Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/151b44d56c67e2ca592ce909d8e2dda64a71aa15.roa
File: 151b44d56c67e2ca592ce909d8e2dda64a71aa15.roa (raw, json)
Hash identifier: WqEcnp7rbt161x+2OIS5a8cnhBvrQou+DQAnz8GlibE=
Subject key identifier: 81:04:4E:E7:E3:CD:D8:DE:5B:36:29:F3:E7:ED:DC:93:CE:E2:E6:1A
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 1074B2
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/151b44d56c67e2ca592ce909d8e2dda64a71aa15.roa
Signing time: Wed 24 Mar 2021 14:44:18 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.248.249.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1078450 (0x1074b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=151b44d56c67e2ca592ce909d8e2dda64a71aa15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:37:ea:a1:03:0e:99:91:6d:7c:31:6e:74:77:
db:9d:9b:b6:bd:5f:78:86:8b:48:77:35:e4:ca:27:
a4:36:cd:1c:69:ad:ec:04:b2:58:31:b8:73:7c:eb:
cf:50:0d:be:1b:6d:f2:b0:02:d9:4b:a1:1d:51:d4:
31:52:cf:5e:0b:a7:b5:16:99:49:23:4b:a6:0d:c9:
85:8f:93:1d:98:3c:a8:35:86:4c:03:4a:2d:9d:64:
b8:2d:d6:74:fe:3d:4c:96:4b:22:9f:0e:b6:a1:ea:
83:19:e8:6b:e2:3c:c3:9d:d1:0e:c3:79:d4:b3:15:
1f:26:96:38:70:9d:56:cd:56:2b:c4:48:33:8f:36:
52:01:8c:27:63:56:71:4e:be:28:9d:68:cb:3b:e4:
f6:d7:46:9f:f8:28:12:40:00:d8:2f:8d:93:bb:df:
95:09:80:d5:6a:e9:50:d7:55:d4:e3:ea:12:b2:38:
38:db:c0:d9:1b:99:b0:30:c0:b9:b1:25:eb:74:63:
97:0d:65:91:30:94:de:d4:7b:6d:f7:77:5a:6b:23:
38:b2:71:fe:f4:92:0b:aa:c5:53:f3:f5:3d:b6:4e:
b3:65:e8:02:03:64:c6:21:3e:1a:e8:af:d0:0b:6e:
48:1e:65:31:a0:b9:dd:4d:e0:b5:51:16:36:de:a9:
1d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:04:4E:E7:E3:CD:D8:DE:5B:36:29:F3:E7:ED:DC:93:CE:E2:E6:1A
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/151b44d56c67e2ca592ce909d8e2dda64a71aa15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.248.249.0/24
Signature Algorithm: sha256WithRSAEncryption
65:6a:f4:06:fa:80:93:89:07:a0:6c:29:39:44:a2:09:44:57:
87:a8:29:24:60:b5:77:64:c6:db:0c:93:db:8c:71:89:ca:f6:
f6:0d:43:5f:70:ba:a2:36:c9:ee:34:1b:2c:5a:0f:af:7c:cf:
9e:44:1c:4c:71:ee:2b:b2:7d:cd:92:ab:51:06:56:44:12:1a:
5f:95:99:49:61:e1:b5:60:96:a2:b1:d6:d5:1a:f5:8f:77:d1:
99:44:04:33:89:06:cf:81:0b:3c:82:12:3f:06:58:69:12:21:
61:40:0c:da:d8:80:8c:8e:33:1a:ee:d7:30:9e:de:6d:1f:e8:
d0:a5:ef:ed:fd:be:6d:d4:c7:fd:06:52:58:cf:c9:c6:e0:d4:
0b:98:a9:1b:b7:6e:c8:16:3f:8e:16:9f:dd:2f:50:3a:77:58:
48:f3:8f:1b:b0:56:11:38:1a:9e:56:ea:4c:a4:fc:40:f9:6c:
9b:56:36:66:79:5c:15:87:79:7d:02:50:92:07:5b:5b:f4:56:
8b:27:77:05:19:ba:a1:4c:a8:21:5d:ff:50:01:ec:d9:c4:87:
e8:f4:1b:c8:62:cc:8e:96:a3:ff:a0:73:7e:e1:52:ec:fc:f5:
d0:74:58:da:a0:99:1c:8e:b3:04:a6:20:9e:ea:a4:59:9d:4b:
f5:4a:19:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:42 2023 by rpki-client on console-ams.rpki-client.org