Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/39da3f0f4ca0beccd0fbc0f3032c9542b58d36ac.roa
File: 39da3f0f4ca0beccd0fbc0f3032c9542b58d36ac.roa (raw, json)
Hash identifier: bp/Hh4iY+CoHo5R4YgmvapHZTODK3xaIOLkMBWxn000=
Subject key identifier: 89:2B:3C:96:3A:BD:75:CC:C9:1B:A1:22:4E:EE:49:B1:EE:73:A8:AD
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 101C1F
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/39da3f0f4ca0beccd0fbc0f3032c9542b58d36ac.roa
Signing time: Wed 24 Mar 2021 14:44:12 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.247.20.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1055775 (0x101c1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=39da3f0f4ca0beccd0fbc0f3032c9542b58d36ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2e:90:dc:df:fb:62:de:98:06:22:26:56:d4:
7e:3d:9a:76:41:95:29:1b:2b:ae:8a:22:9c:ca:7e:
9e:a7:2e:c0:51:14:c8:23:9c:01:a6:b4:11:cb:b9:
6d:bd:29:53:bc:ac:0c:69:d3:22:97:8e:50:07:6a:
25:32:e4:90:06:43:9b:15:46:32:6e:39:d0:05:86:
8c:4d:f7:b3:0f:57:17:8a:9e:75:27:24:31:4e:de:
5f:0b:e2:83:03:f7:81:3a:63:74:41:e1:ee:5e:5b:
95:ff:33:85:3d:37:af:2e:b6:26:b8:83:57:bb:29:
01:1d:a0:1b:6a:7b:9a:e2:63:4f:b7:a4:93:7b:42:
04:09:66:95:6a:83:b3:89:41:95:66:a8:35:73:96:
92:12:ea:c7:c9:75:c8:88:d9:27:03:ab:3c:32:50:
dc:6f:34:7a:64:05:a2:6d:37:ed:71:69:f9:d0:ec:
49:96:d8:3c:28:2b:dc:04:b0:55:72:d6:71:fc:c1:
1f:45:4b:f9:17:bc:a8:cd:eb:84:7b:34:dd:2f:e8:
65:45:27:61:fa:98:7d:19:03:45:e0:27:92:4c:21:
07:9f:b7:16:02:7e:6e:a2:1f:e5:51:09:fb:75:f7:
07:9d:06:b1:02:6b:20:7a:c9:39:dd:8c:58:e2:8c:
54:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:2B:3C:96:3A:BD:75:CC:C9:1B:A1:22:4E:EE:49:B1:EE:73:A8:AD
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/39da3f0f4ca0beccd0fbc0f3032c9542b58d36ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.247.20.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:a7:0b:64:a4:c3:06:78:2f:72:f0:55:78:85:44:ca:2b:d7:
71:7a:40:d0:f1:4c:cf:df:97:63:77:0d:0b:e1:fa:b3:6c:65:
1a:ec:c0:11:9d:7e:a2:48:4a:a6:1a:ba:2b:14:b8:9f:f0:38:
29:62:4f:18:27:9d:38:95:9c:a3:c4:8e:ab:20:4b:ac:8d:6e:
c3:cc:70:c2:71:fa:00:3d:ae:82:91:47:01:4a:8b:e7:4e:b0:
f9:3a:a7:9e:e6:b6:4e:20:a3:63:ba:c4:cd:d2:fc:05:ff:32:
4f:5c:82:ca:0d:da:a8:33:c7:5f:19:51:48:08:55:66:c7:cd:
fe:0b:81:02:6e:f6:4c:03:b1:2c:89:ce:1e:fe:0e:45:23:f7:
6f:64:50:ee:a4:65:4c:89:69:30:3f:5d:dd:78:f0:58:97:09:
20:a4:2b:72:c4:9d:4e:b2:24:80:b4:0f:4a:13:4d:14:36:fc:
93:07:7b:17:bd:90:77:e0:c0:2f:c3:3b:7f:24:19:43:ea:54:
70:b7:fb:21:84:ba:94:a3:02:a6:cb:43:ad:6b:38:cb:96:ed:
e1:66:6b:6b:ec:11:5e:1c:37:37:0d:7c:58:70:e3:9d:a5:60:
c4:30:b9:d3:80:5e:ee:54:a2:bd:f0:60:95:b3:02:17:8f:a7:
b6:8a:1a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:43 2023 by rpki-client on console-ams.rpki-client.org