Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/3edeb96f64b376cb196e0823eaad362714f6568c.roa
File: 3edeb96f64b376cb196e0823eaad362714f6568c.roa (raw, json)
Hash identifier: chs0QCjqtXpynALDsKmfLyRs68cgowlNM5hz4/4WwNU=
Subject key identifier: A0:9D:D6:89:4C:E7:56:6D:93:C4:1A:DB:91:5E:5B:3F:7B:FD:0F:AD
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 1077F9
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/3edeb96f64b376cb196e0823eaad362714f6568c.roa
Signing time: Wed 24 Mar 2021 14:44:18 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.248.143.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1079289 (0x1077f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=3edeb96f64b376cb196e0823eaad362714f6568c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e8:33:fb:56:04:8a:bf:f6:ef:04:f4:93:fe:
be:31:0f:e9:18:17:2d:38:13:38:c1:9c:35:4f:77:
7f:da:d2:e3:c5:e3:d1:93:28:0b:b0:98:00:1b:4b:
b0:c1:94:4a:7b:6a:d0:da:54:96:28:31:a6:ac:7f:
68:78:74:af:69:1e:ba:06:2f:38:5a:ca:4a:37:2c:
dc:6c:fd:71:4e:ed:6d:d4:a9:c0:76:11:d9:60:a7:
64:fe:95:29:c8:3d:f5:19:59:40:42:ac:a3:bc:34:
3c:4a:57:5f:87:6a:aa:f9:ef:ac:3c:4c:bf:b8:e0:
6d:7c:88:14:65:f7:e8:f0:d0:e2:bd:d5:43:c4:ae:
e4:7e:1a:3e:2b:31:76:ff:2f:60:06:2a:4d:05:0d:
c9:b1:b5:bd:00:38:f1:9b:b7:8c:de:e9:71:f8:58:
90:2b:1e:a6:5f:bc:3a:50:86:bc:78:04:72:6c:53:
ea:5f:c4:ab:fe:c9:0b:79:4f:ba:b0:fb:60:4f:29:
c8:b6:c3:9c:27:18:0d:50:b8:4c:ed:dc:36:9c:a8:
0b:60:c3:5b:06:27:50:73:93:c0:ab:47:3f:f7:31:
31:74:a3:6b:e4:1c:c7:21:1a:e3:5b:84:85:ca:2a:
45:cb:7b:7f:19:52:e5:98:fb:55:73:e8:7b:a7:dc:
26:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9D:D6:89:4C:E7:56:6D:93:C4:1A:DB:91:5E:5B:3F:7B:FD:0F:AD
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/3edeb96f64b376cb196e0823eaad362714f6568c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.248.143.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:25:8d:c9:47:0e:1b:4b:38:8e:c2:1f:e4:37:43:ec:d4:3b:
20:4a:a7:60:08:ba:08:29:8c:2e:52:30:6c:cc:ef:f6:4f:54:
38:2f:b9:6f:32:31:82:80:92:b1:6b:46:ea:f2:f0:23:9d:46:
09:ed:64:40:47:f8:3d:d3:ad:7f:96:9a:69:63:6f:c4:17:77:
e7:e1:af:78:17:34:c3:94:26:f6:0c:81:b0:3f:a0:22:ad:88:
f6:0f:ae:69:96:e4:eb:c2:3c:79:f5:5e:25:43:31:03:28:2f:
57:ee:86:41:7f:d4:57:ab:e3:ab:20:9c:bb:8c:59:39:44:ef:
8b:e1:5c:2a:ba:8d:ed:13:4f:53:61:f7:91:a7:39:b5:e0:a7:
22:fe:50:d8:ff:5c:10:f7:fe:23:3d:e6:36:98:32:57:83:48:
d9:f7:ee:95:9a:42:4b:62:80:23:35:3b:01:80:19:2c:6a:15:
de:13:a7:17:6c:91:a1:51:d2:cd:2f:11:90:7b:33:8a:6b:bd:
10:7d:5f:9c:06:db:b0:9d:39:b8:1a:f3:11:5c:17:1d:49:8e:
24:c7:c4:01:fc:a5:49:91:ac:24:ed:5d:b0:b6:9c:73:94:3c:
82:d0:cd:66:62:a3:4d:ff:cd:a5:1d:98:5c:85:d0:d5:af:6b:
ce:52:85:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:43 2023 by rpki-client on console-ams.rpki-client.org