Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/5953add6c0ead0fc508fcf73439079d1fde65908.roa
File: 5953add6c0ead0fc508fcf73439079d1fde65908.roa (raw, json)
Hash identifier: 6p7GAECgfkV6m+ECIl8fKB4QCzUvY+RAvYWCCSPbuhg=
Subject key identifier: A5:7D:FA:1F:28:89:23:05:AB:97:C9:B3:92:2A:F5:97:C0:CE:AB:0E
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 1082F6
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/5953add6c0ead0fc508fcf73439079d1fde65908.roa
Signing time: Wed 24 Mar 2021 14:44:20 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.247.165.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1082102 (0x1082f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=5953add6c0ead0fc508fcf73439079d1fde65908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ee:01:d9:5b:67:37:96:46:b2:06:57:b5:ff:
22:2e:73:e6:b3:96:49:52:91:06:be:06:9a:79:49:
b3:df:00:48:52:bb:f6:f6:ef:7c:bb:90:00:b1:64:
ee:b8:d0:11:5e:66:05:31:f5:91:05:38:96:1e:df:
8b:5b:05:23:64:d7:ff:0b:66:af:da:43:49:06:31:
27:3a:e1:de:60:4d:28:20:3c:6e:24:c0:f8:d1:23:
01:89:01:c0:52:89:9f:cc:a8:22:bb:09:a7:76:cb:
78:bc:3d:d4:0d:b6:a7:c0:13:7d:25:78:08:7c:45:
51:49:cb:cd:f7:b2:d0:96:6d:90:df:f8:f5:d2:98:
59:5e:3b:2a:71:2e:1a:89:27:d0:6a:be:e9:c7:b6:
80:9b:a2:ec:33:99:28:29:8f:0a:bc:f6:a4:ea:ec:
0e:bc:b2:ab:f6:02:2e:62:ce:a9:03:cb:09:42:cd:
77:7d:03:dc:84:06:4b:ce:06:a0:ab:c9:04:c8:27:
6b:13:c7:49:a9:7f:fa:02:20:00:7c:8e:a9:0e:ff:
f6:89:fd:e6:e6:34:c4:1e:59:ce:04:c6:e6:6d:45:
f6:dc:f7:96:dc:33:c2:aa:2a:97:56:15:a8:7a:fc:
49:f8:bd:1b:7f:c4:b9:94:e9:1a:7c:f4:6c:10:7a:
d1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7D:FA:1F:28:89:23:05:AB:97:C9:B3:92:2A:F5:97:C0:CE:AB:0E
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/5953add6c0ead0fc508fcf73439079d1fde65908.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.247.165.0/24
Signature Algorithm: sha256WithRSAEncryption
81:e4:33:d8:a6:6d:ba:3d:be:c5:d1:5b:e0:79:f5:21:82:12:
c8:b9:ae:b0:8d:5e:ce:1b:9b:6c:e4:ea:b1:42:3c:8a:b2:2e:
84:bb:d2:e6:9b:61:47:69:b1:7f:a3:fa:f4:23:db:1e:e9:34:
e3:e7:6c:7e:d5:dd:88:de:4d:88:69:b9:68:cc:ed:70:8d:c5:
f9:27:81:bd:a8:05:59:d9:eb:5c:a0:87:ca:91:da:00:10:e2:
b4:e3:a2:d6:f0:43:0d:ff:5d:d9:c2:32:ba:2e:1f:8c:4e:46:
98:36:46:0f:ab:bd:7d:42:e7:09:8b:1d:88:08:f8:79:35:04:
ac:a9:46:a8:5c:94:c5:4d:9d:bf:41:2d:ba:56:78:a7:2e:de:
cf:a7:0b:08:f5:6b:b9:04:f4:f1:ad:53:46:f5:0d:07:6b:7f:
1a:84:3e:b3:e6:a0:49:85:c5:49:5d:06:34:bc:ce:0f:ac:b1:
46:d1:03:9f:f6:e3:c6:84:60:fd:38:86:32:fd:90:1a:d1:2a:
dc:d7:fe:27:bc:a3:fd:c5:14:a7:84:bf:ca:1a:1a:4e:9a:28:
eb:95:a3:34:99:c2:92:65:8c:bb:27:bf:c5:ca:b5:4c:81:d5:
80:3d:62:a8:24:2c:5b:44:99:90:ac:c2:86:5f:cd:5b:bc:c9:
df:5d:9e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:28 2023 by rpki-client on console-fra.rpki-client.org