Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/9ef2a4b44e60ac4d03fcf0bc7ef2e998e067b99e.roa
File: 9ef2a4b44e60ac4d03fcf0bc7ef2e998e067b99e.roa (raw, json)
Hash identifier: uNtIm37pFg0iC3UnmICRKXpyKo87taJccFWHGLpVR7A=
Subject key identifier: 44:66:47:CE:36:94:6B:5A:7D:7A:61:50:BB:35:7B:A5:75:03:85:AF
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 0F9D54
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/9ef2a4b44e60ac4d03fcf0bc7ef2e998e067b99e.roa
Signing time: Wed 24 Mar 2021 14:44:01 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.248.194.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1023316 (0xf9d54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=9ef2a4b44e60ac4d03fcf0bc7ef2e998e067b99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4b:11:7e:1a:46:50:c2:d1:96:82:05:9c:b5:
cc:05:b9:b0:42:75:b7:72:f7:b7:78:b4:3e:0e:fd:
dd:d5:1c:2d:a8:bd:ad:0c:38:12:63:b5:fb:5e:d9:
6b:a1:37:2d:80:e1:b7:3a:71:36:1d:1f:ea:f8:cc:
75:5a:e9:2b:7b:00:64:d3:da:bb:5f:e8:7a:76:4f:
d8:30:a1:0a:92:b6:75:87:2f:d8:39:ba:79:b3:0f:
db:26:27:34:3d:06:0c:36:91:43:df:ce:32:11:65:
f0:b7:86:8b:57:84:e0:fc:01:71:30:ef:d8:23:73:
94:79:59:6c:f3:32:fe:82:cd:7d:11:bd:11:6a:12:
49:82:6c:d6:1e:4d:d9:4b:bd:7e:09:f9:66:b9:96:
07:99:d8:b6:54:db:56:31:19:af:19:e6:32:a1:80:
0c:b1:76:d9:ec:f9:f2:a2:e2:bd:de:e0:bc:ae:a9:
96:d3:1b:d8:4b:7b:b0:dd:fa:7a:ed:4b:53:4c:0d:
78:0a:35:b0:c6:cb:92:9e:7a:5f:22:d1:b1:12:d0:
10:1d:89:ce:0f:5c:f2:8f:dc:fb:87:0b:49:95:b2:
a7:9f:47:b4:eb:c9:d7:68:09:4d:61:c3:ca:69:a5:
f1:32:28:1d:f2:f0:05:49:2f:ba:5b:e9:26:9d:0c:
32:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:66:47:CE:36:94:6B:5A:7D:7A:61:50:BB:35:7B:A5:75:03:85:AF
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/9ef2a4b44e60ac4d03fcf0bc7ef2e998e067b99e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.248.194.0/24
Signature Algorithm: sha256WithRSAEncryption
98:e4:b5:7d:a1:fe:dd:50:e6:b2:0c:77:11:fb:0a:08:28:bf:
7b:5e:8b:73:70:69:b2:be:1f:23:84:03:28:5d:6a:7c:6b:c0:
14:1a:52:83:f4:dd:a4:7e:85:2a:35:31:96:60:d4:83:86:bb:
76:e3:69:44:57:db:7b:6b:3a:46:58:66:b9:16:a9:d7:9f:16:
b2:65:dd:df:39:d7:21:a0:02:6e:63:ae:2b:5a:48:aa:bb:aa:
75:59:25:55:ba:bf:ed:49:ae:9f:0d:2c:7d:96:d8:66:7d:73:
3e:87:38:0f:1c:b2:79:0c:9f:18:97:c9:02:1d:8a:e0:1f:27:
0a:60:3d:7c:2a:1f:b6:bc:82:dc:5a:05:ed:11:ee:8c:a8:52:
ac:5d:12:43:4b:5f:7d:14:2c:47:9c:b5:ad:59:5c:aa:7d:f2:
c9:9d:01:65:0d:89:ad:c8:8b:4a:6a:66:3b:a6:29:ee:c3:a7:
42:41:40:44:d8:c9:9c:70:b3:3b:4d:10:42:b9:a2:68:92:d3:
f3:24:03:58:41:e9:de:0f:44:33:4a:11:04:3f:6f:22:e9:e6:
77:45:81:b3:bb:56:39:9a:7c:e2:fb:90:ff:f7:cd:b5:3f:4d:
11:29:6a:83:f6:5c:59:75:06:8c:62:43:d5:0f:c5:a7:56:89:
31:11:be:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:43 2023 by rpki-client on console-ams.rpki-client.org