Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/3230302e3131352e302e302f32302d3230203d3e203237373536.roa
File: 3230302e3131352e302e302f32302d3230203d3e203237373536.roa (raw, json)
Hash identifier: htWNsku9X/sgc2OCbJQb0W2MoShs2SQXpz/5sHfWusU=
Subject key identifier: DE:E6:B7:AB:4B:D1:A3:EA:FF:F8:4E:BE:9F:18:08:18:64:33:2A:02
Certificate issuer: /CN=A48A9DA731206C7390C8A6EB16ACEE285DADCE03
Certificate serial: 35598D48B2295457F1EF4903D7390005E3171306
Authority key identifier: A4:8A:9D:A7:31:20:6C:73:90:C8:A6:EB:16:AC:EE:28:5D:AD:CE:03
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/3230302e3131352e302e302f32302d3230203d3e203237373536.roa
Signing time: Tue 15 Apr 2025 12:35:00 +0000
ROA not before: Tue 15 Apr 2025 12:30:00 +0000
ROA not after: Tue 14 Apr 2026 12:35:00 +0000
asID: 27756
IP address blocks: 200.115.0.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 15 Apr 2025 13:55:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:59:8d:48:b2:29:54:57:f1:ef:49:03:d7:39:00:05:e3:17:13:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A48A9DA731206C7390C8A6EB16ACEE285DADCE03
Validity
Not Before: Apr 15 12:30:00 2025 GMT
Not After : Apr 14 12:35:00 2026 GMT
Subject: CN=DEE6B7AB4BD1A3EAFFF84EBE9F18081864332A02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:01:da:84:a3:b5:36:bd:12:e3:57:81:34:32:
33:f4:ae:87:ca:e8:53:a5:53:48:45:55:86:be:28:
c1:a8:84:70:38:30:88:bc:26:31:2f:76:41:38:29:
3f:87:44:2b:89:3a:39:74:aa:8c:8c:43:38:5e:3e:
f3:8f:4e:ba:68:a2:b3:95:6e:d5:92:df:f9:b6:ab:
01:f0:64:12:db:9c:bd:b1:ee:ee:97:4b:af:38:fe:
81:0a:20:72:ce:e5:e3:7f:7d:87:73:4f:10:19:63:
b8:c3:b4:5e:3f:5c:a9:73:a2:9a:e4:f1:ae:2b:21:
ae:01:a8:29:bd:05:63:13:b3:e8:ac:e4:c6:d2:42:
56:62:8d:3b:9b:9d:5a:eb:ec:d0:81:e0:96:db:84:
2d:64:2b:00:37:0c:43:fd:6d:27:bf:4c:dd:fc:f3:
07:ac:42:37:92:6d:6b:c3:5a:c6:15:45:1d:34:92:
1f:ec:b3:30:13:5c:6d:18:73:74:62:65:58:d9:c4:
1d:ec:4d:f6:41:62:45:42:ee:de:14:b8:ca:09:10:
6b:81:09:d8:70:7a:b0:ee:1d:c4:bf:ea:a1:40:61:
17:a6:e9:f7:75:e2:7f:45:74:9d:b4:df:fa:1a:24:
15:54:82:f5:7c:97:d6:44:04:e2:79:39:e6:88:e2:
84:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E6:B7:AB:4B:D1:A3:EA:FF:F8:4E:BE:9F:18:08:18:64:33:2A:02
X509v3 Authority Key Identifier:
keyid:A4:8A:9D:A7:31:20:6C:73:90:C8:A6:EB:16:AC:EE:28:5D:AD:CE:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/3230302e3131352e302e302f32302d3230203d3e203237373536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.115.0.0/20
Signature Algorithm: sha256WithRSAEncryption
db:af:b9:62:62:42:19:0e:8c:27:c6:7f:6e:05:69:5d:dc:81:
6b:d9:7a:43:2f:63:66:1f:f6:6a:e1:3f:84:18:cd:62:bb:e4:
88:9e:40:fd:28:98:1b:21:e9:43:98:d6:fe:0a:6f:ed:a3:e5:
f1:d7:8e:cd:34:1d:a9:d3:59:fa:74:6e:52:0e:8a:36:34:bd:
ec:c2:08:40:a5:34:eb:3c:32:65:be:19:f4:e8:3c:63:d7:49:
0b:3f:eb:1b:be:5b:68:88:54:73:86:41:2e:a8:a5:88:aa:24:
f9:87:b4:16:c3:08:f2:39:61:64:d2:d6:6e:30:77:e8:a7:38:
ac:7b:8c:2f:53:eb:7b:fa:7d:6e:bb:76:ee:65:21:de:8a:a0:
cc:4c:ac:a2:7f:5f:a3:3f:9a:56:b9:09:76:3b:82:14:08:8c:
ce:80:1f:72:b9:47:12:77:7d:05:38:6b:b4:11:7f:9a:25:8c:
86:5e:24:d7:49:af:19:06:f5:47:fb:b4:79:32:43:64:16:7e:
07:02:98:72:87:5e:33:8e:15:5d:48:40:26:0f:a5:05:ba:d9:
1c:18:3c:57:d5:ce:1a:0c:9c:5e:bd:4e:40:cf:26:2c:d3:7a:
77:c7:16:14:ae:61:e5:b1:92:1f:b4:ee:75:e3:c3:1c:6f:44:
8b:b9:24:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 11:28:25 2025 by rpki-client