Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/3c0ce97038adcac6064ed550d2a95bd1cf447f51.roa
File: 3c0ce97038adcac6064ed550d2a95bd1cf447f51.roa (raw, json)
Hash identifier: el978nZlrpRDRapRrnnYP1yZPJqc+Hb2FrZne1tiBBQ=
Subject key identifier: 80:85:13:C8:9A:2E:6D:81:1E:E3:2A:72:F7:AF:E4:A9:3D:89:F4:8C
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 106014
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/3c0ce97038adcac6064ed550d2a95bd1cf447f51.roa
Signing time: Wed 24 Mar 2021 14:44:17 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.247.136.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1073172 (0x106014)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=3c0ce97038adcac6064ed550d2a95bd1cf447f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3e:f1:90:0d:76:e1:b4:1d:b7:12:f2:ab:99:
c2:1e:37:23:a5:24:f1:0e:10:89:3c:10:e5:40:14:
aa:c2:93:b0:65:a0:1f:d5:58:dd:d5:aa:b7:f0:55:
e9:9a:e0:ac:d5:88:84:bf:f6:43:20:a1:0a:42:0e:
54:2b:41:fc:ff:c5:8f:8c:95:f1:0f:90:b6:09:bf:
ab:11:df:7b:0b:65:f4:a2:6d:b9:0b:d4:2c:92:f6:
41:42:3c:cc:f0:7f:ec:36:93:b1:81:13:1e:3a:87:
2c:e8:71:89:fb:f6:eb:16:63:29:38:a6:49:d8:c9:
9a:08:bd:6d:7f:ca:c8:24:1c:8f:7d:a9:78:fb:5f:
01:e3:02:23:b1:b8:fc:b2:23:f9:c9:8e:bf:26:fe:
cc:03:1a:58:c2:01:51:13:6e:70:88:49:a0:0b:7a:
43:63:fa:2b:7a:8f:9c:3c:de:5f:c6:06:cb:a6:d8:
b6:0d:41:8b:c0:7e:4e:77:2f:e8:16:32:7f:39:23:
b1:38:f1:e3:0b:9e:ed:b1:06:9f:65:1c:04:47:c7:
9d:2f:ab:1e:e6:e5:72:cb:7a:ba:f5:8a:7b:d0:b6:
49:6f:10:61:7e:2f:61:fc:ed:cf:19:7f:14:f4:00:
f0:f4:01:ae:90:40:3f:a8:78:48:be:04:77:d0:81:
b9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:85:13:C8:9A:2E:6D:81:1E:E3:2A:72:F7:AF:E4:A9:3D:89:F4:8C
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/3c0ce97038adcac6064ed550d2a95bd1cf447f51.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.247.136.0/24
Signature Algorithm: sha256WithRSAEncryption
57:37:df:46:cf:56:18:94:1f:7c:02:72:b4:2b:e1:b8:21:39:
11:46:9f:7b:51:96:6a:5e:24:bf:b5:b0:ab:17:cf:62:8e:2b:
33:8c:78:2d:e9:a2:c5:4a:81:64:73:07:ea:87:ae:56:61:b6:
2a:17:1f:80:eb:64:d6:7d:3a:27:46:b1:20:82:eb:1d:9e:08:
ce:50:80:af:5c:41:e3:04:1f:8c:83:a4:fc:af:ec:f2:8c:d5:
5b:db:92:5b:02:47:ab:ad:3b:e6:53:67:7f:f5:2e:ed:64:8b:
52:64:14:f5:98:88:80:43:03:ab:a1:ac:3c:dc:63:a6:85:d1:
62:60:a7:4f:74:f1:79:85:62:e3:6a:36:a4:82:4a:84:0a:16:
54:3a:90:7f:f0:ca:b6:7a:4a:f2:9d:8a:8f:fe:4f:c9:b0:3d:
57:59:b4:7e:9e:d4:f0:2e:1c:41:94:44:29:86:ef:31:b5:e9:
71:3f:08:6d:2a:ee:4e:fa:22:3a:6b:14:d3:70:2c:19:cd:20:
3e:f4:48:60:ac:10:f3:04:d4:20:58:b5:17:5c:3e:23:16:20:
5a:93:31:b5:3f:e9:3f:43:6d:7b:21:68:5f:7d:22:28:8b:93:
38:a1:05:ee:74:01:58:27:c4:a2:0c:15:2e:35:ed:7f:4c:f6:
87:15:71:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:43 2023 by rpki-client on console-ams.rpki-client.org