Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3133342e302f32332d3234203d3e2038303438.roa
File: 3230302e33352e3133342e302f32332d3234203d3e2038303438.roa (raw, json)
Hash identifier: HIPRd0T8cRNRTSI97MngiIjW8rTNVelHJTLD3l17mw4=
Subject key identifier: E3:68:57:F3:07:20:1D:AA:50:BC:DC:04:D3:B3:C9:5B:F6:F1:51:5C
Certificate issuer: /CN=829CA7BB4382A648332FD377689E040166C505B5
Certificate serial: 7EDE8986D9E5BD2227BC5C91BBECA453E3BEF8F1
Authority key identifier: 82:9C:A7:BB:43:82:A6:48:33:2F:D3:77:68:9E:04:01:66:C5:05:B5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3133342e302f32332d3234203d3e2038303438.roa
Signing time: Tue 04 Feb 2025 18:44:30 +0000
ROA not before: Tue 04 Feb 2025 18:39:30 +0000
ROA not after: Tue 03 Feb 2026 18:44:30 +0000
asID: 8048
IP address blocks: 200.35.134.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Mar 2025 13:45:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:de:89:86:d9:e5:bd:22:27:bc:5c:91:bb:ec:a4:53:e3:be:f8:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=829CA7BB4382A648332FD377689E040166C505B5
Validity
Not Before: Feb 4 18:39:30 2025 GMT
Not After : Feb 3 18:44:30 2026 GMT
Subject: CN=E36857F307201DAA50BCDC04D3B3C95BF6F1515C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0c:c4:fe:52:c5:dd:bc:f0:7a:75:37:d0:39:
50:64:3a:38:13:fa:24:c9:91:09:eb:50:4c:d9:2e:
a9:aa:c9:50:02:5a:35:5d:17:46:3c:1a:c8:2a:43:
41:56:bb:ec:4e:72:1f:01:a7:d7:96:4a:33:92:11:
90:1d:48:92:f5:07:0b:db:3b:93:91:a3:b1:2a:7d:
81:24:3b:ec:97:a4:d4:93:ca:73:51:a9:82:04:4c:
84:36:8b:8d:c4:d2:d5:3d:92:45:56:12:a6:15:2b:
42:07:58:2a:c4:f4:d0:3f:29:30:71:20:05:8d:0a:
5f:4f:7e:20:24:8e:7d:1b:6f:6d:40:01:bb:89:a3:
3e:5e:eb:52:aa:59:c7:ed:3c:05:ae:39:00:ca:ed:
8a:53:3b:c4:91:e5:33:b9:7e:3f:6a:a4:4c:5d:33:
ae:a6:ad:20:af:6b:56:fa:a1:d0:eb:62:70:35:d5:
c6:51:b1:07:8c:ae:1f:12:d2:5e:0d:f9:1b:66:4e:
40:29:d0:1a:c8:24:fc:58:33:47:33:97:7e:d8:99:
5f:1d:b8:b8:dc:b2:17:c7:85:d3:e3:9c:c8:94:7c:
ce:f4:2f:a0:1d:a2:39:64:3b:61:6c:f1:ca:51:14:
81:f1:f7:82:dd:ce:18:2f:83:b7:20:ef:e9:aa:60:
f3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:68:57:F3:07:20:1D:AA:50:BC:DC:04:D3:B3:C9:5B:F6:F1:51:5C
X509v3 Authority Key Identifier:
keyid:82:9C:A7:BB:43:82:A6:48:33:2F:D3:77:68:9E:04:01:66:C5:05:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/829CA7BB4382A648332FD377689E040166C505B5.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/829CA7BB4382A648332FD377689E040166C505B5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D12029F6374506785F391111F104E6560701A9A4D27BD36FCFFF816C0FE626D8/0/3230302e33352e3133342e302f32332d3234203d3e2038303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.35.134.0/23
Signature Algorithm: sha256WithRSAEncryption
46:e0:21:be:60:d3:2f:71:f0:51:5d:78:3d:d2:2f:f6:4a:17:
80:fc:9e:fe:52:21:21:7f:9a:c4:02:ea:8f:84:1c:a9:e0:8f:
1d:3d:70:74:f3:fc:f4:88:9b:d3:2d:e3:ff:81:c5:9d:6e:a4:
4d:88:fb:2f:88:c5:5b:f9:15:2f:0b:8b:fb:c4:7a:ab:18:04:
32:95:4c:23:5e:b6:5a:bb:b9:55:f0:be:f8:78:4d:3b:84:13:
30:58:f1:a3:cc:53:65:e4:2c:53:f5:73:bb:f5:88:d3:8f:3f:
fd:c2:73:aa:20:77:36:fb:63:3e:17:84:60:f2:e7:b0:52:ab:
47:de:fd:76:ee:b6:e1:16:b6:56:7a:19:14:80:1c:1e:5d:8f:
fe:3a:4c:db:3e:3c:f4:43:5e:75:d2:7c:d5:09:28:1e:34:05:
f5:2b:f7:c0:ad:43:93:2c:5f:8b:f8:66:75:f3:c5:32:30:7b:
9e:03:e3:09:c2:12:e0:3d:66:dd:c5:25:eb:de:8e:fb:5f:23:
86:c3:fc:4f:40:cf:5c:42:74:ee:d3:e3:8e:87:db:00:bf:ee:
d8:76:41:25:c9:d2:31:e2:5e:92:d9:23:76:5a:be:26:d1:0e:
60:01:47:8b:2a:93:da:e5:4f:8f:a2:d1:36:6f:65:56:d8:4a:
af:bd:c5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 15 00:18:07 2025 by rpki-client on console.sobornost.net