Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/3e94dc5510144eeb536c1700257ee1cb939fb2d2.roa
File: 3e94dc5510144eeb536c1700257ee1cb939fb2d2.roa (raw, json)
Hash identifier: zQX0GMuETdA8G8FTeMcn9NIExsDpfWto/55vyqNwEgI=
Subject key identifier: 21:20:0E:3E:E7:52:3B:36:AA:74:73:32:0D:64:4A:18:91:41:35:BB
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 110999
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/3e94dc5510144eeb536c1700257ee1cb939fb2d2.roa
Signing time: Wed 24 Mar 2021 14:44:30 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.247.199.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1116569 (0x110999)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=3e94dc5510144eeb536c1700257ee1cb939fb2d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:cd:89:be:4f:aa:4f:53:02:28:cc:2a:9e:04:
fc:b0:00:8f:07:59:0b:6b:0a:26:19:a1:a5:c9:7b:
0b:fb:81:b9:7b:98:9f:8a:aa:bf:27:af:2c:fb:7e:
f9:86:00:b5:be:e1:24:65:d7:29:fd:94:34:62:71:
11:25:c0:85:5c:9c:63:03:d0:d9:36:bd:61:fa:97:
a1:5d:c9:41:6e:b4:92:87:39:e9:98:38:3c:97:c5:
e6:ae:4d:99:49:9b:fa:a2:c2:3c:13:f7:22:1d:1a:
31:0e:98:2b:3e:d0:52:b0:eb:0d:c4:1f:42:fe:17:
6c:7a:0b:ac:bd:1b:85:15:17:5b:0f:49:92:03:f3:
a2:e9:67:66:c3:f2:67:ef:9f:55:3a:2a:ea:69:dc:
b3:5b:d3:fd:69:12:94:ca:98:c1:5e:78:89:ec:8b:
79:7f:06:d1:86:f9:08:c1:a6:df:5c:18:75:1a:e0:
ba:c1:ea:fa:f7:83:ac:eb:2a:81:9b:1a:cb:ae:1c:
73:ac:f0:f7:65:ba:7f:58:23:db:e9:e0:54:9d:58:
e9:50:bd:8b:24:3e:21:a2:81:4a:b1:b7:f1:b1:3b:
31:05:31:f6:ed:29:8b:c5:e7:21:0f:be:73:82:9a:
10:cc:51:e1:9d:00:f3:b2:45:0a:09:ee:4b:28:a1:
2c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:20:0E:3E:E7:52:3B:36:AA:74:73:32:0D:64:4A:18:91:41:35:BB
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/3e94dc5510144eeb536c1700257ee1cb939fb2d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.247.199.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:59:27:77:39:b0:e5:76:40:90:c8:ac:fb:fd:5c:41:5e:ef:
1b:41:b3:22:a1:c6:14:87:e8:45:8f:6b:77:5a:92:f5:ba:66:
86:62:9b:13:14:39:fb:a7:33:40:a2:0e:3c:8f:28:58:ce:03:
dd:c8:a0:d6:ec:18:21:bf:1a:39:c7:46:b2:05:c7:55:4e:be:
4c:9e:4d:ff:55:95:0c:f7:93:b0:ca:e0:fa:99:9c:e5:e6:94:
ef:57:8b:f9:65:3a:17:cf:fc:0e:19:a3:02:b8:5d:bd:1d:ff:
31:69:96:03:05:07:35:a8:e2:8b:ac:ef:ad:d0:e8:f5:79:18:
cc:83:9e:19:0e:ca:ee:ad:a9:1e:79:da:e8:55:6c:08:e9:59:
79:ae:3d:d8:6a:f0:31:44:65:f8:ad:25:60:1a:45:0a:65:0c:
a7:34:d9:d8:f5:fa:3a:56:26:60:83:e4:b2:3b:92:a6:9e:f6:
cf:3f:42:46:47:91:d2:e2:ba:98:d4:3f:d0:1f:fa:8d:9d:f2:
35:50:c9:fd:ed:63:b1:ad:03:8e:80:bf:9e:f3:87:63:5d:78:
06:af:f6:5d:5e:70:47:37:5f:22:64:5d:e4:fd:d6:02:3a:fa:
34:8a:b6:f3:47:fe:2c:48:84:48:bd:90:93:0f:87:30:b1:92:
b3:1d:ae:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:43 2023 by rpki-client on console-ams.rpki-client.org