Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/374d31b849c1558d51012a1174eea481ea74d61f.roa
File: 374d31b849c1558d51012a1174eea481ea74d61f.roa (raw, json)
Hash identifier: jMR2mO6oYglvRuRfEXIHTOnno4tbiumA3uyn20o0IOI=
Subject key identifier: AE:B9:DD:84:CB:45:D0:7B:00:6C:70:1F:10:6F:E9:33:A1:A9:16:0A
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 109069
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/374d31b849c1558d51012a1174eea481ea74d61f.roa
Signing time: Wed 24 Mar 2021 14:44:21 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.248.239.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1085545 (0x109069)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=374d31b849c1558d51012a1174eea481ea74d61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e8:eb:f0:86:a5:22:a0:be:a4:02:bc:4b:1e:
c0:e6:42:22:b0:b9:f8:f1:53:73:4a:86:c4:8e:36:
60:af:27:4f:69:63:0a:62:42:38:bb:e4:ec:f5:7b:
88:be:2f:c4:68:b5:a8:b9:e3:6c:1e:29:6d:92:f5:
1a:1f:a9:7f:c2:76:4a:ff:14:2d:6c:3b:c5:16:f7:
87:4a:e3:7d:9e:14:db:58:d9:04:f8:69:96:1c:9d:
ec:0d:a4:98:06:67:53:f6:35:06:ff:27:52:a0:e1:
9b:2b:b8:78:43:99:a2:57:c5:31:b5:9e:b1:94:2e:
dd:cc:83:8c:7d:16:c7:c5:2d:17:ab:4f:69:c9:2a:
7c:21:13:3e:cc:bb:7f:42:58:53:5e:1f:c3:98:09:
92:8e:0b:8f:fb:a8:9b:c7:74:38:f8:4e:51:04:a3:
1b:4c:a4:3a:1c:0c:0a:b9:e7:b9:53:97:89:6f:66:
a6:88:ec:fe:73:04:a4:b6:50:4e:23:fc:ef:9d:d1:
79:7b:95:2c:17:bd:91:47:c6:60:2a:6f:38:37:5b:
11:a0:67:cb:bf:b0:bc:68:e3:d9:2c:4b:7c:fe:e4:
f4:4d:fa:08:fc:3e:fe:41:df:c4:93:51:ac:57:16:
8f:56:43:a6:85:cd:f9:51:ed:6d:76:fc:d6:7d:ed:
1b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B9:DD:84:CB:45:D0:7B:00:6C:70:1F:10:6F:E9:33:A1:A9:16:0A
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/374d31b849c1558d51012a1174eea481ea74d61f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.248.239.0/24
Signature Algorithm: sha256WithRSAEncryption
67:b0:ef:e3:e5:f1:aa:0b:5d:34:7e:b5:52:ff:38:76:dd:2f:
7c:21:d1:da:77:a9:fe:df:ce:bb:5e:8b:51:8c:a6:52:91:64:
68:51:65:fb:de:61:d2:d2:1a:4f:2e:03:fe:d4:39:2a:93:d2:
cd:55:21:83:1f:de:7b:fd:06:5a:c0:f1:4f:d8:e1:6a:b8:9b:
88:fa:83:b3:11:32:ae:c7:54:09:0d:28:8e:09:85:97:b9:96:
23:cf:53:c6:61:10:aa:f4:ea:27:bf:12:78:a6:06:5e:84:d1:
40:41:14:e7:cf:76:ce:9e:c4:4a:68:8b:cf:ea:de:7a:48:68:
40:01:7d:61:7d:8b:51:15:03:c6:4f:28:09:96:76:f9:b0:31:
c9:b3:23:1a:6e:c6:fd:e4:a8:f8:68:2a:53:68:fc:11:fe:8d:
8c:eb:a2:41:d8:7b:cb:b3:2c:60:5f:66:01:88:d4:55:0f:62:
df:bf:fd:24:ca:e8:87:6e:33:2a:75:b6:17:77:2d:2b:61:19:
1a:3a:94:d3:81:f2:6d:29:ff:d4:69:3c:2e:0e:2f:97:dc:f6:
c1:fe:83:c1:93:f7:40:ad:7a:b7:d2:1d:06:94:96:e2:2d:b0:
1e:f6:89:d1:e4:e8:25:fc:33:8c:b2:32:ea:74:13:d1:bc:a5:
8f:de:a9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:28 2023 by rpki-client on console-fra.rpki-client.org