Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/0aa6496125b48ce53505fda08cff019d955b1e36.roa
File: 0aa6496125b48ce53505fda08cff019d955b1e36.roa (raw, json)
Hash identifier: DDsG+UTA9/FLoSpQ/NRCmBWte57Hinaw2aIAFHSIG80=
Subject key identifier: 89:21:5E:B6:1D:6A:1B:75:79:56:A0:4F:25:47:7D:82:2C:DB:90:B3
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 10A5F7
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/0aa6496125b48ce53505fda08cff019d955b1e36.roa
Signing time: Wed 24 Mar 2021 14:44:23 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.248.149.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1091063 (0x10a5f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=0aa6496125b48ce53505fda08cff019d955b1e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7a:3f:ce:4d:74:ed:63:17:2f:ce:d0:7d:42:
e7:8c:81:c5:f5:3a:9b:2f:76:a1:33:dc:be:f6:bf:
2e:43:97:aa:cb:9b:e3:b2:8d:44:bd:49:8c:65:fb:
a0:86:cc:40:f1:4d:c4:0a:67:f1:8a:8a:3c:bf:38:
17:d5:5a:d0:ac:e9:37:85:fd:d9:cb:68:66:a0:dd:
f0:89:09:94:d2:9c:d6:ac:18:91:f4:ea:07:af:e0:
f6:ce:53:96:58:b5:4d:3d:cf:59:6f:9f:97:eb:50:
23:fb:3e:cf:8b:c5:df:56:39:7e:ff:b9:4d:27:79:
63:5f:14:4e:ee:51:09:dc:04:c9:df:e0:75:d2:4e:
9a:4e:d1:cd:a5:ca:f4:46:c9:b8:21:3c:61:e7:ae:
ce:8f:fe:42:7e:b7:90:11:b7:d8:54:8d:71:4e:d7:
a4:ae:21:d6:8e:e3:5e:52:a1:46:e2:fb:46:12:bc:
25:18:d2:c9:70:ce:c1:18:2e:e0:f7:62:18:b8:52:
84:ed:e3:1b:d4:3c:af:26:f1:71:f3:28:df:b1:b9:
d0:3c:94:c5:23:c9:94:bf:30:67:fd:24:a7:b2:e7:
5a:a4:c4:04:d4:43:e5:51:c7:d1:aa:26:00:84:7b:
98:3f:5a:ca:83:cb:0c:10:f7:ae:7c:fd:dd:ad:43:
cd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:21:5E:B6:1D:6A:1B:75:79:56:A0:4F:25:47:7D:82:2C:DB:90:B3
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/0aa6496125b48ce53505fda08cff019d955b1e36.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.248.149.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:d0:88:44:08:51:2e:40:82:ad:8e:b6:82:63:01:77:f5:fc:
39:9d:0e:6d:e9:83:88:4b:1b:5e:cc:bb:db:20:34:de:e1:5f:
76:be:22:5a:48:32:ee:72:42:0d:37:01:74:ae:1b:1e:42:f1:
97:cb:3e:69:31:7e:f4:7b:f8:4d:24:be:dc:76:58:cd:68:50:
8d:87:a6:12:68:ba:93:1e:11:9d:01:8d:f6:f7:d8:13:73:57:
69:47:44:cc:a1:32:5c:cd:14:23:0b:cb:56:c7:a8:32:af:9f:
23:5e:71:c7:42:4e:74:68:d7:e4:b9:ef:74:53:ed:23:eb:7b:
62:dd:bc:75:95:a6:c5:05:8f:bc:d9:6b:9f:49:09:13:db:7d:
85:a1:e5:6a:00:15:d9:f5:ab:a5:da:b1:35:41:b0:06:2c:f5:
1f:ae:48:ac:93:8b:77:b6:05:e3:87:f0:93:dd:39:59:bf:27:
aa:93:9b:4d:e9:23:50:2e:67:75:db:65:1f:96:f1:44:53:0b:
53:f1:a1:46:1f:1f:6d:8f:01:70:35:6e:2f:d5:89:c8:02:9a:
1a:f7:5c:7a:db:5f:84:40:1c:54:e8:b6:89:6e:6f:83:66:fc:
35:f2:20:f2:fb:1f:15:8b:ce:33:f7:2b:da:4b:cb:b0:3c:6f:
d0:9b:27:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:42 2023 by rpki-client on console-ams.rpki-client.org