Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/5d53944e10dd02bbd9fce606d0971469078025c7.roa
File: 5d53944e10dd02bbd9fce606d0971469078025c7.roa (raw, json)
Hash identifier: LTTgWT+5VRXxSstW+zza8R35Ra+p9hRMZzEgqVj6e0w=
Subject key identifier: 7C:47:55:8C:8F:B5:EE:93:F2:44:F0:32:20:C7:1C:6C:C9:9E:0A:45
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 100040
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/5d53944e10dd02bbd9fce606d0971469078025c7.roa
Signing time: Wed 24 Mar 2021 14:44:11 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.247.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1048640 (0x100040)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=5d53944e10dd02bbd9fce606d0971469078025c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:da:eb:d6:ad:6c:31:8f:0b:23:e1:a6:5a:96:
17:b4:23:45:e9:63:2c:01:e9:c5:b5:5a:ff:87:2e:
15:24:56:89:06:33:5d:00:8e:12:d9:4a:81:52:88:
fa:95:0a:64:fc:2f:50:0f:df:48:cb:0c:ee:58:7c:
dd:4b:8f:d7:cc:49:54:24:69:0b:35:33:8c:c8:a7:
ff:67:97:bc:1b:b0:ca:97:5f:3b:b4:3a:fd:e0:6d:
49:a9:5c:fb:3a:a2:da:ee:56:b2:56:f9:bc:6d:35:
b8:e0:59:f3:2a:c1:30:85:9f:ed:bc:6d:8d:d6:c5:
c9:ac:47:6f:d4:76:09:23:ef:17:2b:e1:08:c2:99:
5c:53:a9:71:f0:a4:e1:ac:51:a1:50:dd:c3:04:18:
37:ae:82:3b:38:79:c7:aa:8f:1f:e8:bb:36:aa:7a:
37:48:31:8f:d6:19:1a:94:0b:52:cd:95:63:3d:b6:
5f:09:9c:71:a9:79:0a:93:e8:17:14:71:fc:84:13:
32:f6:a4:1d:11:23:79:d2:2c:aa:b1:71:d7:1b:76:
76:a8:7d:69:65:6d:7a:bf:d4:05:86:4f:86:cf:8f:
80:38:55:5a:82:cc:e9:15:1a:66:8c:d7:6e:e1:03:
2d:f9:84:9a:7f:3d:b1:74:3e:85:10:a5:7d:cd:15:
74:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:47:55:8C:8F:B5:EE:93:F2:44:F0:32:20:C7:1C:6C:C9:9E:0A:45
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/5d53944e10dd02bbd9fce606d0971469078025c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.247.230.0/24
Signature Algorithm: sha256WithRSAEncryption
97:30:20:4c:b8:8f:ac:51:35:80:16:40:ed:f6:7f:02:78:8d:
8f:3c:da:c4:ed:be:99:e9:e4:c8:3d:2d:af:48:48:8f:6e:c2:
2c:e9:3e:52:e7:b2:87:8a:47:cd:60:ff:7f:11:10:25:44:ad:
0b:0c:ee:ac:72:5e:79:57:ab:4f:b2:83:6b:f3:c9:8b:82:b2:
81:91:6b:b1:31:35:75:dd:15:00:f3:80:cf:4e:6a:cb:6e:1e:
63:ca:73:e3:5d:86:f4:a3:8c:39:65:0a:ac:6c:a6:14:a4:0d:
0b:fb:d6:bc:8c:d4:b8:1a:54:4a:94:f1:9d:63:03:3e:56:37:
c7:71:12:74:4e:40:8a:da:ba:48:42:ad:2a:ad:f0:34:ee:6d:
14:6b:fb:2a:cb:fe:4c:94:e8:6b:ac:21:c3:da:09:97:c6:09:
6c:95:9a:19:65:ab:b0:90:92:6d:8c:67:ac:49:0b:b8:dc:2d:
21:f1:ab:ed:cf:9a:5c:1f:92:6e:57:a1:ce:0b:03:bf:2f:db:
fb:84:df:bc:28:91:c5:c6:db:9c:cd:32:b6:cb:ad:8a:45:6e:
3d:86:7a:e4:4f:96:a0:ae:3d:0b:5f:4f:89:b0:8a:48:73:c8:
36:28:d9:d8:2c:fd:62:f3:56:5d:0f:a8:07:35:92:0b:c0:5c:
24:2b:a5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:43 2023 by rpki-client on console-ams.rpki-client.org