Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/9a4890b7b8fcdd7fa5b43ba00c29179c655a089e.roa
File: 9a4890b7b8fcdd7fa5b43ba00c29179c655a089e.roa (raw, json)
Hash identifier: XULmq8RUYm3dSAou1LgR8qeSUJXj9QW3BN/AvEgNUVs=
Subject key identifier: 79:7B:2E:0B:E1:18:46:FC:42:CE:B9:2D:70:62:C9:57:12:69:A4:45
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 10150A
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/9a4890b7b8fcdd7fa5b43ba00c29179c655a089e.roa
Signing time: Wed 24 Mar 2021 14:44:12 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.248.41.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1053962 (0x10150a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=9a4890b7b8fcdd7fa5b43ba00c29179c655a089e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b9:ef:ce:8d:ef:e9:26:6a:7e:80:7f:01:6d:
43:88:9e:95:90:39:90:cb:41:48:75:df:5e:a8:9d:
28:26:73:fb:22:54:7c:61:55:5d:81:09:ea:c4:8f:
a3:8e:6c:a7:a3:51:d8:1e:a0:f9:db:19:85:12:16:
a8:c3:f3:4b:da:bd:c4:71:40:f3:b6:d9:01:5b:5c:
0e:a9:7f:90:24:69:1e:ea:67:2e:17:14:6d:78:83:
6b:53:cb:55:c5:c4:53:a5:36:82:19:c3:ec:0f:09:
e9:c8:2e:89:cb:2b:49:27:ac:36:f1:65:7b:a1:6d:
15:83:6e:9f:8c:fc:09:9f:85:d6:7f:68:b3:54:9d:
af:ef:86:81:48:2f:dc:20:f6:1f:4b:7a:21:29:cd:
f8:1a:09:e2:b6:70:e3:ca:1a:66:9a:c6:00:a8:91:
bd:c6:da:b1:ca:27:70:b1:e5:0d:c2:e5:c4:9b:04:
49:88:c1:c5:78:9f:b5:b2:a7:be:ce:11:48:37:b9:
e2:8d:ee:4e:1a:1c:38:fb:bf:90:8a:57:ee:d5:c4:
f0:c9:6f:a7:77:42:c0:00:84:00:32:b8:c8:2f:cf:
22:9a:3f:91:06:96:6c:3f:28:3c:36:ca:4c:70:51:
87:dd:ab:a2:3e:4a:a2:10:4d:f7:d9:39:cb:d2:0f:
33:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7B:2E:0B:E1:18:46:FC:42:CE:B9:2D:70:62:C9:57:12:69:A4:45
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/9a4890b7b8fcdd7fa5b43ba00c29179c655a089e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.248.41.0/24
Signature Algorithm: sha256WithRSAEncryption
96:96:51:93:b7:8b:44:ca:53:f9:77:c0:07:e1:13:b3:57:bd:
63:4e:3b:67:34:b2:8a:ee:83:ec:92:a0:97:b5:0e:6e:21:20:
66:ac:81:19:32:ae:de:b2:93:c1:6e:d6:35:01:75:47:8c:58:
0e:59:4f:f6:7c:35:d9:b1:69:bf:da:b5:c9:9b:d0:90:94:03:
a1:c7:da:33:8b:5c:05:ce:59:cf:12:44:01:7c:9d:9f:58:ad:
80:ee:67:dc:67:d2:f7:bf:22:86:81:0a:b2:5c:80:ae:03:68:
74:ae:4b:81:0d:23:61:92:1f:56:69:d0:ca:bd:da:03:37:e7:
17:b7:54:e7:f7:7b:d1:ef:c6:ac:2e:69:e7:d5:ca:e7:53:f9:
f6:77:09:b1:58:b9:54:32:db:b6:80:20:da:7e:59:fd:0e:5c:
20:e8:14:95:9b:67:47:cf:9a:3b:81:9b:ff:3c:b6:f2:ab:38:
2a:49:c3:c1:c1:21:49:d8:ba:5c:95:08:f8:9b:18:7c:fa:59:
2c:95:3e:15:e0:5e:e3:83:d9:c7:9b:e7:a8:fc:05:5a:50:ac:
96:78:da:38:f1:5c:ec:bc:8a:6e:94:cd:da:e5:85:b1:cf:4f:
58:79:e6:f2:7f:b7:7a:47:c5:78:71:8b:7b:c1:a2:12:a6:b0:
71:aa:d0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:43 2023 by rpki-client on console-ams.rpki-client.org