Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/4abd88a8aeaf6cea033f1995ce3f66eae20ba750.roa
File: 4abd88a8aeaf6cea033f1995ce3f66eae20ba750.roa (raw, json)
Hash identifier: w80PZcJyFXKK0EN51PY/VMYQ8wgrXTtKLQhLGP2ywtk=
Subject key identifier: E0:55:07:3F:B1:84:2E:43:70:D7:56:88:AF:C9:89:30:ED:43:6C:A9
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 243628
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/4abd88a8aeaf6cea033f1995ce3f66eae20ba750.roa
Signing time: Wed 01 Mar 2023 20:09:25 +0000
ROA not before: Tue 28 Feb 2023 20:05:41 +0000
ROA not after: Sat 01 Mar 2025 20:05:41 +0000
asID: 278
IP address blocks: 132.247.103.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2373160 (0x243628)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Feb 28 20:05:41 2023 GMT
Not After : Mar 1 20:05:41 2025 GMT
Subject: CN=4abd88a8aeaf6cea033f1995ce3f66eae20ba750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9a:07:78:7c:aa:ce:ae:4c:6b:76:94:cf:e4:
50:d4:76:90:56:9a:5d:bb:f5:79:f1:bb:29:7e:c3:
ff:13:4a:af:bb:97:f8:15:0b:0f:c7:0b:82:e3:ed:
6d:37:20:23:7f:b4:8a:8c:df:19:bf:14:cc:fe:f5:
0a:bb:b4:69:8c:d2:90:e2:4a:cd:d6:fd:6c:01:84:
9f:fb:62:44:7e:72:b4:44:ff:9a:ff:c1:a2:46:b7:
58:d9:9d:f3:42:c4:c6:26:98:63:2e:dc:b6:82:39:
1b:00:5a:75:b8:81:4e:60:7f:48:bb:69:65:ea:b9:
b9:30:4f:91:cc:92:73:1d:46:3a:a6:9c:13:92:04:
24:60:64:40:2d:46:16:8d:75:03:b5:99:74:e2:07:
6a:8a:05:e1:17:25:1c:f0:c9:71:f7:8a:25:2c:74:
66:c8:89:d6:44:e2:17:97:47:31:3f:36:52:e5:fb:
c1:42:77:b8:dc:0f:30:76:17:ba:12:24:b2:24:da:
ed:df:21:5c:af:e4:1f:27:a8:cf:38:1e:ef:50:ba:
66:44:12:6c:3d:c3:b0:87:81:0e:22:4f:26:74:51:
f5:29:bf:ef:6b:ba:82:6d:08:84:95:08:b7:f5:ab:
52:7d:c6:ee:d7:af:0e:44:71:b4:1a:16:41:be:f0:
c9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:55:07:3F:B1:84:2E:43:70:D7:56:88:AF:C9:89:30:ED:43:6C:A9
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/4abd88a8aeaf6cea033f1995ce3f66eae20ba750.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.247.103.0/24
Signature Algorithm: sha256WithRSAEncryption
40:63:22:c8:7e:5d:48:17:ae:a0:bb:64:0b:12:5c:dc:9b:36:
47:4a:f7:b0:64:e1:37:9c:70:e2:95:64:d4:7a:54:06:bd:f6:
c3:09:b6:5f:05:ca:1b:e4:82:b4:82:d8:12:66:c7:bd:57:e4:
22:cc:4d:bb:ae:b4:ea:4a:30:02:80:a5:49:ec:2f:d4:63:a1:
4e:b6:2a:0e:94:e0:42:4b:5c:c0:3c:cb:ef:ad:4b:8f:83:1d:
7b:54:d9:95:69:3b:6e:5d:5a:9c:3c:1e:3c:b2:d7:32:bc:47:
79:37:97:e6:c5:ca:ba:4d:5e:1e:a5:cf:16:94:03:75:c0:2d:
64:3c:ba:ac:4f:24:de:cc:6b:84:03:c0:bc:8f:57:25:89:68:
d2:1e:f4:54:27:51:1a:fe:ce:8d:21:c9:0c:00:7b:38:cc:a6:
a6:65:b7:e0:c6:54:06:40:e3:1f:ff:06:b4:70:d3:06:eb:07:
17:e9:b5:a7:bf:a0:fb:a4:7b:4a:11:3c:ff:5b:f9:fc:92:5e:
8d:1b:ad:db:ae:af:7f:e8:b2:cf:78:f7:10:1d:e3:9b:3e:81:
63:0a:09:1b:ac:50:9c:a3:a7:6c:96:c4:22:db:a6:ee:71:9a:
26:2b:89:1d:02:58:d3:f2:c3:39:f2:24:44:16:96:46:cb:2a:
69:b4:37:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:43 2023 by rpki-client on console-ams.rpki-client.org