Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/27ce219ee9443b4fcb152e6a849ea274100d550b.roa
File: 27ce219ee9443b4fcb152e6a849ea274100d550b.roa (raw, json)
Hash identifier: 0lABb1Mr0gWc0s96ZYQe4jKn3lxEiDj5UOwaF4JN3dc=
Subject key identifier: AD:48:BE:E2:6B:51:24:BD:45:EC:30:AF:50:BC:2F:5A:03:7E:96:C7
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 1050D2
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/27ce219ee9443b4fcb152e6a849ea274100d550b.roa
Signing time: Wed 24 Mar 2021 14:44:16 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.248.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1069266 (0x1050d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=27ce219ee9443b4fcb152e6a849ea274100d550b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:19:6b:ef:58:ce:04:40:17:52:da:91:d3:ef:
1e:d6:85:e3:ed:a4:7b:18:23:f9:0f:8e:7e:e8:e9:
4e:44:28:25:06:4c:b4:95:62:25:bc:c5:34:e9:3c:
5b:43:42:05:c6:ee:cb:01:74:fe:a7:59:dd:60:32:
3d:3e:f2:40:0b:92:c6:39:f3:e7:46:5b:36:45:4e:
5a:79:6c:f1:ab:44:1c:60:6d:31:50:c4:c9:54:d7:
16:40:0d:cb:b1:9c:99:9e:e7:a8:59:ef:dc:c0:3a:
3a:5e:c2:80:10:80:22:11:66:8a:ea:a3:e0:6b:9b:
29:2e:28:cc:12:b8:e3:64:7b:9a:4e:bb:63:74:2f:
ed:ef:e9:cb:55:a3:df:cc:49:88:1a:e0:9d:66:00:
4f:81:f6:c2:76:8f:6b:c3:f9:8d:92:a2:ff:dd:a0:
c6:6f:94:1f:c6:68:3f:31:d1:35:e6:de:4a:c9:21:
09:be:38:de:73:76:a5:c1:15:68:db:1e:66:18:1c:
aa:e1:2f:7f:66:0f:66:ca:3a:f0:6b:c2:06:1d:ce:
c3:f5:2c:95:1d:75:a4:fa:95:91:92:32:c2:e9:a2:
28:25:84:03:02:9f:7e:1c:59:fd:a6:49:95:05:de:
19:14:8a:47:a6:77:3a:a2:71:27:62:26:5f:12:04:
4c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:48:BE:E2:6B:51:24:BD:45:EC:30:AF:50:BC:2F:5A:03:7E:96:C7
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/27ce219ee9443b4fcb152e6a849ea274100d550b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.248.216.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:c6:35:ec:d8:02:84:6f:91:e7:66:ae:f0:c6:1a:0b:15:ce:
bc:ff:b6:1c:15:30:16:41:a4:e4:d1:5a:2e:22:94:17:65:b5:
79:09:30:c4:a2:11:05:99:a3:be:ff:06:be:3a:30:cf:a9:ed:
ea:64:d5:73:25:e8:84:25:10:5e:54:7f:93:67:0e:f5:1d:58:
5c:58:08:e1:a1:87:b9:82:65:87:2e:24:69:4f:cb:ae:51:01:
0e:56:05:bb:24:2e:b7:7b:d5:a6:b2:d6:38:dc:32:25:13:40:
a3:72:fa:43:1d:9a:e0:8c:43:12:55:e2:48:24:b2:f8:4f:52:
d9:4f:c6:1c:b5:36:bd:04:2b:1d:da:10:3e:98:ee:56:07:f3:
d7:32:83:39:57:23:5d:c2:8b:0b:6d:7e:4f:49:08:ab:e2:1f:
71:7e:f5:61:a3:64:b9:8a:37:83:2f:25:18:19:74:4d:d8:6b:
45:82:a4:a5:ba:57:99:bd:d6:e5:b3:02:c5:51:fc:4c:98:d5:
58:a0:24:71:87:83:d8:40:1d:a7:02:7f:ce:9c:7f:d7:62:54:
70:93:d8:e5:3c:5e:ec:5c:68:a8:76:49:3c:e2:eb:e7:cc:e8:
75:1e:3c:a8:5e:86:fc:8d:fb:c0:0f:71:96:89:fa:0d:d9:4b:
13:0a:68:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:42 2023 by rpki-client on console-ams.rpki-client.org