Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/14CB370010DE6D85153F1C51BFF7A0D15EEE00AE2DE4C16398C1B30E930DFF07/0/3231332e3137332e35322e302f32322d3234203d3e20323634373634.roa
File: 3231332e3137332e35322e302f32322d3234203d3e20323634373634.roa (raw, json)
Hash identifier: OMwXRQfFA/By9sQiclFemE/Q9AfkVKKunZN6X62qT6k=
Subject key identifier: 32:E4:87:62:CF:A5:14:13:23:D6:E1:B5:C3:22:6C:67:F7:39:1B:A3
Certificate issuer: /CN=95116A890D205119BAB4C1812515C4DD5B11AEFF
Certificate serial: 6CFCE867A282EDCD5E2F217150E4614FEAD4F8D2
Authority key identifier: 95:11:6A:89:0D:20:51:19:BA:B4:C1:81:25:15:C4:DD:5B:11:AE:FF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95116A890D205119BAB4C1812515C4DD5B11AEFF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/14CB370010DE6D85153F1C51BFF7A0D15EEE00AE2DE4C16398C1B30E930DFF07/0/3231332e3137332e35322e302f32322d3234203d3e20323634373634.roa
Signing time: Wed 19 Feb 2025 13:20:00 +0000
ROA not before: Wed 19 Feb 2025 13:15:00 +0000
ROA not after: Wed 18 Feb 2026 13:20:00 +0000
asID: 264764
IP address blocks: 213.173.52.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Feb 2025 14:05:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:fc:e8:67:a2:82:ed:cd:5e:2f:21:71:50:e4:61:4f:ea:d4:f8:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95116A890D205119BAB4C1812515C4DD5B11AEFF
Validity
Not Before: Feb 19 13:15:00 2025 GMT
Not After : Feb 18 13:20:00 2026 GMT
Subject: CN=32E48762CFA5141323D6E1B5C3226C67F7391BA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a6:a1:f2:d8:ce:7d:24:c4:fe:73:99:46:eb:
06:2d:be:21:19:c1:24:8c:40:f6:50:0c:b0:43:03:
c3:4a:f0:99:c5:b5:25:49:e1:c7:1a:18:18:25:14:
08:57:36:c1:eb:9a:28:3b:ac:eb:79:81:0b:34:15:
b0:a2:49:9f:92:02:2f:37:83:6c:a4:d1:29:67:b6:
5f:7e:b5:21:23:d6:34:9b:28:ea:df:fa:cd:db:e7:
98:28:fe:d4:a0:de:ae:4e:f4:22:35:2f:12:a4:dd:
2a:4b:35:b4:95:cd:b5:19:10:8e:cd:c4:ef:9a:85:
96:31:2f:8c:1e:48:75:20:52:3d:6b:73:c2:80:64:
4d:da:bb:e1:09:eb:d0:27:0e:85:8a:2c:23:22:e7:
20:c6:14:5c:be:2c:07:5a:c9:db:41:b6:79:8b:7e:
5c:f4:09:3d:57:d3:f9:97:7f:4e:5f:9f:cd:89:93:
a7:3f:0d:e0:75:33:91:9f:3b:09:6e:22:27:e2:00:
f8:ee:2a:89:f7:24:61:da:fc:21:ac:1a:a1:a1:cf:
8e:a6:8a:f6:b6:48:61:b0:c4:ab:5f:e5:9c:8d:18:
e8:a5:42:ae:07:3c:a4:d6:af:8d:ee:c4:15:05:5b:
13:36:a8:db:46:fb:2b:4d:94:e5:c1:f7:4d:45:bf:
04:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E4:87:62:CF:A5:14:13:23:D6:E1:B5:C3:22:6C:67:F7:39:1B:A3
X509v3 Authority Key Identifier:
keyid:95:11:6A:89:0D:20:51:19:BA:B4:C1:81:25:15:C4:DD:5B:11:AE:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/14CB370010DE6D85153F1C51BFF7A0D15EEE00AE2DE4C16398C1B30E930DFF07/0/95116A890D205119BAB4C1812515C4DD5B11AEFF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95116A890D205119BAB4C1812515C4DD5B11AEFF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/14CB370010DE6D85153F1C51BFF7A0D15EEE00AE2DE4C16398C1B30E930DFF07/0/3231332e3137332e35322e302f32322d3234203d3e20323634373634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.173.52.0/22
Signature Algorithm: sha256WithRSAEncryption
21:7e:cf:40:a0:b8:0a:75:54:05:9b:aa:c4:c6:c6:67:e5:84:
1f:f4:c4:1e:21:67:4a:3f:9c:8a:9f:f6:51:f9:4a:c0:d6:ac:
bd:da:1f:91:d5:ac:a1:fb:76:e4:de:de:df:47:21:92:73:13:
51:eb:0f:ab:84:d3:1e:f6:37:02:5c:98:9d:2b:b1:30:22:dd:
c4:f7:56:ae:73:d8:13:77:14:28:5e:9a:8c:39:68:40:3b:a4:
6f:65:2d:37:b3:93:1a:6b:bd:7b:8e:56:d2:d1:38:ef:31:f5:
a2:47:72:2c:6c:04:31:46:c2:be:ea:b3:72:12:c9:6d:75:93:
c9:26:d7:35:9f:6c:62:6e:02:d1:74:cc:ae:69:cd:63:88:35:
74:1b:c1:e6:7f:d4:96:f3:90:1a:e0:61:dc:21:84:f3:70:03:
25:86:4a:9d:3c:ab:04:3e:85:00:35:f6:a2:25:5a:6e:2e:69:
a9:13:9f:1d:f5:1b:75:18:f3:c3:20:b3:27:55:fa:92:2b:fb:
aa:13:e5:4c:2d:f9:cc:08:99:3d:49:f3:99:20:d6:cb:0a:5b:
5d:ee:a8:82:a0:ac:4b:f6:c8:02:96:0b:7b:88:51:0a:b9:70:
cd:26:ce:c6:76:30:80:f2:37:e9:66:b4:87:36:a3:9c:3c:f4:
8e:b3:1e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 21:33:48 2025 by rpki-client