Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB9C3EE1FD45792E24CB794F868C354E051D3CBE843C71C67B0B1A910F7C70A5/0/34352e3139312e34342e302f32322d3234203d3e20323639393030.roa
File: 34352e3139312e34342e302f32322d3234203d3e20323639393030.roa (raw, json)
Hash identifier: i1g7HcCzi0FAgv+x0UTtFjPkfJP4hr1dU1HqJOhxSAA=
Subject key identifier: 09:11:FD:F4:27:94:01:F8:88:F0:45:EA:3A:CF:B7:D3:51:47:55:49
Certificate issuer: /CN=C88E06CCAFF9CD22AA83801DCA00A03F91548D6E
Certificate serial: 34A7700E156A20AB10603290CCAEFB3A7FC78CD5
Authority key identifier: C8:8E:06:CC:AF:F9:CD:22:AA:83:80:1D:CA:00:A0:3F:91:54:8D:6E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C88E06CCAFF9CD22AA83801DCA00A03F91548D6E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DB9C3EE1FD45792E24CB794F868C354E051D3CBE843C71C67B0B1A910F7C70A5/0/34352e3139312e34342e302f32322d3234203d3e20323639393030.roa
Signing time: Tue 17 Jun 2025 21:10:01 +0000
ROA not before: Tue 17 Jun 2025 21:05:01 +0000
ROA not after: Tue 16 Jun 2026 21:10:01 +0000
asID: 269900
IP address blocks: 45.191.44.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Jun 2025 21:50:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:a7:70:0e:15:6a:20:ab:10:60:32:90:cc:ae:fb:3a:7f:c7:8c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C88E06CCAFF9CD22AA83801DCA00A03F91548D6E
Validity
Not Before: Jun 17 21:05:01 2025 GMT
Not After : Jun 16 21:10:01 2026 GMT
Subject: CN=0911FDF4279401F888F045EA3ACFB7D351475549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dd:52:c1:1e:30:9b:47:b2:09:e0:7d:e9:8a:
11:e0:92:33:3a:23:38:a2:80:1b:25:c2:19:db:70:
f4:80:69:ee:74:45:48:9c:b9:8b:42:40:ae:8f:08:
0e:e4:50:06:66:07:4f:c1:74:17:18:af:d2:33:53:
d0:08:9d:88:ab:da:94:b0:2e:dc:8a:19:83:f7:33:
c9:97:47:de:ed:d6:96:70:8f:86:45:5c:f3:6a:f6:
fb:fe:98:92:58:a7:1d:6a:cf:f6:2e:79:57:4f:13:
74:49:3b:b1:0f:2b:41:04:0b:9f:47:f4:b9:03:87:
2a:4c:7a:9e:cb:c2:5a:95:ec:f5:5a:bb:a2:1c:8d:
91:e6:0c:75:b7:22:a7:84:08:52:4a:90:97:61:16:
23:18:fe:b0:9e:e8:ef:bc:f8:2c:fa:94:1f:23:6d:
c8:1b:ae:e7:28:67:01:8d:14:9b:16:f8:e8:6e:d3:
33:a9:c6:03:05:bd:6b:34:89:05:9b:3c:74:ce:17:
6b:21:e6:92:c7:64:fb:17:fd:11:e6:b2:78:09:47:
c5:66:de:b8:d3:5f:2f:e2:8a:ed:ca:c4:e6:e5:b4:
32:9b:da:3b:60:cd:58:e6:ea:ec:9c:ff:9e:16:51:
44:a3:c6:da:83:2c:38:07:44:e9:d4:ef:76:23:00:
70:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:11:FD:F4:27:94:01:F8:88:F0:45:EA:3A:CF:B7:D3:51:47:55:49
X509v3 Authority Key Identifier:
keyid:C8:8E:06:CC:AF:F9:CD:22:AA:83:80:1D:CA:00:A0:3F:91:54:8D:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DB9C3EE1FD45792E24CB794F868C354E051D3CBE843C71C67B0B1A910F7C70A5/0/C88E06CCAFF9CD22AA83801DCA00A03F91548D6E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C88E06CCAFF9CD22AA83801DCA00A03F91548D6E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB9C3EE1FD45792E24CB794F868C354E051D3CBE843C71C67B0B1A910F7C70A5/0/34352e3139312e34342e302f32322d3234203d3e20323639393030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.44.0/22
Signature Algorithm: sha256WithRSAEncryption
53:7b:3b:6f:d5:78:e0:af:14:fc:49:c3:c3:6d:b1:ab:17:9f:
00:d9:fe:83:95:e3:2c:26:ff:2d:2c:b9:83:ca:4b:06:fd:28:
2d:1d:29:7e:81:aa:5b:e3:33:86:41:80:c4:6c:e5:a2:50:01:
83:27:90:bb:51:9d:f5:6a:26:c1:ed:fb:8c:04:86:60:15:b7:
6c:5b:68:95:c5:d7:05:44:25:3f:e6:8a:fe:35:48:14:c6:64:
3b:3b:59:a5:57:14:8e:50:04:9e:78:37:b7:b0:e9:54:34:df:
3f:6b:9d:e8:ff:c0:44:dd:68:3d:e3:af:30:f3:7b:64:7a:30:
e6:7f:9b:82:df:3c:d4:78:55:8a:ca:79:0b:85:e4:48:e9:e4:
91:98:94:72:75:5b:45:1f:d2:99:b6:22:f4:43:bf:19:a8:d7:
62:df:69:c4:19:5e:a8:7b:d0:66:c9:1e:ac:d9:99:37:1e:71:
1b:7c:50:5b:5e:70:c1:7c:13:65:33:00:fb:c1:7a:b4:30:c3:
f7:f9:b4:79:ef:74:b9:ef:ce:20:bf:fc:85:bb:76:cb:db:54:
51:76:88:2d:ed:21:93:db:c4:06:57:90:18:aa:4d:62:00:07:
6b:b7:65:88:5a:43:50:94:f1:77:28:5f:25:4a:89:df:33:a0:
d4:01:88:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 02:23:59 2025 by rpki-client