e203634313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.68.95.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:64:da:cf:50:f0:6a:5f:48:77:83:10:e9:da:dd:d2:66:1b:
fd:b2:e5:f8:8c:a6:6e:cd:11:1e:6d:91:96:41:a2:85:94:83:
31:61:a3:32:9d:90:ed:fe:6e:93:08:fb:15:77:f0:5c:b2:b1:
f6:8f:70:78:f3:2b:56:c7:91:09:49:43:7f:16:57:1e:22:73:
9a:7c:01:43:bc:15:7c:dc:be:15:24:6e:8a:15:a4:9b:04:5f:
aa:02:d0:e0:5b:73:67:b8:63:4c:7f:e7:b9:6b:d5:d0:a5:05:
69:eb:3a:3f:14:3b:88:76:81:9e:35:1f:57:d9:b6:3f:04:0b:
46:51:84:56:cb:77:17:c3:cb:ac:34:f1:9f:ea:c4:58:71:7a:
61:9b:00:c1:fd:f5:3b:f0:0b:70:75:9d:7c:d1:00:84:d7:2e:
19:73:87:59:44:04:eb:95:08:07:cc:9f:30:33:aa:fe:3d:62:
ab:61:6a:8f:72:d3:c6:d2:73:04:48:bf:84:4e:29:4a:52:2f:
e1:25:9d:f9:da:a8:52:57:ba:ac:df:d4:38:72:d2:ba:69:6d:
f2:b2:f0:63:f7:84:89:7d:67:90:1d:4c:d3:a2:4f:e8:f1:a4:
97:32:c8:11:3e:dc:61:22:67:14:68:92:37:64:eb:a5:8c:64:
25:06:c6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 07:52:50 2025 by rpki-client