Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/118ac730d5f9b708c019358f9198fe6e98415bfa.roa
File: 118ac730d5f9b708c019358f9198fe6e98415bfa.roa (raw, json)
Hash identifier: z1Dw55+T+GKwwDPTlSCgfX0D3i6pUNcBQxjX/xU9Gq0=
Subject key identifier: 4D:8F:14:67:FF:7E:C1:03:48:8E:F3:6B:F3:FE:1C:F1:EE:6A:98:34
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 10D532
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/118ac730d5f9b708c019358f9198fe6e98415bfa.roa
Signing time: Wed 24 Mar 2021 14:44:27 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.247.70.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1103154 (0x10d532)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=118ac730d5f9b708c019358f9198fe6e98415bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8d:de:dc:38:ab:94:23:4b:0c:3e:90:94:fa:
5b:29:a4:ad:ba:2a:aa:71:eb:aa:c1:9b:12:f2:4e:
ed:38:34:b5:fb:c5:03:81:52:11:d6:45:48:ff:3f:
37:6e:5e:de:12:f7:10:6f:32:08:aa:02:64:14:c2:
14:c3:f3:92:5c:83:e7:42:0c:64:aa:1e:07:31:ee:
94:01:d1:45:e7:5a:24:c9:1d:9f:20:db:f4:8e:13:
a9:62:9b:2d:fe:a0:8f:27:b2:1a:c2:23:d8:59:79:
d9:0b:8e:6b:ce:34:5a:6b:fa:c7:30:43:1f:17:93:
74:94:cf:16:ed:4c:d5:6f:d8:99:b7:cb:74:21:b4:
e9:61:f9:cf:fd:6c:4b:d8:a0:f1:94:8e:25:08:53:
d0:57:6e:07:f1:48:f7:ca:28:a9:ed:85:f1:85:8e:
9e:59:e2:1a:64:22:8a:6c:c5:5f:88:4f:aa:f2:ad:
5f:7c:4c:3a:2c:7b:34:b0:0f:5e:fb:0b:60:18:83:
af:51:b3:b0:d2:65:db:8b:2d:99:ed:9b:a2:a0:cc:
8e:19:53:07:e1:2e:c5:9d:88:43:e9:f8:df:da:43:
63:77:6e:5d:18:51:08:88:cf:97:dc:ed:6f:95:4c:
9e:0c:27:87:b0:ff:79:44:9e:40:45:8b:47:61:12:
0c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8F:14:67:FF:7E:C1:03:48:8E:F3:6B:F3:FE:1C:F1:EE:6A:98:34
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/118ac730d5f9b708c019358f9198fe6e98415bfa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.247.70.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:16:61:66:0c:35:50:26:30:a2:fd:e8:8b:1d:89:75:d6:74:
7f:c7:b5:ab:7c:5c:b3:9c:cc:bb:5b:e8:0c:f1:4e:1c:1e:3b:
c2:f2:ce:09:c8:1b:0d:f8:f5:cd:e1:b2:b5:eb:2b:2f:aa:db:
f6:ac:a0:c6:76:9e:4b:92:63:9d:00:14:7d:73:2f:fc:9d:30:
8c:50:d9:69:af:1f:42:73:56:55:3b:b1:6b:d1:81:58:03:bc:
99:63:9b:6c:02:bd:3e:0f:38:31:5d:e4:18:5d:8c:6b:f4:fc:
58:00:34:a9:c0:0c:b8:12:2e:ce:e9:70:b7:88:93:c4:9e:1e:
a3:44:43:1e:83:c2:13:23:84:6a:2c:ea:07:f8:6b:b7:03:74:
01:99:e6:cc:27:1e:b6:73:b5:80:4f:b4:72:6a:42:08:12:f4:
3f:d9:0b:8b:28:dc:27:aa:31:e6:65:1b:44:64:02:0f:45:9b:
3b:0c:be:7a:d8:d4:25:1b:09:d5:2f:ac:58:9d:de:a1:9d:b0:
06:33:c4:94:e8:b6:05:a2:79:df:e2:cc:7e:69:4d:1d:3d:73:
17:4d:86:92:f0:8e:aa:f3:6c:2d:ce:81:1e:81:ea:c8:30:c2:
6d:6e:6f:3b:63:8b:e6:89:3c:02:c4:ef:0e:aa:2e:cf:dd:32:
3d:05:a4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:42 2023 by rpki-client on console-ams.rpki-client.org