Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135342e302f32342d3234203d3e203132313839.roa
File: 3230302e33352e3135342e302f32342d3234203d3e203132313839.roa (raw, json)
Hash identifier: BV1xL7uhqYVlWuwjEPf3FOiSvpiATXwn0fTY++XNZRQ=
Subject key identifier: AB:1E:FC:11:56:8F:7C:04:CB:04:54:E9:59:95:86:42:03:45:63:C4
Certificate issuer: /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial: 685C913EA14649CD29A6A3A209A4C89F9CD7D00A
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135342e302f32342d3234203d3e203132313839.roa
Signing time: Wed 02 Apr 2025 18:50:05 +0000
ROA not before: Wed 02 Apr 2025 18:45:05 +0000
ROA not after: Wed 01 Apr 2026 18:50:05 +0000
asID: 12189
IP address blocks: 200.35.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 May 2025 10:50:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:5c:91:3e:a1:46:49:cd:29:a6:a3:a2:09:a4:c8:9f:9c:d7:d0:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Validity
Not Before: Apr 2 18:45:05 2025 GMT
Not After : Apr 1 18:50:05 2026 GMT
Subject: CN=AB1EFC11568F7C04CB0454E959958642034563C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:99:7d:ca:88:1b:66:e0:23:c1:71:f1:10:70:
85:b5:b4:9e:9e:a9:e3:b7:3d:39:52:33:bb:5b:dc:
41:9c:a3:d9:16:7c:c9:be:c8:6e:dd:02:87:f7:bd:
af:49:03:e7:06:3e:84:d8:b0:c8:b7:6b:63:9e:90:
17:a0:3b:45:16:96:7b:aa:8b:c5:3f:31:82:a7:f3:
e3:56:47:45:a8:68:39:03:3e:ed:fe:51:41:43:01:
64:a5:3d:db:22:e4:1e:e3:22:4c:50:21:8a:4c:6d:
22:86:00:06:9a:b1:fd:95:42:0d:51:6e:38:96:26:
3e:1b:c3:9b:a8:b5:ed:37:d9:6c:a2:52:36:aa:a4:
17:9d:77:58:72:61:d1:b0:56:cb:5c:e5:c3:ab:ab:
f4:2a:67:2b:a8:82:b0:a3:22:5a:24:6c:00:b0:76:
19:a0:96:4e:79:b2:ed:c9:f8:86:55:24:36:47:2d:
c6:f2:9a:11:15:aa:8b:38:0a:87:a5:52:56:e9:2f:
05:64:06:f9:a3:30:41:e1:77:4e:34:27:66:5f:a9:
2b:2c:58:5a:57:53:6b:98:c6:e8:73:1b:c7:2a:db:
8f:e3:0b:50:f9:e9:4f:43:59:b2:3a:aa:cc:b3:49:
58:94:64:ba:e3:e4:2b:8d:58:3d:d7:b4:47:93:39:
10:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1E:FC:11:56:8F:7C:04:CB:04:54:E9:59:95:86:42:03:45:63:C4
X509v3 Authority Key Identifier:
keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135342e302f32342d3234203d3e203132313839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.35.154.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:2b:4d:68:29:04:81:45:a1:9d:e8:5d:0b:35:2c:5f:aa:b3:
be:fc:cc:f5:b0:ac:07:e1:d2:5d:06:76:7f:1a:e8:39:07:3d:
e5:42:d9:75:09:9d:55:ff:45:0f:1e:f2:57:63:1c:0f:3e:ea:
71:89:2d:56:6e:c3:ff:89:c9:61:3c:22:73:af:c4:b9:1a:46:
a8:bd:21:a8:f4:95:98:c6:52:a8:09:82:93:55:a5:4a:15:8b:
b5:0d:e8:56:20:5b:cc:f4:3e:16:91:e5:d4:7c:e3:e4:8c:15:
7a:95:b0:1f:c3:02:fa:95:ca:73:2c:14:b7:4f:24:46:d8:fb:
5e:5f:7f:77:17:fc:6a:8c:03:34:bd:9a:3c:0f:9d:af:6c:88:
bb:62:0e:9e:11:30:6a:c9:df:71:58:81:97:3c:c7:68:8c:52:
a8:46:cf:f1:20:26:c9:d5:df:de:bc:08:4f:ff:f3:e1:c7:db:
43:43:8f:c5:88:ac:54:49:0e:f5:c5:07:93:5b:6b:6d:4f:62:
a3:9d:e6:e2:7d:c6:63:0b:b2:8e:ae:35:c6:8b:7d:5c:78:58:
ce:bf:0f:10:b0:18:3a:59:7c:bc:0c:ee:62:da:80:d8:a6:38:
56:93:0f:5f:d4:06:35:b2:3c:86:8e:db:ff:7a:6f:6c:a1:37:
f5:c2:37:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 12:21:40 2025 by rpki-client