Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/34352e3137302e3130312e302f32342d3234203d3e20323636383531.roa
File: 34352e3137302e3130312e302f32342d3234203d3e20323636383531.roa (raw, json)
Hash identifier: Bf7dmyhC8ET1BFtAflvbNnbBiQeNzidFPMKtdbI9p5s=
Subject key identifier: 1E:44:9A:D1:5D:FA:DD:72:CF:71:DD:50:7B:AE:0A:20:C3:B3:6F:6E
Certificate issuer: /CN=84B320834CA10CE018169848F7AE0810EB3E7C5D
Certificate serial: 357D67F719545D871D2E1C21B29A6010515A470E
Authority key identifier: 84:B3:20:83:4C:A1:0C:E0:18:16:98:48:F7:AE:08:10:EB:3E:7C:5D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/34352e3137302e3130312e302f32342d3234203d3e20323636383531.roa
Signing time: Fri 06 Jun 2025 23:15:00 +0000
ROA not before: Fri 06 Jun 2025 23:10:00 +0000
ROA not after: Fri 05 Jun 2026 23:15:00 +0000
asID: 266851
IP address blocks: 45.170.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 07 Jun 2025 00:25:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:7d:67:f7:19:54:5d:87:1d:2e:1c:21:b2:9a:60:10:51:5a:47:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84B320834CA10CE018169848F7AE0810EB3E7C5D
Validity
Not Before: Jun 6 23:10:00 2025 GMT
Not After : Jun 5 23:15:00 2026 GMT
Subject: CN=1E449AD15DFADD72CF71DD507BAE0A20C3B36F6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9a:99:70:9b:43:a1:4f:02:9b:a7:ae:a8:35:
f7:cf:f5:3c:4c:ab:f9:fa:71:35:aa:65:f4:4b:7c:
11:16:93:8b:f4:08:8a:cc:17:ad:e8:7d:1f:97:07:
4b:d8:57:f9:75:ca:c1:94:ea:ae:75:ea:e1:59:96:
0a:a7:78:eb:76:a0:3c:f3:fe:70:7d:d9:91:36:42:
4e:ac:e5:8d:e9:02:3c:43:1a:33:00:a0:81:1f:96:
b5:0c:87:9b:d9:00:aa:46:ee:6f:9e:bd:2a:3c:60:
85:6e:74:22:59:83:3a:97:02:8b:d7:ef:be:28:47:
80:73:67:74:65:05:94:06:85:09:2d:52:0e:f6:0a:
74:68:aa:47:9a:04:69:04:49:4a:f5:c6:77:1b:f9:
39:8f:e7:37:1b:4c:dd:95:21:3b:af:8e:5d:93:ba:
e9:53:2b:4f:e9:e3:54:d1:79:33:ab:8c:ff:4a:47:
43:e8:56:a9:7d:f8:e8:98:5e:99:ed:2f:bc:98:38:
12:3f:b3:4f:6a:4a:fa:43:58:bc:f1:48:28:8f:83:
22:7e:e3:c9:60:3d:c8:e3:97:31:86:03:0a:fe:fa:
40:1a:88:2e:95:e1:49:f2:81:1e:78:2e:81:3c:96:
03:60:a1:f5:40:80:b7:08:59:b8:cf:21:21:c1:59:
92:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:44:9A:D1:5D:FA:DD:72:CF:71:DD:50:7B:AE:0A:20:C3:B3:6F:6E
X509v3 Authority Key Identifier:
keyid:84:B3:20:83:4C:A1:0C:E0:18:16:98:48:F7:AE:08:10:EB:3E:7C:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/34352e3137302e3130312e302f32342d3234203d3e20323636383531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.170.101.0/24
Signature Algorithm: sha256WithRSAEncryption
23:f7:71:8f:7b:4c:f6:bc:0c:8b:43:f5:ab:07:fc:14:65:6b:
97:94:08:54:f6:70:30:0a:d9:54:dd:15:c6:85:b3:3f:6e:5f:
8d:ce:b5:f7:07:4f:91:95:14:4c:b1:ac:4c:f5:9a:91:de:ab:
c6:a9:2d:89:fc:6f:aa:83:b0:eb:a4:7c:f1:ac:7c:20:76:16:
8a:81:89:1e:fe:ff:e4:06:5d:6c:3f:09:1c:b0:e6:74:84:f5:
87:b7:05:46:18:59:fd:a0:ad:7e:88:2c:d0:ab:28:cd:2e:29:
53:d7:52:43:ce:61:6e:a3:68:4d:62:95:d8:66:eb:01:c6:28:
18:80:59:43:57:3c:cf:19:14:e1:94:72:47:9c:64:2a:61:1d:
a8:1f:16:df:7a:da:de:9d:c2:ee:ff:84:a0:99:7a:0c:2a:6d:
c0:45:27:3f:68:87:55:71:5e:ee:00:5d:dd:67:38:38:04:69:
00:14:77:fb:79:ec:2d:f7:c4:8e:86:3e:86:d8:35:a0:30:32:
6a:21:eb:3c:f8:f0:e3:6a:5a:c0:55:f8:16:33:d1:6f:c8:26:
47:be:e2:06:3f:ee:5e:45:0e:55:e3:6d:87:67:6a:fa:99:1f:
d1:a6:db:39:e3:0e:f3:9b:77:d8:83:41:8e:f0:b1:fc:45:89:
ca:b8:3f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 07:50:50 2025 by rpki-client