Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/8d1173c88b0643b52696625b7af3957cafa72753.roa
File: 8d1173c88b0643b52696625b7af3957cafa72753.roa (raw, json)
Hash identifier: vw+gH9hPGgzcaBcmlZ1ECHmUvrBT0U1XnOjbgyPYhn8=
Subject key identifier: F3:AB:F7:E2:49:52:5E:CA:02:28:F3:60:67:EE:EC:87:FD:51:7E:62
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 10CBF4
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/8d1173c88b0643b52696625b7af3957cafa72753.roa
Signing time: Wed 24 Mar 2021 14:44:25 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.248.223.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1100788 (0x10cbf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=8d1173c88b0643b52696625b7af3957cafa72753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:67:97:20:9e:6c:e5:52:a3:26:a0:64:c5:bf:
81:60:86:3b:95:32:5b:65:34:bd:f4:4a:88:9c:17:
c9:31:cd:37:94:4c:dc:42:1f:c1:2d:fe:94:bf:77:
48:3e:b3:0a:e3:b0:42:4b:ac:86:db:c1:e5:27:49:
9a:53:57:6e:95:ea:a9:1b:a5:fe:12:11:78:77:bd:
4e:14:c1:e3:7c:2c:8d:f5:53:bc:8d:46:72:11:96:
48:b8:57:48:9c:78:c6:90:3f:5e:dd:8a:72:f0:00:
14:81:1c:61:4b:f1:b9:c9:00:46:73:e5:7a:fb:4e:
45:83:23:e9:1f:9b:6e:a0:45:b0:66:f2:15:92:c1:
0f:6f:17:c3:68:b8:f0:02:b2:51:71:31:ac:3b:b2:
d5:7b:62:bb:26:db:71:db:01:b3:48:0a:c4:fb:6d:
30:5f:92:b5:31:97:e0:15:92:ab:4f:f7:28:c6:5d:
7a:03:47:4c:b9:d4:1f:a1:96:60:78:37:36:d5:0e:
b5:2e:4a:19:c0:a3:0b:66:cb:fe:67:a2:25:62:ae:
82:29:27:bc:04:80:0d:f0:95:fd:dd:6e:fe:41:e9:
d1:0f:21:40:fb:54:08:76:3d:41:53:b0:69:e1:2b:
40:d2:17:aa:bc:2e:5c:d4:f3:44:96:14:b9:92:47:
ff:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AB:F7:E2:49:52:5E:CA:02:28:F3:60:67:EE:EC:87:FD:51:7E:62
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/8d1173c88b0643b52696625b7af3957cafa72753.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.248.223.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:43:31:81:d1:0f:fd:2d:a6:a6:f9:f6:04:93:22:9b:dc:61:
41:2d:db:b5:36:6c:de:54:dc:cb:e0:74:1b:d8:33:d0:45:6a:
96:81:04:0b:bd:06:c5:79:eb:a2:aa:73:a2:b0:ce:d3:02:f1:
ae:5b:65:f7:f9:a8:3b:d5:77:68:e0:20:5d:c7:f2:66:4f:68:
cf:90:7a:b3:ab:00:c2:0b:da:4a:23:67:73:39:fc:a7:13:5c:
c0:03:25:67:60:02:47:27:47:c7:0e:07:91:6f:05:d0:fb:b8:
18:64:31:a5:cf:67:ee:a1:55:c6:9a:56:ac:57:35:d5:84:c7:
92:2b:97:bc:2d:21:e4:2c:66:58:cb:83:a4:05:1a:87:7b:19:
41:52:75:4e:76:af:5d:c3:7d:1e:ea:92:6f:cc:c7:90:f0:5a:
67:bb:56:f9:a5:5f:9f:3c:c0:4d:3b:41:cf:2c:7d:53:aa:38:
df:3b:06:62:45:dd:2f:4f:ae:0b:a6:87:8e:f2:fa:22:ff:29:
71:b6:da:eb:87:61:a6:37:fb:90:1c:3b:41:91:57:a2:11:ec:
6f:48:87:69:0c:53:ff:17:b5:f0:b1:15:b4:49:d1:99:a0:49:
87:bd:1e:53:a3:1c:01:97:2c:aa:ca:3c:a2:11:25:44:f0:f8:
ce:87:28:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:43 2023 by rpki-client on console-ams.rpki-client.org