Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/c3afe55249cde1fbb9443a43f364467ae8d8db72.roa
File: c3afe55249cde1fbb9443a43f364467ae8d8db72.roa (raw, json)
Hash identifier: nqsY6jbraUgzLA/pMrMcNABJ9O3PtymID1LTxUF1V2U=
Subject key identifier: 54:C7:51:3C:73:DC:D9:B5:FA:EF:E9:3E:24:C7:87:4F:67:D3:73:3B
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 0FBE32
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/c3afe55249cde1fbb9443a43f364467ae8d8db72.roa
Signing time: Wed 24 Mar 2021 14:44:06 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.247.61.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1031730 (0xfbe32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=c3afe55249cde1fbb9443a43f364467ae8d8db72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ff:b5:a2:67:e8:ab:2b:77:fc:0b:74:a3:e5:
6c:0a:e8:5f:9e:d5:b9:5e:e5:2f:61:70:a8:4a:0e:
a5:67:fa:cb:d6:8d:b0:30:0c:31:82:44:cd:6e:d2:
72:13:62:63:68:92:3a:ad:c8:df:d5:a3:8d:f7:fa:
2a:fe:85:27:77:e0:da:1d:60:a3:46:6d:8e:e2:6f:
4f:02:4a:1e:b0:f6:5f:54:4d:e1:d0:e8:7f:bb:7a:
af:fc:59:ec:46:0f:2b:8d:2c:75:cf:cf:27:6c:1d:
ff:78:73:6e:4c:e3:5c:37:63:45:d5:ef:26:c8:a0:
4f:db:89:67:bf:f5:ca:d9:ca:61:44:df:b5:a1:4c:
24:e2:da:78:25:b6:ae:e9:7b:4c:45:63:05:e9:36:
ab:0d:f2:c7:ca:10:79:87:77:ce:a9:d1:82:12:c4:
fa:d0:36:7e:1c:00:d8:fb:79:15:33:f6:e8:08:e2:
db:74:17:60:69:e6:c8:60:b1:01:78:4e:48:ca:7b:
2e:ba:3b:83:c9:49:c1:2a:d7:fe:eb:ef:a3:a3:61:
0c:f9:70:20:9f:a1:ff:03:36:08:a3:9a:c6:f4:a0:
1c:5a:eb:64:dc:ca:c8:0c:ab:71:f0:e6:72:d4:70:
ba:f1:9d:ef:8a:ea:b9:e7:51:dc:9d:c3:7a:ca:33:
30:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C7:51:3C:73:DC:D9:B5:FA:EF:E9:3E:24:C7:87:4F:67:D3:73:3B
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/c3afe55249cde1fbb9443a43f364467ae8d8db72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.247.61.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:4d:4c:c0:f5:b3:bf:2c:f2:a1:31:52:88:48:21:2a:fb:87:
b4:e3:ac:f8:4b:58:3c:17:38:ed:2d:98:be:3e:9e:68:df:c8:
82:2f:c7:9b:0f:ed:63:54:9e:f8:a9:ea:f7:12:59:89:ca:93:
55:63:ed:7a:84:01:e5:21:74:8a:5d:cf:cf:33:96:92:af:fb:
88:03:f7:63:1a:7a:32:71:75:cd:ff:9a:f6:8b:a7:8d:97:22:
9c:a1:63:d1:8a:3e:df:2b:6d:b6:8e:72:6f:b1:8a:75:a5:b5:
0a:f0:fb:50:ac:c0:26:4e:07:0c:22:7f:57:6b:ac:e0:5d:71:
d5:c0:24:39:a2:f4:66:50:36:84:e7:b3:21:f4:dc:5c:61:d4:
83:fa:24:30:0c:34:f5:f5:aa:77:00:03:61:69:9f:b1:e7:5e:
4c:0d:86:e7:78:44:75:8d:8c:e9:78:89:4c:72:b7:f2:8c:22:
3e:42:9e:2f:52:6b:ef:a3:3a:31:71:81:36:9f:df:12:29:d8:
ae:80:1e:16:f9:ba:d5:7c:54:95:5a:5d:81:29:3f:bd:97:d8:
de:0e:1e:20:33:78:35:b9:02:54:7c:fe:b1:8b:30:4a:08:78:
a6:b7:ef:68:51:2f:5f:88:2c:d2:51:e5:7b:1e:b4:53:be:d2:
7a:f1:1c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:43 2023 by rpki-client on console-ams.rpki-client.org