Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e3132382e302f32302d3234203d3e20323632353839.roa
File: 3137392e312e3132382e302f32302d3234203d3e20323632353839.roa (raw, json)
Hash identifier: BxFsw1/4qBXE/y35FxvQsgt9FpbZ7jK7XqItabwi0TM=
Subject key identifier: 04:15:79:49:1C:B5:32:84:83:1A:F5:25:F7:5F:8F:2A:8A:A6:FF:B0
Certificate issuer: /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial: 20C83E0EA365D8E674CA452798EF9A492E7ECCCB
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e3132382e302f32302d3234203d3e20323632353839.roa
Signing time: Wed 12 Mar 2025 20:00:00 +0000
ROA not before: Wed 12 Mar 2025 19:55:00 +0000
ROA not after: Wed 11 Mar 2026 20:00:00 +0000
asID: 262589
IP address blocks: 179.1.128.0/20 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Mar 2025 19:35:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:c8:3e:0e:a3:65:d8:e6:74:ca:45:27:98:ef:9a:49:2e:7e:cc:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Validity
Not Before: Mar 12 19:55:00 2025 GMT
Not After : Mar 11 20:00:00 2026 GMT
Subject: CN=041579491CB53284831AF525F75F8F2A8AA6FFB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:dc:b2:3d:8a:60:e9:9d:c6:9a:9e:04:29:4d:
7d:cb:ba:6a:a5:a8:ad:f3:9c:f5:b8:26:05:75:3c:
dd:35:7f:51:5f:be:9e:5b:40:1f:ce:90:7b:31:ed:
19:18:b3:db:9b:67:a0:6a:9b:a2:4c:9f:8e:61:45:
cf:35:05:d0:46:12:77:12:5b:db:60:a8:c6:67:63:
90:e0:96:ab:3f:97:eb:9e:b6:92:11:1e:0c:88:f8:
d7:c7:46:66:94:af:36:2d:7b:5f:d4:83:12:56:bf:
72:db:1e:16:6d:0d:12:02:ba:25:23:78:4b:06:67:
b7:b0:5c:d0:3e:52:c3:76:08:62:74:21:66:c6:cf:
04:0e:4b:92:d6:05:66:52:97:be:22:cc:cc:b3:1a:
e6:51:e0:52:01:c6:fc:66:3f:35:3d:16:fa:31:53:
a1:bd:cb:97:2e:b8:1c:85:71:3e:9f:74:7f:dd:6b:
fc:c3:c8:e6:9a:9f:e3:ff:76:55:38:68:25:da:ae:
d8:59:bb:c7:1f:62:f8:77:66:65:a2:ac:12:d5:b3:
ab:1d:f3:23:58:90:5b:0c:0b:7e:7c:a0:c3:71:5f:
01:ad:d0:d4:a7:05:59:e8:0d:5b:a5:fa:2c:df:60:
01:85:dd:7e:18:33:4f:f0:f7:27:37:d0:26:1f:d3:
d1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:15:79:49:1C:B5:32:84:83:1A:F5:25:F7:5F:8F:2A:8A:A6:FF:B0
X509v3 Authority Key Identifier:
keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e3132382e302f32302d3234203d3e20323632353839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.1.128.0/20
Signature Algorithm: sha256WithRSAEncryption
48:b5:aa:5b:dc:b4:7f:87:25:85:b3:1a:c3:fc:76:ef:c8:05:
84:36:fe:f6:93:31:ab:7d:48:ab:71:ff:78:2f:cd:c2:a5:aa:
6c:ba:ba:6a:f8:8c:7b:5a:fe:16:92:95:e6:d1:3c:9c:c6:f3:
0b:8b:c4:c3:15:cb:c0:7c:13:30:3b:4a:45:7b:6b:75:bc:2c:
25:fc:6b:b0:61:43:63:c4:16:27:61:9b:6c:b3:d3:8d:77:f3:
ed:39:18:6a:41:bf:79:61:0d:68:82:f1:71:ad:f6:90:86:e7:
14:20:4c:a2:4e:b3:2a:91:4e:e0:b7:07:f8:eb:05:b3:31:aa:
41:80:b4:bc:23:8e:e9:da:a4:71:07:64:9b:02:be:1a:84:9d:
68:63:8c:1f:12:03:36:2d:ff:9a:a4:66:f8:7f:02:47:3f:e0:
c9:ee:55:cf:1a:1b:51:19:6f:03:71:b8:71:a2:66:bc:f4:7a:
40:da:d2:54:1c:85:d0:e5:84:08:da:a2:d0:d6:af:88:80:7f:
81:bc:ef:91:1d:a0:98:e7:2f:47:d8:a1:c1:6a:3a:2f:72:5f:
ec:42:ee:1b:fb:79:84:ca:3c:e8:5f:67:92:aa:f8:c0:f3:d6:
b5:e6:e2:cb:c4:92:bb:66:1e:cb:3d:eb:fc:83:41:9c:65:51:
79:f8:9e:15
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUIMg+DqNl2OZ0ykUnmO+aSS5+zMswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz
NUU4N0NDNTAeFw0yNTAzMTIxOTU1MDBaFw0yNjAzMTEyMDAwMDBaMDMxMTAvBgNV
BAMTKDA0MTU3OTQ5MUNCNTMyODQ4MzFBRjUyNUY3NUY4RjJBOEFBNkZGQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ3LI9imDpncaangQpTX3Lumql
qK3znPW4JgV1PN01f1Ffvp5bQB/OkHsx7RkYs9ubZ6Bqm6JMn45hRc81BdBGEncS
W9tgqMZnY5Dglqs/l+uetpIRHgyI+NfHRmaUrzYte1/UgxJWv3LbHhZtDRICuiUj
eEsGZ7ewXNA+UsN2CGJ0IWbGzwQOS5LWBWZSl74izMyzGuZR4FIBxvxmPzU9Fvox
U6G9y5cuuByFcT6fdH/da/zDyOaan+P/dlU4aCXarthZu8cfYvh3ZmWirBLVs6sd
8yNYkFsMC358oMNxXwGt0NSnBVnoDVul+izfYAGF3X4YM0/w9yc30CYf09GxAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUBBV5SRy1MoSDGvUl91+PKoqm/7AwHwYDVR0j
BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx
Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF
QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF
RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQzQkJENDk4QzNGMUNFRjFGODdG
MzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzMxMzczOTJlMzEyZTMxMzIzODJlMzAy
ZjMyMzAyZDMyMzQyMDNkM2UyMDMyMzYzMjM1MzgzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBLMBgDAN
BgkqhkiG9w0BAQsFAAOCAQEASLWqW9y0f4clhbMaw/x278gFhDb+9pMxq31Iq3H/
eC/NwqWqbLq6aviMe1r+FpKV5tE8nMbzC4vEwxXLwHwTMDtKRXtrdbwsJfxrsGFD
Y8QWJ2GbbLPTjXfz7TkYakG/eWENaILxca32kIbnFCBMok6zKpFO4LcH+OsFszGq
QYC0vCOO6dqkcQdkmwK+GoSdaGOMHxIDNi3/mqRm+H8CRz/gye5VzxobURlvA3G4
caJmvPR6QNrSVByF0OWECNqi0NaviIB/gbzvkR2gmOcvR9ihwWo6L3Jf7ELuG/t5
hMo86F9nkqr4wPPWtebiy8SSu2Yeyz3r/INBnGVRefieFQ==
-----END CERTIFICATE-----
Generated at Wed Mar 19 22:36:26 2025 by rpki-client on console.sobornost.net