Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/31ECF3D08AED59B6F952BA908FA902B9E9CBB6FFE94CB21B981021BE964F5D96/0/323830333a356239303a3a2f33322d3334203d3e20323733303438.roa
File: 323830333a356239303a3a2f33322d3334203d3e20323733303438.roa (raw, json)
Hash identifier: XvxaSogU05q8V11AOcNXxWiewu08DjJLEvep90iZ8wM=
Subject key identifier: 6B:A6:D4:85:FE:C4:0C:2E:12:01:58:34:45:49:56:81:1D:16:AD:7F
Certificate issuer: /CN=4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF
Certificate serial: 4E282EA1C17FB5FD8D87DD0E124472EB379911E3
Authority key identifier: 4A:CF:10:8A:EA:D5:32:BA:7E:53:C5:4C:0B:F1:05:94:36:D1:E9:EF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/31ECF3D08AED59B6F952BA908FA902B9E9CBB6FFE94CB21B981021BE964F5D96/0/323830333a356239303a3a2f33322d3334203d3e20323733303438.roa
Signing time: Sun 27 Apr 2025 10:10:00 +0000
ROA not before: Sun 27 Apr 2025 10:05:00 +0000
ROA not after: Sun 26 Apr 2026 10:10:00 +0000
asID: 273048
IP address blocks: 2803:5b90::/32 maxlen: 34
Validation: Failed, certificate revoked on Mon 28 Apr 2025 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:28:2e:a1:c1:7f:b5:fd:8d:87:dd:0e:12:44:72:eb:37:99:11:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF
Validity
Not Before: Apr 27 10:05:00 2025 GMT
Not After : Apr 26 10:10:00 2026 GMT
Subject: CN=6BA6D485FEC40C2E12015834454956811D16AD7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:35:ed:e5:62:b5:ce:be:80:4f:0e:04:ef:5b:
14:71:cd:75:71:61:20:db:01:e3:7d:96:f1:c2:1e:
3a:e4:44:c3:ec:91:e0:98:83:90:c0:f2:18:26:ee:
3b:2b:78:ac:6c:d4:e2:8a:80:6b:25:52:53:26:f6:
55:d0:68:a4:42:ff:fd:6d:cc:c6:a6:2e:dd:51:f6:
83:1b:f1:49:c9:11:0c:7f:2c:0c:fe:0e:f0:b0:1b:
0b:07:b2:60:f1:7e:ae:e1:8b:a4:4d:73:db:63:c1:
dd:00:25:f9:2e:2c:db:27:32:1d:79:f5:be:b6:92:
c1:bc:85:61:7c:2c:e2:65:61:fd:29:09:12:c5:6d:
62:2e:b6:1e:8d:6c:ae:30:fe:16:91:da:a9:68:fd:
24:08:9d:40:f8:18:a7:a6:c4:ef:20:2d:47:b2:aa:
11:2c:dd:73:aa:64:3a:8a:dc:58:e6:98:c4:99:6b:
cc:6e:b7:8f:f1:2c:9c:d3:eb:2c:47:1e:69:c3:76:
50:8e:b8:2f:71:a0:b1:6d:96:ba:4f:af:ae:73:e2:
6b:f5:34:9a:64:ee:31:1d:8b:40:41:d4:58:bb:85:
59:fc:79:20:73:b5:bc:12:7f:ff:ad:66:f8:66:2d:
79:66:0d:9e:c1:92:85:12:d4:6c:f3:62:85:b6:53:
7f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A6:D4:85:FE:C4:0C:2E:12:01:58:34:45:49:56:81:1D:16:AD:7F
X509v3 Authority Key Identifier:
keyid:4A:CF:10:8A:EA:D5:32:BA:7E:53:C5:4C:0B:F1:05:94:36:D1:E9:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/31ECF3D08AED59B6F952BA908FA902B9E9CBB6FFE94CB21B981021BE964F5D96/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4ACF108AEAD532BA7E53C54C0BF1059436D1E9EF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/31ECF3D08AED59B6F952BA908FA902B9E9CBB6FFE94CB21B981021BE964F5D96/0/323830333a356239303a3a2f33322d3334203d3e20323733303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:5b90::/32
Signature Algorithm: sha256WithRSAEncryption
99:24:4b:42:47:46:64:83:db:81:52:33:ed:b2:ba:5d:d4:2c:
80:79:58:d6:b2:cc:ac:c2:52:4c:23:db:c2:45:ea:a8:25:da:
05:18:a2:35:58:ab:41:8b:5d:e3:6f:2b:ad:ed:4f:10:af:e5:
86:88:b3:28:12:2a:29:56:3e:96:07:4e:af:e4:4f:cf:d6:2e:
eb:39:1e:8a:07:19:13:e2:86:b8:71:80:e0:b2:dd:de:c7:ee:
88:d8:80:72:f2:d6:ae:c3:c4:84:a9:9a:94:89:64:22:8b:52:
8b:f5:cc:78:bd:fc:d1:ff:9f:80:fa:8e:51:66:95:02:26:b5:
4b:6d:5e:fa:9d:4f:e7:b9:64:6d:25:06:73:f9:49:de:54:97:
b7:32:09:42:4d:9f:f1:2b:35:72:02:5c:d1:ff:d4:19:6f:a0:
43:8d:ea:35:9a:4c:ce:b0:86:17:e2:35:c5:75:4d:f7:8d:10:
ee:1e:b6:24:8e:5b:ce:27:db:fb:34:1f:7e:ff:9e:59:80:12:
a3:31:d7:38:36:71:8b:22:43:ee:80:f7:5d:fd:13:ce:e1:07:
22:8c:82:1e:67:5c:05:31:36:c1:2f:ee:1d:b4:2d:88:89:f4:
fd:13:a4:5a:15:26:fe:69:50:a0:71:c4:3b:40:2e:3c:7f:8f:
03:ec:96:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:14:06 2025 by rpki-client on console.sobornost.net