Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/347c63a3172d9494bdebd9ea68ca8070e6f7ffce.roa
File: 347c63a3172d9494bdebd9ea68ca8070e6f7ffce.roa (raw, json)
Hash identifier: 8Nv03Sb3c8zz6ZrhjCMlvlwmaqBmWqGHFGXEPJ5mwSk=
Subject key identifier: E9:FA:A1:E4:A1:C2:B8:14:70:C7:9E:7B:E4:E4:FA:FE:43:D6:73:BD
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 10B81D
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/347c63a3172d9494bdebd9ea68ca8070e6f7ffce.roa
Signing time: Wed 24 Mar 2021 14:44:24 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.247.180.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1095709 (0x10b81d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=347c63a3172d9494bdebd9ea68ca8070e6f7ffce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:61:b6:38:58:ab:65:5b:dd:04:1b:09:0c:db:
64:54:b4:d0:1c:81:8b:94:fd:e5:e6:99:4e:9c:d3:
2f:c9:67:60:a4:a0:fa:0d:d2:80:fd:44:7c:c8:5d:
36:e3:a3:e8:60:47:ba:ab:d7:cc:f0:6e:68:e5:0c:
0e:ee:2b:0b:6d:13:bb:85:a0:bb:34:eb:80:b8:94:
3d:21:e6:d2:2a:f8:0f:94:d3:95:c7:8b:61:2d:43:
bd:fc:4b:6b:89:3a:29:2c:a8:90:9f:e9:38:0f:e0:
3b:6a:5f:ba:65:45:d2:88:45:ea:73:4e:a3:74:8e:
5d:0f:75:b9:1e:20:78:5e:cc:df:19:92:79:b8:ef:
5a:e8:42:68:ac:c2:54:ea:e3:48:73:fc:78:ad:91:
0c:5c:a5:dd:43:89:39:53:05:0d:f7:e2:4f:38:e1:
03:9e:b7:a8:52:ec:94:ed:1b:ec:fd:48:b1:e5:09:
26:79:ef:f6:a8:e0:97:dd:13:fc:90:fd:76:9d:b1:
cd:9d:50:2e:14:51:61:e4:50:26:a5:29:0c:c5:f5:
ae:36:09:f5:ec:73:d8:59:43:32:e9:fa:93:cc:30:
23:5e:0f:0b:c5:f1:f3:bc:3a:5e:af:75:ab:2f:66:
51:11:63:eb:56:89:c9:12:87:ae:be:a7:41:37:a2:
02:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FA:A1:E4:A1:C2:B8:14:70:C7:9E:7B:E4:E4:FA:FE:43:D6:73:BD
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/347c63a3172d9494bdebd9ea68ca8070e6f7ffce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.247.180.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:ec:fb:3d:64:22:d2:66:9d:b3:ef:fc:e5:58:df:d5:e0:0a:
c0:6e:25:46:21:11:66:f6:0c:80:6e:90:86:60:d2:a2:21:70:
59:e6:28:79:8e:f7:36:8f:aa:0d:5d:ae:80:fb:5a:85:f6:b0:
af:c1:b8:7d:b8:dd:40:7a:60:f5:cc:02:15:2d:98:29:bc:cf:
6d:bf:10:2c:03:52:1d:ec:bc:c7:f7:af:25:4b:d2:6c:9a:b8:
95:40:6b:87:30:29:e0:0b:bb:8d:7c:7a:50:4d:9a:d4:7b:3b:
fa:4d:76:65:f7:9d:84:f8:aa:d6:65:54:9f:40:8e:41:31:a1:
4c:98:3d:de:85:03:71:66:6c:93:c5:74:fc:3b:03:22:23:cf:
8f:d9:e2:6e:73:ed:d7:c7:68:87:21:40:73:9c:28:e8:e3:43:
4c:15:ce:35:2c:af:5c:01:ea:db:e5:ca:88:6f:01:17:7f:b2:
cc:b8:a5:cd:45:b1:df:ec:c6:19:63:bc:f3:c8:85:ed:71:cb:
50:dd:51:5e:b3:97:7f:96:ba:72:e0:10:f9:15:f6:2f:ae:d6:
e1:ad:07:a9:61:76:8a:cb:2b:7d:1f:94:8f:e6:06:8b:ab:b2:
4a:bf:56:4e:d9:d1:a0:24:fe:c6:68:32:a3:5f:80:6c:44:c6:
4a:5b:d7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:42 2023 by rpki-client on console-ams.rpki-client.org