Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/297d492a1e44a0abb5b1f7d43beda69f7113c7f4.roa
File: 297d492a1e44a0abb5b1f7d43beda69f7113c7f4.roa (raw, json)
Hash identifier: aPpfJQQgH5YhMEehFGBk9zRahtjn34B2zFNAnKq1Exg=
Subject key identifier: 5D:DC:86:7A:2D:F1:4E:C9:A8:66:0C:0E:C4:84:4A:8B:DB:40:2D:09
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 110DDB
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/297d492a1e44a0abb5b1f7d43beda69f7113c7f4.roa
Signing time: Wed 24 Mar 2021 14:44:30 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.247.214.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1117659 (0x110ddb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=297d492a1e44a0abb5b1f7d43beda69f7113c7f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:65:0b:d7:59:47:5f:a2:8d:91:c9:c8:b3:43:
b6:55:22:ee:22:cb:3f:61:2b:74:2b:16:25:37:96:
1e:a4:02:03:b9:3b:42:c7:24:68:fe:e0:30:16:fd:
c2:43:57:11:64:a1:09:6b:e2:9a:f8:77:26:c1:b8:
71:e6:75:a4:bb:05:4e:52:6d:9f:62:65:cb:9b:a1:
a5:31:45:b4:09:00:66:9d:97:7d:30:1e:96:ed:e5:
38:81:58:8a:e6:d0:88:1a:60:d3:7b:06:b1:f9:5f:
ed:5c:c8:48:64:7f:d4:f9:ca:89:a1:bb:eb:e8:fe:
dc:8c:6b:17:91:15:dd:d0:ce:44:13:72:a9:56:9b:
28:2c:cb:44:73:79:bd:b3:c7:6c:83:65:f8:8a:04:
a3:56:ed:60:15:af:a4:86:b9:6c:48:21:83:d6:8a:
6f:a5:6b:c0:33:2f:87:4f:8b:95:bc:3b:ba:6c:5f:
4c:9f:77:03:dc:99:c0:70:7e:97:6e:d5:fd:60:2d:
e9:d4:91:8f:ff:ec:a0:a1:2b:e6:7b:c0:f8:62:fc:
94:a3:e7:05:65:b0:c6:66:33:c1:4c:cd:c0:82:d0:
39:60:7e:bc:d8:ec:46:52:5f:e6:41:17:9a:e5:f0:
81:53:07:b5:1c:f4:05:26:b3:93:6f:f0:01:4b:e1:
0f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DC:86:7A:2D:F1:4E:C9:A8:66:0C:0E:C4:84:4A:8B:DB:40:2D:09
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/297d492a1e44a0abb5b1f7d43beda69f7113c7f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.247.214.0/24
Signature Algorithm: sha256WithRSAEncryption
68:eb:8d:bf:fa:6d:78:58:f3:b2:41:13:e4:c0:b6:f7:e6:79:
07:8c:8e:6e:1c:2c:a5:5b:70:87:a8:09:63:b5:e3:aa:1b:b4:
f0:3f:d2:3a:e4:7a:7a:a4:1a:41:8a:7a:2e:70:95:a4:5a:b7:
69:f8:5c:f4:bb:71:25:82:fa:77:62:3a:8e:1a:c1:66:0c:b5:
69:40:18:20:1e:d8:8b:12:5f:48:de:ac:68:0b:42:c5:5e:0b:
27:9d:0a:c5:bd:b4:90:da:76:a6:3a:b2:59:15:e5:28:2f:77:
f6:9a:ae:c5:b2:3c:46:80:25:62:e2:4a:7d:c3:bd:21:34:9e:
c8:c1:91:8d:3c:65:7a:4c:79:4b:e3:16:b0:fa:4c:e5:73:67:
e4:e6:c0:8e:a3:7f:65:f6:84:18:e6:70:2b:4d:9e:87:78:61:
fa:8b:18:36:41:ab:91:a9:4c:94:f7:bb:c3:7a:38:83:98:c9:
81:5c:ac:42:4a:fd:ec:b8:9a:e3:ce:14:79:c5:8f:8d:43:df:
36:b8:da:fa:26:ff:8a:68:ed:44:3c:94:53:d3:79:5d:ed:26:
27:ab:aa:d0:9a:d9:2a:20:e2:38:54:2e:82:7a:7b:23:e0:68:
f9:6f:db:2f:ea:7b:97:22:01:c0:bb:5e:25:16:6c:c3:d2:33:
b7:97:1f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:42 2023 by rpki-client on console-ams.rpki-client.org