Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/9cff1e02f8259a578c702f5955385a0b08d666ea.roa
File: 9cff1e02f8259a578c702f5955385a0b08d666ea.roa (raw, json)
Hash identifier: Ijmx5obmHYGe61boQf4FyvBf/FIPLbaE3M+Hiil+4/g=
Subject key identifier: 56:0E:98:D7:36:FE:06:36:E1:7F:2A:CD:A1:38:CE:A4:7F:02:D2:30
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 0FE371
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/9cff1e02f8259a578c702f5955385a0b08d666ea.roa
Signing time: Wed 24 Mar 2021 14:44:08 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.248.95.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1041265 (0xfe371)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=9cff1e02f8259a578c702f5955385a0b08d666ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bc:d2:2f:83:03:9e:70:dc:80:ff:83:9d:7c:
93:38:9f:6e:fe:97:cd:9a:66:b3:28:a4:73:3b:17:
26:42:7f:f8:4c:a0:f0:93:de:09:cd:d1:ea:b1:34:
53:0e:10:a0:cd:9c:c4:a4:ce:ca:a0:3c:53:18:da:
f1:b5:0a:36:7c:07:1e:55:8f:8f:e2:93:5c:60:62:
ea:61:08:d2:ca:41:0a:b5:f0:74:e8:1c:34:dd:9e:
3c:8a:59:e4:9e:c8:19:2c:cc:59:ac:1a:58:a8:b3:
6b:3a:d2:d7:22:e9:e4:de:5d:51:cf:6d:f0:82:8a:
ad:97:22:4a:44:4c:7d:08:f3:3a:aa:d8:2b:bf:90:
db:96:a5:37:ee:b2:92:f3:82:d5:82:e7:2d:ac:0a:
09:31:7f:11:cb:a1:ed:72:f9:e5:62:b1:83:4b:2b:
cc:70:a3:d3:c4:34:29:20:b7:2c:af:ce:fd:9c:9b:
80:51:91:de:51:f0:ca:bf:ec:be:dd:b7:90:68:c8:
63:22:77:ca:f6:77:6c:60:62:5b:e4:5b:60:b5:f0:
76:f0:1e:56:34:1f:35:19:21:a5:c6:2d:bf:04:79:
38:81:11:84:0a:91:ba:09:35:7e:17:f8:74:02:0b:
62:a1:53:01:08:e3:32:5b:bb:25:e7:26:7b:30:5b:
ea:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0E:98:D7:36:FE:06:36:E1:7F:2A:CD:A1:38:CE:A4:7F:02:D2:30
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/9cff1e02f8259a578c702f5955385a0b08d666ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.248.95.0/24
Signature Algorithm: sha256WithRSAEncryption
39:c4:4e:a9:51:c7:56:42:fc:81:87:62:40:08:8b:7b:b2:65:
0f:35:39:de:7c:a2:c7:b7:3e:e8:ea:45:4a:ce:fe:a4:b1:cf:
4e:df:88:51:bb:df:30:8b:3e:52:ae:0c:5f:c8:61:eb:28:7c:
ff:93:45:d5:95:27:48:fc:c6:00:2e:dd:66:1f:02:f8:d6:c6:
81:d6:74:7f:e7:26:58:6e:26:42:32:6d:09:c0:db:24:e5:dc:
56:b6:01:e0:8d:74:c5:df:95:1f:9b:81:c8:f4:47:ca:dd:f3:
11:e7:da:fb:95:85:2a:75:b9:20:66:65:ef:d7:a7:4a:9e:b0:
36:ce:bd:92:fb:2d:94:1d:19:2f:5a:19:91:32:f9:d3:e4:c5:
de:22:e3:4c:25:34:3e:32:10:1e:0c:e1:2e:15:52:42:98:6c:
cf:a5:47:8a:d2:06:07:66:3f:7f:81:88:7c:3c:04:6c:1d:a2:
dd:bf:7e:8f:7d:21:76:b9:09:e6:63:f6:8a:c8:bd:42:c0:e6:
04:4b:1a:72:24:fb:6d:63:d6:c9:d2:07:fa:20:cd:76:27:20:
6e:c1:32:b7:7e:17:ee:75:ed:0c:7b:d9:f0:9f:fe:05:25:da:
ec:a1:ff:35:a9:88:39:ed:aa:bc:73:5b:6a:62:87:b8:50:b7:
28:bb:a1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:43 2023 by rpki-client on console-ams.rpki-client.org