Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/1fe329e8de4f15a18fac1688eba3491bdad4d697.roa
File: 1fe329e8de4f15a18fac1688eba3491bdad4d697.roa (raw, json)
Hash identifier: 8zLpTEHKQRd6k7v35xio1nAIuTs4f04b+qpEshjtbFo=
Subject key identifier: 18:C0:CE:9A:A4:97:73:8E:A1:96:64:E0:BD:5F:5D:45:F4:96:B2:41
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 103DBD
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/1fe329e8de4f15a18fac1688eba3491bdad4d697.roa
Signing time: Wed 24 Mar 2021 14:44:15 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.247.196.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1064381 (0x103dbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=1fe329e8de4f15a18fac1688eba3491bdad4d697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5e:f8:fb:64:04:3c:f7:4f:ce:21:7d:38:bf:
db:2f:4f:a7:c9:e5:62:08:7a:ae:6c:8e:3a:f8:a4:
6d:8c:2b:1b:85:b2:ab:46:a3:f2:44:dc:90:87:d1:
e6:25:37:3e:9f:8c:7c:26:c6:c8:75:48:94:38:c9:
cb:ad:35:c2:01:24:54:bf:1b:bb:ea:1c:fd:2a:d6:
fe:97:88:1c:5d:22:f6:0f:0b:60:66:28:0e:ef:5f:
6f:06:09:b1:f6:8d:37:f6:06:c4:40:f8:ec:93:26:
ea:3b:cc:4c:82:04:e7:cc:22:49:57:6e:88:6b:5f:
cd:1a:14:c1:32:bc:ef:6c:cc:26:db:6a:14:ea:38:
11:df:e0:6c:31:e9:3b:f8:13:2a:84:30:2a:f7:ac:
43:75:84:1a:0f:bc:49:c0:7e:59:dc:24:4d:ed:73:
a8:7d:5c:0f:21:71:a6:c0:5c:6b:41:03:c8:48:a9:
22:93:fd:d8:88:56:9a:ab:b0:8f:66:5f:dd:56:38:
bf:e9:8c:22:a3:cd:d5:3c:d5:4a:0d:f5:29:8a:98:
99:0d:3d:42:a7:2b:57:67:0a:11:35:72:e2:ce:57:
f3:ce:9d:13:de:2c:6f:ea:65:b6:b2:54:c2:6b:8f:
c2:98:85:25:45:68:ea:f5:ec:b1:f5:12:aa:7d:cb:
0f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C0:CE:9A:A4:97:73:8E:A1:96:64:E0:BD:5F:5D:45:F4:96:B2:41
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/1fe329e8de4f15a18fac1688eba3491bdad4d697.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.247.196.0/24
Signature Algorithm: sha256WithRSAEncryption
be:a5:26:ba:f2:64:6b:fe:3e:90:02:2b:89:41:7e:86:eb:d2:
d2:2c:fd:b3:4d:81:ef:48:9c:6f:46:fd:41:f7:21:e3:49:6c:
06:7d:a3:5e:5a:c9:4d:cb:3b:89:1f:43:4a:87:65:cd:29:52:
75:5b:26:67:da:11:d3:9f:d0:92:5d:73:ad:94:82:57:96:61:
05:28:ad:62:95:c7:15:49:f5:fd:90:63:27:e6:98:c2:84:00:
c5:b4:04:2a:ac:36:3c:3a:50:bb:59:70:d1:86:3f:df:e8:17:
83:03:c6:ee:67:12:6c:ab:fe:52:08:80:a3:b0:02:a7:f8:8c:
47:37:f4:10:91:ac:4a:c4:b2:09:64:ec:02:b0:57:d1:5a:5a:
d5:ca:bf:ee:51:e2:10:8b:eb:d8:50:25:cf:24:3b:37:dd:58:
03:e5:24:88:c0:12:e9:9f:6a:40:6b:cc:b2:f2:f4:7f:52:58:
5d:86:f4:d9:da:80:f1:5e:35:21:1b:b1:d3:e3:18:19:b9:86:
41:4b:db:03:5c:29:5d:9d:f0:f6:1b:c2:18:d5:2b:f9:e4:dc:
39:7c:ab:d8:70:37:2c:0b:a0:0e:68:76:d2:7c:a9:85:b8:f8:
4d:22:2d:b6:07:f8:a5:d3:d4:b5:1e:db:1c:24:c6:f1:fb:74:
b6:8a:0d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:42 2023 by rpki-client on console-ams.rpki-client.org