Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/433fe8226e4ca5a239cca6869e6789424cc2bda8.roa
File: 433fe8226e4ca5a239cca6869e6789424cc2bda8.roa (raw, json)
Hash identifier: JDlI1jFjTPWDrY3sVnEhy7gIUED67a6EU9I+E7CwcpM=
Subject key identifier: C4:D8:56:11:6D:7F:57:90:D3:6E:59:EE:0D:54:26:02:DA:98:56:5E
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 10281E
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/433fe8226e4ca5a239cca6869e6789424cc2bda8.roa
Signing time: Wed 24 Mar 2021 14:44:14 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.248.219.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1058846 (0x10281e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=433fe8226e4ca5a239cca6869e6789424cc2bda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:64:70:6e:d2:10:5e:3f:b1:67:ea:31:f6:c4:
f1:a8:4f:e5:0a:fb:32:29:f8:e9:29:61:cc:fb:cd:
26:c9:70:ae:03:2f:aa:65:70:f5:96:9f:9a:b2:f3:
ee:75:05:6b:56:c8:4f:71:a3:4b:cd:a1:f7:63:23:
19:70:18:7d:47:49:59:1f:f6:b1:4e:a5:ee:d1:8c:
12:53:4a:69:5d:5d:6b:ab:ea:ff:67:0f:bb:78:3d:
3f:18:a8:65:e8:dc:80:81:55:71:c8:2c:6e:ca:4f:
94:f5:78:2d:b7:23:8a:68:43:94:23:ce:6b:48:ff:
19:e7:c8:df:31:f0:3c:b5:91:b7:74:22:81:87:6a:
4a:7c:d6:71:95:1a:b1:53:bb:c8:96:6f:3b:0d:73:
7f:09:ea:1d:5e:24:c0:5a:69:4f:4e:da:bd:99:85:
b3:a6:53:2b:86:23:1e:d0:03:a8:15:3d:37:5f:16:
e4:f3:2d:7c:38:bd:d0:8e:10:5f:22:ea:f7:c5:45:
9b:e2:bd:21:38:e5:1c:4f:f5:0a:47:9d:e8:84:1f:
58:3b:af:f0:08:6d:2e:1a:78:e2:d3:35:a2:53:e6:
67:90:a9:a1:19:48:fa:d6:33:81:32:6c:47:08:63:
b9:9e:92:9c:1c:14:e6:e6:ce:a6:e1:c3:b3:2c:0f:
e8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D8:56:11:6D:7F:57:90:D3:6E:59:EE:0D:54:26:02:DA:98:56:5E
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/433fe8226e4ca5a239cca6869e6789424cc2bda8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.248.219.0/24
Signature Algorithm: sha256WithRSAEncryption
be:14:ca:d2:af:43:b4:b7:3a:95:33:52:38:69:1c:04:52:4d:
e1:5f:25:c4:9f:b1:34:d3:94:46:8e:b8:72:1e:cc:24:5a:a8:
6b:02:64:1b:e2:bf:e1:bb:cd:ee:b8:44:b4:12:ce:2c:3e:04:
35:90:c9:0d:61:f4:91:98:14:64:67:f0:9c:a4:87:f6:89:05:
89:eb:1b:d8:f0:7e:77:36:3e:eb:7f:17:f6:ec:8b:6e:ce:25:
77:7a:59:10:d0:24:89:e6:f7:e7:8b:86:68:ca:ca:aa:46:a8:
db:88:3a:df:f3:82:6e:f7:84:82:e1:1a:35:17:d8:6b:62:d5:
5c:38:3d:27:ab:1f:90:c7:d3:c9:14:d0:73:d5:ca:5d:28:42:
f8:8f:7e:d1:a5:41:3b:cf:9c:3e:be:6b:9c:0d:cc:b0:da:9d:
44:31:00:b0:47:7e:95:7b:a4:02:b2:31:bd:78:43:cf:1f:ff:
c9:58:db:a7:bf:14:df:f0:ff:61:25:2a:39:a8:1d:d4:5d:3d:
a0:1f:6a:38:e3:47:45:58:81:61:48:87:66:9f:99:a5:73:4b:
9a:16:30:2b:ec:e3:ca:14:51:ca:98:29:d4:82:03:32:bc:42:
45:54:f9:f7:57:cb:b7:3f:be:fd:52:2c:51:0a:a6:37:02:e4:
ac:1f:2f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:43 2023 by rpki-client on console-ams.rpki-client.org