Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/47368ea162efd6e2a69885d0548cf063305aeb43.roa
File: 47368ea162efd6e2a69885d0548cf063305aeb43.roa (raw, json)
Hash identifier: qWX0Y1Pvy4mWaa95BYBR7eWvu8w80Fxi7+WZ0nKqA5Q=
Subject key identifier: 4B:83:C7:F7:12:06:2E:FB:49:5B:AD:B8:C6:46:0C:7A:A7:71:68:6D
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 109E09
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/47368ea162efd6e2a69885d0548cf063305aeb43.roa
Signing time: Wed 24 Mar 2021 14:44:22 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.247.48.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1089033 (0x109e09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=47368ea162efd6e2a69885d0548cf063305aeb43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d0:29:b8:5a:9a:e9:f7:39:1f:5e:30:5c:fd:
2d:91:a2:de:bf:4e:15:d2:05:a9:9f:81:dc:59:40:
02:64:45:ee:8c:1e:d1:0e:d1:6d:f9:8e:5e:db:03:
20:5f:ea:66:0c:44:3e:54:3f:5e:48:eb:78:1f:cd:
c5:db:03:6f:15:de:2a:ed:10:eb:a4:79:9a:00:d5:
91:00:50:b2:da:a6:81:6f:47:01:df:b0:61:0d:e1:
31:47:4f:2e:f4:d2:84:e5:44:87:09:fa:ef:bb:96:
1b:1b:10:20:6f:ca:0f:e1:e6:8c:f9:3f:69:01:25:
95:98:2c:72:8b:04:29:fd:f5:e6:15:02:83:90:26:
3e:02:7c:96:76:bf:bd:a1:c8:de:10:56:0c:38:d0:
65:0d:14:c7:19:2a:26:61:61:33:75:b0:d9:01:a4:
e5:c4:57:6a:2d:50:75:91:05:c3:e8:0a:28:c9:88:
fe:69:46:2e:fb:96:a6:0a:cf:77:63:0a:bf:b7:a9:
51:04:c8:24:71:97:83:a6:4d:a6:f2:fb:cc:8f:93:
af:e6:4a:79:60:d7:a4:6b:65:a8:b9:a1:b1:35:6f:
b1:0e:c8:6d:6b:49:43:4c:5f:c3:0e:41:0c:08:e0:
62:1a:12:d2:59:ba:2e:b8:7a:a6:01:e7:0a:7a:b6:
b5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:83:C7:F7:12:06:2E:FB:49:5B:AD:B8:C6:46:0C:7A:A7:71:68:6D
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/47368ea162efd6e2a69885d0548cf063305aeb43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.247.48.0/24
Signature Algorithm: sha256WithRSAEncryption
33:ff:c1:49:38:57:ef:31:cf:b2:66:28:8b:dc:27:40:88:80:
c4:cb:46:64:d7:7f:06:4a:fd:e3:eb:38:62:95:51:85:7c:bb:
30:fa:ea:d0:74:f0:fc:5e:71:c7:fc:b1:a5:1d:12:ba:4c:f9:
a2:5d:e9:db:a5:ba:0f:1a:57:a0:ff:89:01:3f:6e:40:34:89:
bd:c5:b1:e9:40:42:d6:b7:0c:0d:4b:78:09:7a:84:b3:bd:a8:
68:ed:b5:90:d2:f2:ed:2e:69:7a:84:88:59:c2:9b:85:6f:77:
c3:91:a3:9a:ab:e8:4c:db:9c:2a:8f:e9:fc:64:ec:c8:e9:1d:
fc:be:60:4f:e9:a4:cb:e0:0d:4f:84:94:fb:31:9b:65:1c:ae:
8b:70:b2:65:d2:6f:f4:5d:73:3a:2d:9a:91:df:73:8d:61:6f:
d2:fa:8c:fc:b7:50:dd:46:bc:fa:7d:36:0a:08:9c:d0:28:cc:
20:86:2b:25:64:c3:2d:5e:32:06:83:82:ca:29:2f:19:4b:35:
61:01:d2:1f:a5:24:4a:4c:7e:9f:d6:9e:b3:ee:b5:33:21:62:
c7:b5:ab:4f:2a:d1:41:9a:d9:95:bf:b8:45:4c:5e:17:64:c3:
16:e5:cb:a6:d1:88:6a:7b:b7:77:aa:9c:9b:c3:b5:81:cf:a8:
b0:78:b7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:43 2023 by rpki-client on console-ams.rpki-client.org