Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/3f90c8e19747d7ae66a5d54ad94ee34fa5c85211.roa
File: 3f90c8e19747d7ae66a5d54ad94ee34fa5c85211.roa (raw, json)
Hash identifier: UTp07NGvspOpIini8EdGyKIuLncD4l3blrbWk9WWLuU=
Subject key identifier: 1E:4E:F6:AA:F5:82:F8:5A:64:BF:05:DF:75:60:67:26:FE:3F:AC:6F
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 10B38F
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/3f90c8e19747d7ae66a5d54ad94ee34fa5c85211.roa
Signing time: Wed 24 Mar 2021 14:44:24 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.248.169.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1094543 (0x10b38f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=3f90c8e19747d7ae66a5d54ad94ee34fa5c85211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:34:ce:4e:1e:b5:29:52:87:7f:04:54:b2:65:
5c:e1:45:73:f3:19:0b:6c:3d:34:81:f8:a3:be:44:
5e:4d:db:79:d8:80:8f:60:49:75:13:7c:0a:f3:d6:
45:18:6d:1f:51:36:9b:53:09:ef:d7:a2:9a:8f:51:
fe:7a:92:28:a0:2d:d6:95:a2:27:1f:f8:2e:48:92:
b1:ce:d0:1d:64:94:a7:44:b7:ed:34:a3:f3:4b:48:
8e:e6:d9:42:8b:d5:bd:dc:77:49:e2:6b:45:40:bf:
5c:13:82:da:d9:06:b5:38:82:6b:56:d1:25:23:a8:
70:9b:73:f5:18:73:0f:6e:6e:81:39:02:c5:31:70:
9c:f0:88:71:70:95:2f:1f:91:a8:9b:45:54:57:d2:
ab:6a:a5:63:7f:70:c5:2e:b3:29:6a:20:6f:6a:70:
73:93:98:c7:f3:8b:89:3e:65:21:e5:9a:21:8b:d2:
2a:de:5d:fe:5a:fa:d9:8b:2f:d2:0a:39:76:32:e1:
83:8d:09:03:14:ab:07:25:19:56:b6:4f:68:6b:cf:
16:2b:64:9a:20:8c:f0:97:5c:c8:78:fe:6b:b6:bb:
40:8f:b3:44:c6:81:b1:d6:62:29:41:24:7c:4e:5a:
5d:60:e3:93:13:eb:1e:04:79:67:d0:94:b9:05:0b:
af:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:4E:F6:AA:F5:82:F8:5A:64:BF:05:DF:75:60:67:26:FE:3F:AC:6F
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/3f90c8e19747d7ae66a5d54ad94ee34fa5c85211.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.248.169.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:fe:62:64:e1:d8:ec:d5:eb:81:0e:84:e3:43:88:44:b5:6a:
ac:cc:c6:7f:95:74:18:82:bd:2b:b0:08:11:11:2a:7d:c6:a7:
45:1b:24:e1:aa:19:d3:6a:5e:fd:df:94:99:10:52:7d:ca:a1:
e3:4b:ce:32:9d:db:b5:dd:67:82:c8:19:ac:39:9e:6b:84:c6:
66:15:73:af:2f:a8:84:af:57:7e:7a:f0:7b:f7:07:d2:2e:00:
d6:4b:04:db:13:65:e8:52:20:05:80:fa:5e:e6:45:4b:01:97:
19:ef:29:ed:75:df:d5:f0:1a:68:eb:e4:18:21:45:fe:a6:9b:
14:d7:70:a0:92:1d:53:bc:7a:a9:c2:a9:69:6f:e0:ae:6c:e3:
ef:3f:85:80:ed:9a:95:8b:f6:21:e7:5f:58:d8:80:44:46:9a:
b1:db:31:97:1f:4f:56:7a:74:67:65:47:e3:14:47:60:9c:9f:
b1:56:57:63:82:08:99:2f:06:70:b7:16:fa:0e:f0:ce:05:c9:
c1:5d:11:2d:c2:8b:12:e0:7d:4d:cf:45:54:f2:42:48:f3:8f:
bf:e4:6c:6a:8b:57:00:9f:6d:71:29:09:38:8c:b3:e4:97:14:
00:f5:96:22:5c:5e:e3:38:cc:86:13:38:07:8b:ad:3c:4b:70:
87:15:11:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:43 2023 by rpki-client on console-ams.rpki-client.org