Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/90bb21a4682fe92d82e3e408b4838ee399635e03.roa
File: 90bb21a4682fe92d82e3e408b4838ee399635e03.roa (raw, json)
Hash identifier: s8H1FIDT9sFnXqcs0PToReSMRX4sbMNVLiLvnEzO47Q=
Subject key identifier: 02:6D:8F:E8:1C:7D:13:DD:D4:11:A0:C5:9D:DF:01:34:05:CA:A6:85
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 1050FC
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/90bb21a4682fe92d82e3e408b4838ee399635e03.roa
Signing time: Wed 24 Mar 2021 14:44:16 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.248.226.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1069308 (0x1050fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=90bb21a4682fe92d82e3e408b4838ee399635e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:43:70:55:f3:fa:57:b9:d8:2d:cb:b9:18:4b:
6d:a3:bd:07:89:e4:18:37:e8:c1:14:ce:4f:c4:4c:
7f:27:9b:fa:15:dd:b6:38:d9:72:f8:0c:73:41:45:
07:fd:86:df:c3:92:c1:d2:3a:44:92:2d:01:31:f0:
63:b1:70:17:3b:e0:1a:0c:85:df:55:57:45:40:88:
af:c5:b0:a5:09:0b:b6:ac:cc:5b:ac:c3:ad:32:10:
60:b0:9f:30:1a:3a:1c:20:83:1d:ae:47:b7:98:06:
94:04:6c:ab:0d:37:69:96:10:58:d2:c9:9f:a4:89:
11:fc:90:93:6d:a3:85:b2:e2:87:25:08:76:75:ed:
f7:51:a4:05:b5:54:e3:f8:76:a8:9c:6e:a2:f6:3d:
d2:d7:e9:7f:cb:35:51:10:79:67:a9:d3:54:61:a5:
8c:23:60:06:45:26:39:01:ce:d7:0d:53:8c:2a:9d:
d7:03:b8:46:a2:2a:5f:b4:43:1e:ae:65:7e:10:53:
d3:3d:07:dc:ed:7e:39:42:b8:e1:d2:cb:52:28:9e:
e8:63:be:3f:ed:33:8d:2f:3d:7b:9f:7e:3a:20:d6:
c0:30:92:da:45:c2:dc:77:3b:cf:9e:04:a2:f3:75:
39:de:ca:cd:7c:17:80:1a:45:3c:08:30:f0:3a:ef:
e9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6D:8F:E8:1C:7D:13:DD:D4:11:A0:C5:9D:DF:01:34:05:CA:A6:85
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/90bb21a4682fe92d82e3e408b4838ee399635e03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.248.226.0/24
Signature Algorithm: sha256WithRSAEncryption
83:2d:b9:f8:cc:6a:5f:e0:13:e0:78:5a:99:ce:97:b8:36:d6:
1e:03:31:ec:e6:a1:f8:a9:0e:80:d7:19:5b:59:03:c8:54:1a:
97:0b:2b:f8:3d:68:bc:a2:91:f6:da:ca:49:1d:bf:c0:51:10:
72:07:a5:59:84:fb:2e:13:f1:3d:ae:ec:6b:aa:10:ce:ab:8c:
07:d9:45:0a:03:67:88:62:48:63:25:9f:08:ee:85:4e:1d:b8:
14:1a:c7:e8:ff:45:31:2e:50:0d:64:fe:69:3f:7e:72:75:a3:
2d:f4:94:0a:68:8c:6b:9c:6e:68:42:7a:44:b4:54:a0:7e:56:
cf:a7:86:fe:8b:fc:fc:46:0d:7a:cc:6f:7c:e1:a9:c9:9c:e4:
f9:86:f1:d7:fc:f7:4d:d1:ee:8a:3b:87:8d:9b:ca:02:b3:43:
7a:55:a1:86:1c:31:40:67:ea:96:65:38:f4:90:f8:89:ef:a8:
ac:50:3f:2c:d3:39:0d:6c:da:4f:94:aa:64:46:dc:da:7c:e2:
1b:d7:ef:19:9a:9c:a1:af:d3:04:dd:d4:1e:c3:4b:f5:c2:28:
77:02:17:a7:fa:ce:a7:4c:4c:a8:ce:2e:c5:5f:9d:ed:71:0e:
a4:0a:1c:ee:ad:b1:4b:80:12:f0:d0:00:3f:5e:f4:0a:a5:2a:
93:e1:1b:62
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEFD8MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
MGE0ZmE0Y2FmNDgwY2I3NmMwYmM0YWVmYmY2MzNmOGNlM2IxZjkwHhcNMjEwMzI0
MTQ0MzQ0WhcNMjYwMzI0MTQ0MzQ0WjAzMTEwLwYDVQQDEyg5MGJiMjFhNDY4MmZl
OTJkODJlM2U0MDhiNDgzOGVlMzk5NjM1ZTAzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA9UNwVfP6V7nYLcu5GEtto70HieQYN+jBFM5PxEx/J5v6Fd22
ONly+AxzQUUH/Ybfw5LB0jpEki0BMfBjsXAXO+AaDIXfVVdFQIivxbClCQu2rMxb
rMOtMhBgsJ8wGjocIIMdrke3mAaUBGyrDTdplhBY0smfpIkR/JCTbaOFsuKHJQh2
de33UaQFtVTj+HaonG6i9j3S1+l/yzVREHlnqdNUYaWMI2AGRSY5Ac7XDVOMKp3X
A7hGoipftEMermV+EFPTPQfc7X45Qrjh0stSKJ7oY74/7TONLz17n346INbAMJLa
RcLcdzvPngSi83U53srNfBeAGkU8CDDwOu/pxQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAJtj+gcfRPd1BGgxZ3fATQFyqaFMB8GA1UdIwQYMBaAFEixvQ/Kc7iuYUnO
JUbMDxXgfnaDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDkwYTRm
YTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFmOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODQyYjYzM2YtODBiOC00ZjRjLWJlOTgtNjU2ZDZm
OWE3ZjM4LzkwYmIyMWE0NjgyZmU5MmQ4MmUzZTQwOGI0ODM4ZWUzOTk2MzVlMDMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NDJiNjMzZi04MGI4LTRmNGMtYmU5OC02NTZk
NmY5YTdmMzgvNDkwYTRmYTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFm
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIT44jANBgkqhkiG9w0BAQsFAAOCAQEAgy25+MxqX+AT4Hha
mc6XuDbWHgMx7Oah+KkOgNcZW1kDyFQalwsr+D1ovKKR9trKSR2/wFEQcgelWYT7
LhPxPa7sa6oQzquMB9lFCgNniGJIYyWfCO6FTh24FBrH6P9FMS5QDWT+aT9+cnWj
LfSUCmiMa5xuaEJ6RLRUoH5Wz6eG/ov8/EYNesxvfOGpyZzk+Ybx1/z3TdHuijuH
jZvKArNDelWhhhwxQGfqlmU49JD4ie+orFA/LNM5DWzaT5SqZEbc2nziG9fvGZqc
oa/TBN3UHsNL9cIodwIXp/rOp0xMqM4uxV+d7XEOpAoc7q2xS4AS8NAAP170CqUq
k+EbYg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:43 2023 by rpki-client on console-ams.rpki-client.org