Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/351013860a448a4c3fbab1cc048246ba590feb38.roa
File: 351013860a448a4c3fbab1cc048246ba590feb38.roa (raw, json)
Hash identifier: 9R5BAdmwCJoLO+aCTLSmZ5f1h483Lqe65ulB3zQyWeY=
Subject key identifier: 43:BB:D4:42:C3:75:31:04:AF:C5:DB:E2:03:34:43:09:49:3F:6C:EF
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 0FA927
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/351013860a448a4c3fbab1cc048246ba590feb38.roa
Signing time: Wed 24 Mar 2021 14:44:02 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.247.0.0/17 maxlen: 17
132.248.0.0/17 maxlen: 17
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1026343 (0xfa927)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=351013860a448a4c3fbab1cc048246ba590feb38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:47:82:f1:a8:7d:09:a9:46:03:81:9c:81:43:
76:87:67:be:c6:7f:c8:a9:e3:24:e6:73:ff:1e:ac:
0d:b1:20:72:43:be:5a:de:95:b7:5a:de:1e:c3:f0:
95:0f:76:85:7e:55:1c:8b:d8:73:fa:57:41:43:cc:
5a:e0:76:7b:96:48:ad:12:74:6f:a2:b9:14:14:dd:
76:0d:3e:d9:3c:ea:8c:5b:9a:c7:c0:c5:13:4e:79:
9d:84:bc:a4:a2:0c:50:b5:5a:cc:02:cd:41:5f:04:
1c:6b:8f:a7:ab:25:d2:50:d7:98:75:84:e0:20:e4:
04:be:ec:85:12:0a:11:5f:1e:4b:04:e0:ab:0f:af:
9b:8c:50:7d:e4:74:4d:2d:41:72:dd:de:4e:e9:92:
61:ca:ab:6a:9e:f7:43:c5:ae:34:c8:fe:91:1b:8f:
0f:72:79:36:05:f4:1f:57:f5:88:cc:da:1a:55:78:
f7:ab:ba:02:19:19:15:7a:a2:81:c1:fd:96:65:07:
02:9e:06:90:1d:b5:b5:8c:34:1e:7c:ef:12:c0:80:
b8:f7:38:d5:f2:57:4b:c1:93:28:2f:7c:44:2f:2c:
32:10:d7:8c:73:05:b9:71:df:9d:13:17:67:4d:6c:
29:10:12:6b:63:d0:de:51:45:51:41:49:7c:c4:75:
0d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BB:D4:42:C3:75:31:04:AF:C5:DB:E2:03:34:43:09:49:3F:6C:EF
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/351013860a448a4c3fbab1cc048246ba590feb38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.247.0.0/17
132.248.0.0/17
Signature Algorithm: sha256WithRSAEncryption
b3:20:cb:7a:c0:10:d0:79:bb:4a:2c:7b:e2:c6:fb:5c:bb:16:
94:ff:f8:f9:18:e4:8b:ab:7d:51:96:c1:14:45:e7:14:bf:5a:
06:5a:e1:89:15:40:90:8d:54:f7:b4:bb:47:c2:98:94:a2:20:
b6:73:e2:a2:4a:f3:67:11:3f:2c:18:2d:d7:1a:25:8b:32:58:
ae:cc:1e:54:2c:e0:01:5a:93:86:47:4b:3f:bd:c0:a0:bb:a5:
1b:0a:7a:57:d2:79:c8:4b:76:0b:e8:81:f6:7b:4d:e9:51:e0:
a5:69:85:ef:f9:d4:00:c3:d6:12:c1:08:7a:38:05:fe:2c:9f:
f6:40:85:82:c2:da:ae:cc:07:0e:02:a6:3f:66:e3:84:4c:43:
04:02:30:18:74:b5:65:8c:d0:30:58:bd:4d:96:9e:c1:8e:ce:
1a:47:21:81:89:f5:b4:82:cb:aa:8b:c1:43:81:14:72:e9:26:
bd:23:94:36:fd:5e:29:12:f2:e0:46:24:43:92:49:f7:40:29:
1c:8b:35:c5:c0:db:3c:94:34:ab:e2:a5:0e:68:9c:2a:bb:27:
27:7f:00:fe:3a:2a:9a:84:16:79:df:ee:2e:9b:58:f1:17:70:
fc:57:6c:de:66:dd:1c:c3:e6:24:98:48:58:db:5b:8d:e9:c5:
ef:40:18:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:43 2023 by rpki-client on console-ams.rpki-client.org