Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/2a25a677362c80d7fa7d3824ac49bf69fe35efb2.roa
File: 2a25a677362c80d7fa7d3824ac49bf69fe35efb2.roa (raw, json)
Hash identifier: LZYwHD7g0v4dS5guSpLW5Ja5QAwwB+TJdtBiY3+5VL0=
Subject key identifier: AA:0E:0B:79:F6:22:39:AB:59:DC:9E:28:9A:6B:FC:8C:67:72:C8:9E
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 109E13
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/2a25a677362c80d7fa7d3824ac49bf69fe35efb2.roa
Signing time: Wed 24 Mar 2021 14:44:22 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.248.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1089043 (0x109e13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=2a25a677362c80d7fa7d3824ac49bf69fe35efb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8c:43:99:81:7a:30:2c:d7:db:16:bb:2f:af:
fa:d5:29:b1:3c:fb:f7:21:c1:85:a1:45:f6:54:8d:
9a:64:53:cd:6a:38:7f:2c:97:fe:8c:c0:fd:4d:42:
8b:78:1e:d9:8b:18:4c:0f:0c:d7:9a:13:e2:e0:48:
8c:c7:05:a8:e8:42:f4:dc:a6:96:cf:ae:41:9e:48:
40:b5:09:ca:81:17:19:57:2d:a1:98:a5:ff:5b:f4:
07:88:d0:b2:cf:85:5a:0d:ef:d1:a0:6d:b9:31:9e:
cd:6a:30:bb:f5:81:fd:c3:03:e5:72:6e:0a:12:b1:
03:0d:e1:75:d3:30:f0:4c:03:15:1d:b3:2c:5e:44:
7c:af:24:b9:95:f7:3f:53:90:08:44:ba:b7:8c:c1:
49:fb:4b:b0:c3:06:84:5a:26:7d:b0:78:a8:fc:6f:
53:90:b0:fe:36:ed:8b:7c:7a:00:26:6c:d1:ef:9d:
d3:58:62:52:c7:37:aa:9f:60:b6:04:01:0b:7d:d2:
70:ee:ac:37:9e:97:0b:8e:74:a8:a5:37:02:6d:3f:
ef:74:ee:f3:4a:01:9f:7c:4a:24:5c:3f:cc:99:6d:
69:03:7b:aa:98:38:4e:ee:a0:41:37:20:f3:d5:ef:
46:f9:48:55:86:ee:da:6c:a3:af:3f:4d:3d:0b:c5:
da:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0E:0B:79:F6:22:39:AB:59:DC:9E:28:9A:6B:FC:8C:67:72:C8:9E
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/2a25a677362c80d7fa7d3824ac49bf69fe35efb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.248.114.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:09:5e:2b:eb:4f:4f:12:29:ab:8e:92:67:10:77:01:57:f5:
81:5d:51:aa:dd:dd:d2:4a:7e:77:f8:6a:b4:1c:07:79:c4:b3:
57:dc:0c:42:99:93:62:18:fc:91:cb:44:63:48:fb:4c:93:bd:
3c:17:bd:f9:d1:1f:8e:86:df:a3:19:2b:ac:5b:cd:c9:11:e6:
fa:a8:73:52:fa:66:c2:90:cb:6d:e6:07:4e:07:bb:00:ed:35:
b2:a7:d9:d6:49:38:ff:ee:5e:e6:c5:ad:92:67:c2:f6:a0:47:
9b:00:5c:d6:76:da:1e:cb:fb:a5:64:86:85:a8:1b:c5:ce:8d:
3e:e9:0f:50:0a:67:5b:e8:56:51:cd:c9:0e:15:c4:c3:17:0e:
8c:9d:50:6b:7c:4e:02:d8:0e:31:cf:24:9e:8a:44:49:54:e9:
01:03:bf:98:be:b6:a2:58:88:2b:17:86:98:ff:18:de:45:16:
a9:20:86:2c:a5:51:fa:b6:9b:22:df:a9:a9:08:9d:ef:b4:66:
f6:5f:9e:5e:7e:e8:44:ba:ec:a8:83:6a:05:2e:e0:78:ae:db:
1e:ff:2a:c0:c7:14:a6:38:e9:10:6b:5c:0e:d9:58:cb:6a:aa:
cd:47:70:5c:4b:ab:94:e6:f5:c2:ca:89:9c:91:a2:2b:29:d7:
97:d6:5e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:42 2023 by rpki-client on console-ams.rpki-client.org