Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/5fa77ce0105d354e139f34ef26df1f80acfac67c.roa
File: 5fa77ce0105d354e139f34ef26df1f80acfac67c.roa (raw, json)
Hash identifier: dwN/fDGQmUq3XFBq3UzeJIdKuCsPLOn/OCW3Avqf7b4=
Subject key identifier: CF:77:85:1C:23:B9:91:67:ED:51:CF:BA:BE:D2:31:EC:5C:E9:E4:1E
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 102255
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/5fa77ce0105d354e139f34ef26df1f80acfac67c.roa
Signing time: Wed 24 Mar 2021 14:44:14 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.247.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1057365 (0x102255)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=5fa77ce0105d354e139f34ef26df1f80acfac67c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:da:c1:f9:88:35:34:ab:5c:f1:5e:d7:6a:df:
9d:1f:26:f6:50:b9:65:f9:06:c5:36:eb:4a:a4:c7:
d7:ab:db:2d:25:86:b7:41:76:c4:a8:d4:c6:e5:19:
a4:0e:7a:63:f0:6d:73:46:7f:65:da:c1:b4:a0:6d:
71:90:7c:ec:f6:4e:24:69:4f:33:d8:5b:0f:44:78:
68:d3:cb:2c:28:68:a5:01:70:ad:ef:7f:09:32:df:
4b:3a:33:31:7f:59:5a:3f:ee:66:2c:2d:7f:56:fd:
4e:ff:b0:d5:1c:45:fe:9a:39:a1:53:67:89:0b:2d:
49:c7:ce:80:38:ed:52:dc:06:f5:13:66:2c:4c:d3:
f3:11:1f:39:92:eb:2c:34:ee:55:d9:33:7b:93:a8:
02:db:88:17:3b:77:03:68:fb:af:a0:7d:30:84:ab:
4a:c9:9b:1d:34:0a:a4:56:ca:42:b3:cb:6c:b9:35:
d7:3a:f3:75:0f:da:f7:43:5e:5e:58:36:b4:56:68:
0a:02:e6:b8:5d:fe:fa:8f:30:0c:ac:0e:d2:97:c7:
36:43:b1:d3:be:97:1a:c8:8b:7b:5d:30:e5:25:c5:
71:fd:8b:6c:5b:66:aa:bc:a3:d8:eb:4f:b7:4a:e3:
a0:9c:9a:24:dc:26:e1:51:40:a5:6f:66:e9:f2:79:
09:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:77:85:1C:23:B9:91:67:ED:51:CF:BA:BE:D2:31:EC:5C:E9:E4:1E
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/5fa77ce0105d354e139f34ef26df1f80acfac67c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.247.89.0/24
Signature Algorithm: sha256WithRSAEncryption
74:2b:27:08:c0:10:ca:23:42:49:fe:30:f8:1b:3f:1b:ad:b9:
91:2f:a8:fe:0b:55:b8:33:38:d7:7b:5c:df:fb:d2:7a:2d:b2:
f5:f8:96:ae:a5:68:5f:4c:98:f9:f9:86:60:30:ac:b4:ac:81:
98:3f:2f:b6:56:ee:d3:51:39:02:b5:e1:a6:ee:c4:37:f2:1c:
1c:65:f6:dd:d2:96:d6:8d:5d:56:72:a7:3b:88:e3:dc:8e:21:
84:7e:4d:c1:91:76:ee:48:4a:db:6e:0f:12:80:65:7c:dc:fe:
f0:73:92:1f:78:ae:d3:9d:e3:21:da:20:80:9f:ed:6b:72:27:
cf:23:a1:e3:1e:39:a0:77:01:1b:ce:8d:ff:78:9f:2a:37:b1:
09:fb:7a:5d:a5:a5:3a:83:81:a0:8f:17:e5:05:2d:ce:b7:bc:
88:0b:e3:70:f9:e6:5b:97:ff:7c:8a:76:9c:d6:74:9a:d8:f1:
92:ee:30:76:fb:53:1f:01:39:56:4c:b6:e6:22:99:55:0a:af:
6a:03:61:d0:7d:60:8e:57:7a:6b:0a:e5:e3:af:54:de:ba:ec:
f1:0b:54:60:15:33:6d:53:aa:83:9d:9d:76:64:05:ac:b6:96:
02:11:ab:05:1c:b9:1f:5a:33:ca:94:54:03:cf:1f:8a:6c:7f:
ba:fa:57:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:43 2023 by rpki-client on console-ams.rpki-client.org