Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/27b94290090c1f49fd6c28f356fa3d883d31cc1f.roa
File: 27b94290090c1f49fd6c28f356fa3d883d31cc1f.roa (raw, json)
Hash identifier: Y/y7uVT9DtCwa04NVAdYs72p8vilITq/5c694Hx9EcM=
Subject key identifier: DF:20:DB:B0:3C:C5:60:B3:49:3C:CC:E3:32:E6:97:44:A8:90:CF:EF
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 222E57
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/27b94290090c1f49fd6c28f356fa3d883d31cc1f.roa
Signing time: Tue 13 Dec 2022 20:07:08 +0000
ROA not before: Mon 12 Dec 2022 20:02:58 +0000
ROA not after: Fri 13 Dec 2024 20:02:58 +0000
asID: 278
IP address blocks: 132.248.132.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2240087 (0x222e57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Dec 12 20:02:58 2022 GMT
Not After : Dec 13 20:02:58 2024 GMT
Subject: CN=27b94290090c1f49fd6c28f356fa3d883d31cc1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:dd:18:83:75:48:aa:87:c8:7a:6b:11:80:32:
be:bf:32:47:2b:b3:dd:15:6d:a5:91:20:9d:f8:4b:
b0:2f:3a:19:83:dd:28:65:16:3c:e9:ea:f7:1e:1b:
16:c9:d8:45:42:a8:e3:fd:f3:0c:1c:0c:d0:d8:8a:
a9:79:98:ed:b8:c6:ef:03:80:76:9d:09:34:00:64:
80:39:d1:43:81:57:45:ee:15:7c:03:6c:9b:ff:cc:
cb:3b:80:26:0a:25:f4:c3:f6:aa:f7:81:4e:1f:dc:
64:c4:c4:05:f1:1e:26:3e:f1:83:cc:c3:94:53:d0:
91:42:ac:ee:b9:bf:28:c9:7c:5d:7a:ea:43:9d:3b:
74:00:76:87:c6:cf:d3:b6:b5:23:c1:84:5c:05:96:
ee:c5:fb:12:e3:6d:8e:91:aa:da:7d:3d:5c:ce:30:
52:ea:9c:a0:e5:b0:99:dd:b5:da:44:43:62:df:85:
90:e8:6a:c4:cd:d9:df:a8:2c:98:ab:b4:44:b5:39:
01:51:84:2d:19:ee:aa:18:ae:1f:49:e6:91:eb:d2:
0e:42:55:1d:41:7d:82:ee:d7:c5:e9:31:86:c9:5c:
5a:28:b8:89:9f:fc:6e:de:bb:83:7b:ca:ad:4b:a1:
cb:fe:99:bd:ec:7a:ba:7a:38:4a:03:03:24:ad:9d:
71:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:20:DB:B0:3C:C5:60:B3:49:3C:CC:E3:32:E6:97:44:A8:90:CF:EF
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/27b94290090c1f49fd6c28f356fa3d883d31cc1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.248.132.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:bf:9f:81:33:d8:3f:dd:e2:9f:e4:ab:0d:2c:be:20:7b:ed:
f3:df:83:2f:bc:35:9c:8b:9d:a9:cb:ec:a6:32:1a:61:21:0f:
40:58:a5:1f:87:a6:1e:48:3b:50:22:04:34:cc:b8:72:21:3b:
6c:39:d3:a7:3f:f8:25:7f:d9:13:2b:2b:07:ec:91:53:04:5d:
ae:17:46:35:57:02:a6:09:4c:e5:8d:5d:0e:34:44:da:a8:bb:
5c:82:f7:23:f4:10:bd:74:4c:cb:9c:43:2b:92:4c:87:e2:d6:
56:29:9c:1f:ec:0e:c3:84:33:50:cb:3c:46:87:03:82:d9:22:
0f:b4:ca:97:dc:66:88:ab:ed:21:d1:d3:e2:9f:34:79:e4:48:
ad:2f:c7:a2:ba:a4:a9:b5:a5:69:1c:9c:89:b5:44:fe:cb:e0:
ff:8f:01:f9:75:9b:59:fd:f1:e7:2c:84:69:3d:a3:d1:ac:3f:
7d:20:26:59:d8:ef:d2:b5:cd:11:ff:a1:9c:c8:60:0b:ce:db:
43:62:7b:6f:dc:18:31:92:96:0d:15:0b:38:47:14:8b:15:bf:
89:45:26:cb:8e:bc:34:bf:f4:c3:b6:58:fc:8f:85:8a:ac:8e:
54:4c:f6:35:a8:c8:45:07:1e:d0:be:1c:94:00:66:8c:9b:d4:
01:8b:91:cd
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIi5XMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
MGE0ZmE0Y2FmNDgwY2I3NmMwYmM0YWVmYmY2MzNmOGNlM2IxZjkwHhcNMjIxMjEy
MjAwMjU4WhcNMjQxMjEzMjAwMjU4WjAzMTEwLwYDVQQDEygyN2I5NDI5MDA5MGMx
ZjQ5ZmQ2YzI4ZjM1NmZhM2Q4ODNkMzFjYzFmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiN0Yg3VIqofIemsRgDK+vzJHK7PdFW2lkSCd+EuwLzoZg90o
ZRY86er3HhsWydhFQqjj/fMMHAzQ2IqpeZjtuMbvA4B2nQk0AGSAOdFDgVdF7hV8
A2yb/8zLO4AmCiX0w/aq94FOH9xkxMQF8R4mPvGDzMOUU9CRQqzuub8oyXxdeupD
nTt0AHaHxs/TtrUjwYRcBZbuxfsS422OkarafT1czjBS6pyg5bCZ3bXaRENi34WQ
6GrEzdnfqCyYq7REtTkBUYQtGe6qGK4fSeaR69IOQlUdQX2C7tfF6TGGyVxaKLiJ
n/xu3ruDe8qtS6HL/pm97Hq6ejhKAwMkrZ1xQwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFN8g27A8xWCzSTzM4zLml0SokM/vMB8GA1UdIwQYMBaAFEixvQ/Kc7iuYUnO
JUbMDxXgfnaDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDkwYTRm
YTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFmOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODQyYjYzM2YtODBiOC00ZjRjLWJlOTgtNjU2ZDZm
OWE3ZjM4LzI3Yjk0MjkwMDkwYzFmNDlmZDZjMjhmMzU2ZmEzZDg4M2QzMWNjMWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NDJiNjMzZi04MGI4LTRmNGMtYmU5OC02NTZk
NmY5YTdmMzgvNDkwYTRmYTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFm
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIT4hDANBgkqhkiG9w0BAQsFAAOCAQEAf7+fgTPYP93in+Sr
DSy+IHvt89+DL7w1nIudqcvspjIaYSEPQFilH4emHkg7UCIENMy4ciE7bDnTpz/4
JX/ZEysrB+yRUwRdrhdGNVcCpglM5Y1dDjRE2qi7XIL3I/QQvXRMy5xDK5JMh+LW
VimcH+wOw4QzUMs8RocDgtkiD7TKl9xmiKvtIdHT4p80eeRIrS/HorqkqbWlaRyc
ibVE/svg/48B+XWbWf3x5yyEaT2j0aw/fSAmWdjv0rXNEf+hnMhgC87bQ2J7b9wY
MZKWDRULOEcUixW/iUUmy468NL/0w7ZY/I+FiqyOVEz2NajIRQce0L4clABmjJvU
AYuRzQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:42 2023 by rpki-client on console-ams.rpki-client.org