Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/3230302e31322e3235332e302f32342d3234203d3e20323633323432.roa
File: 3230302e31322e3235332e302f32342d3234203d3e20323633323432.roa (raw, json)
Hash identifier: SyMaHQ1N9/2DA7K5ZJHsvJZ7HtO7ruYsGkCo4yxKMqc=
Subject key identifier: 54:E4:28:6C:60:04:9D:6F:0D:82:A6:1C:23:FC:C9:83:13:CF:C8:33
Certificate issuer: /CN=F84C64765934CC9A2CE97A1150E058489F19D535
Certificate serial: 06B7AD668A4FC29F25E082EB323493CC92B3D4C6
Authority key identifier: F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/3230302e31322e3235332e302f32342d3234203d3e20323633323432.roa
Signing time: Tue 04 Feb 2025 18:25:28 +0000
ROA not before: Tue 04 Feb 2025 18:20:28 +0000
ROA not after: Tue 03 Feb 2026 18:25:28 +0000
asID: 263242
IP address blocks: 200.12.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Mar 2025 22:25:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:b7:ad:66:8a:4f:c2:9f:25:e0:82:eb:32:34:93:cc:92:b3:d4:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F84C64765934CC9A2CE97A1150E058489F19D535
Validity
Not Before: Feb 4 18:20:28 2025 GMT
Not After : Feb 3 18:25:28 2026 GMT
Subject: CN=54E4286C60049D6F0D82A61C23FCC98313CFC833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b0:82:c5:4f:cf:8a:25:c1:51:73:ab:86:28:
e3:41:90:00:f2:76:3b:bb:44:f6:ef:1d:39:3c:10:
09:d4:d8:ca:8c:a6:4d:96:28:f3:23:f1:2a:22:60:
e6:c7:c0:b1:93:75:fa:3c:c5:44:75:a4:a4:eb:da:
28:6f:38:6c:63:17:b0:5c:c9:5c:33:48:41:aa:2f:
77:88:9f:87:79:07:d8:2d:94:7a:c7:34:3a:aa:01:
2e:43:17:9a:3e:2c:d9:cd:82:77:65:b8:2f:ee:65:
98:79:18:48:86:c4:1e:e0:9b:ea:e4:4a:8d:91:5f:
b2:a5:87:c0:f3:06:c0:1b:ea:b6:38:54:12:7a:0a:
88:b5:ba:81:d1:1b:b1:7f:8a:61:6d:7c:1e:9b:67:
16:41:bb:15:e7:09:fc:c9:e3:6c:0c:dd:d9:fd:c1:
a7:d0:18:a0:15:d1:5f:00:3d:5e:de:2f:0a:15:ab:
eb:e2:e8:a5:f3:b5:e6:4f:ae:a6:e5:2a:b5:6a:f7:
49:3e:4c:3d:9f:a0:1b:2e:19:d3:fb:8f:36:ef:15:
77:8a:c1:35:0d:e7:4e:ef:68:8c:c4:0d:f3:27:7c:
15:3c:6e:73:a7:97:1e:1e:1c:21:07:b9:b0:9c:25:
1b:27:02:08:6d:fe:92:80:2c:6b:c1:b0:70:fb:51:
9f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E4:28:6C:60:04:9D:6F:0D:82:A6:1C:23:FC:C9:83:13:CF:C8:33
X509v3 Authority Key Identifier:
keyid:F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/3230302e31322e3235332e302f32342d3234203d3e20323633323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.12.253.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:b7:8a:0f:b8:00:82:05:ab:fa:42:c4:74:d0:4e:8a:76:1a:
7e:87:37:99:ee:f8:3f:52:af:75:d8:2c:20:fc:cf:2f:f6:00:
a1:f0:ed:30:3b:99:c8:ff:97:1a:d3:27:7d:92:9e:89:4d:fa:
b5:c1:af:62:91:f6:ef:74:79:ca:aa:00:62:81:8b:8c:00:1e:
46:0a:02:c9:2c:12:ec:f7:59:d5:c6:73:6e:98:e6:1c:f6:f9:
d8:12:e1:79:94:4f:b0:86:b5:7f:cd:44:b0:86:6e:e3:36:45:
75:dc:c5:8a:13:94:21:b2:dd:5b:06:ed:24:96:da:a4:dc:89:
19:e6:89:b7:3e:79:58:e5:2e:18:7c:74:26:3b:44:4c:d1:95:
51:64:7a:65:1a:7c:77:ec:bd:98:c8:05:4a:48:19:0b:11:69:
64:96:dd:fa:e8:84:be:a9:6e:ae:5c:0a:80:ff:db:cd:31:eb:
ce:d7:88:af:ea:df:d4:46:02:2f:5f:2c:1a:81:4d:8a:b4:47:
2d:0b:cf:33:c6:6c:a1:97:b7:2d:8a:97:3b:ee:a7:15:d6:d7:
18:5e:5f:4e:42:ed:b4:2b:2f:d7:6f:fb:d4:35:86:9d:e1:b5:
bd:76:65:a8:cf:36:88:fd:10:10:73:e7:79:7c:a7:44:b4:62:
6d:47:a0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 22 00:10:47 2025 by rpki-client on console.sobornost.net