Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/99228f66ea85bcd3d32c69e0f161378aa57ef0fb.roa
File: 99228f66ea85bcd3d32c69e0f161378aa57ef0fb.roa (raw, json)
Hash identifier: aXeRhzj1GJXsaoIHf4lMGaYwHC3h01AAI6svdvaMkeU=
Subject key identifier: D9:8D:99:5D:A2:DD:6A:46:9D:1D:DA:85:17:A1:7B:4C:65:E4:07:31
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 103FFA
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/99228f66ea85bcd3d32c69e0f161378aa57ef0fb.roa
Signing time: Wed 24 Mar 2021 14:44:15 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.247.224.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1064954 (0x103ffa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=99228f66ea85bcd3d32c69e0f161378aa57ef0fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ac:63:04:66:d5:39:36:75:a2:b4:36:fb:79:
29:32:1b:42:7b:c3:b1:6c:0e:82:60:58:5a:c6:ab:
c0:96:7f:d4:58:08:99:45:d6:28:af:3a:65:1f:14:
1e:49:f6:65:54:f9:8f:4f:a1:6f:97:ad:69:cf:19:
82:3a:a7:22:42:88:7c:d7:b6:cd:18:14:e8:11:3e:
b1:da:b4:02:9f:9c:da:02:77:f0:ac:33:1e:3f:fd:
25:1e:16:cf:d4:1a:ab:a1:d6:49:fc:0a:d1:48:17:
fa:10:b4:5e:8d:3b:b1:0b:63:35:d8:fe:7d:38:a1:
3e:9d:60:09:f9:5e:60:a6:a1:7a:ba:ac:7a:c9:80:
a4:d8:b2:ed:29:8e:e2:15:bf:ea:20:f3:1d:4a:8f:
6f:7b:c9:73:36:b0:c5:e0:4f:ca:f4:3a:45:f6:b8:
1b:86:91:73:c2:c2:44:a9:9b:ec:d6:29:27:25:91:
5e:df:4b:45:70:25:f2:35:98:9d:41:2b:fb:2e:f6:
00:0c:08:dc:76:97:29:8e:cc:4c:fe:7b:fe:e2:83:
e4:95:75:24:29:09:d9:ba:b5:ef:ef:bc:5e:2e:09:
7d:85:b1:81:06:22:43:57:4c:07:79:d4:ec:ba:f1:
91:a3:a4:53:c0:9b:22:ef:6a:a3:7a:b6:b4:3c:56:
8f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8D:99:5D:A2:DD:6A:46:9D:1D:DA:85:17:A1:7B:4C:65:E4:07:31
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/99228f66ea85bcd3d32c69e0f161378aa57ef0fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.247.224.0/24
Signature Algorithm: sha256WithRSAEncryption
11:ec:43:11:25:ce:85:5f:e9:56:94:67:a3:65:df:50:45:50:
70:d3:ab:a5:dd:97:06:74:f5:87:56:71:2a:65:81:69:4f:19:
c1:60:33:1e:0f:10:38:a7:ac:e9:6a:82:a6:d2:b9:34:99:ef:
04:37:76:96:95:6d:ae:8d:db:38:7d:d2:c5:85:e3:0d:6f:bb:
65:11:6a:8a:cb:5d:1f:74:26:87:3f:de:41:e9:eb:ca:8d:3f:
a4:e5:19:63:b0:c4:40:6e:ee:a5:62:e7:53:c9:3e:7f:cf:f3:
43:ed:25:6a:9a:f4:69:a1:17:1f:e2:43:58:94:08:2a:be:14:
56:ad:f6:c7:44:9c:ac:84:42:da:36:d3:5a:c9:c1:27:97:f1:
01:21:28:b1:0c:5f:d5:87:a8:1a:51:f7:4c:f1:b8:9e:70:33:
68:96:05:33:cf:9e:80:09:ce:0c:33:5a:bd:9a:20:b6:55:47:
f6:df:86:5d:05:9e:9d:10:73:2a:10:76:55:6c:70:34:f7:e2:
75:45:0d:2e:49:53:b4:5a:50:83:49:d0:20:1a:d2:06:18:70:
fc:17:12:c5:1e:57:72:c5:23:ab:28:c3:21:8d:28:fc:55:1b:
9e:44:a2:65:c8:0c:e2:4b:2b:5f:6e:12:0f:f8:73:c7:62:ab:
8e:76:7b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:43 2023 by rpki-client on console-ams.rpki-client.org