Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/a06e5be87e73c3b658f98b3929212784cca84aad.roa
File: a06e5be87e73c3b658f98b3929212784cca84aad.roa (raw, json)
Hash identifier: 0RDnUENSbDDv0R0rOiB+1UTCuv/TXYqxRMTr/WB+nRw=
Subject key identifier: 94:12:45:A1:A6:CF:C0:64:41:A6:7F:F6:DE:36:52:C5:FD:6D:94:77
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 10830F
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/a06e5be87e73c3b658f98b3929212784cca84aad.roa
Signing time: Wed 24 Mar 2021 14:44:20 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.247.166.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1082127 (0x10830f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=a06e5be87e73c3b658f98b3929212784cca84aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d4:ab:56:7e:38:6a:82:65:07:62:6a:a0:68:
98:8e:fc:f6:65:85:36:dd:85:5a:d0:ec:8e:20:52:
c5:a4:be:27:f0:ff:f0:cb:76:61:40:6a:1a:7c:ea:
93:68:32:f7:fc:77:97:5b:49:e3:ed:99:53:92:37:
a6:d8:76:9c:0d:35:f3:a7:07:70:09:2d:d4:1d:81:
0b:5a:23:fd:d3:c0:4c:be:0b:bf:26:0e:be:d2:80:
b0:c3:4c:96:26:54:03:c1:6c:76:d1:bd:4a:14:a0:
3b:11:83:96:83:b5:8b:07:cb:96:58:f8:d1:ec:35:
e6:67:c5:87:5a:b3:d9:3d:97:42:3d:fd:2c:57:fd:
4e:9b:32:ba:0b:f0:25:34:e4:dd:52:c6:c2:16:23:
ee:2a:e9:df:0b:26:97:2c:ba:55:2a:9c:7d:22:f5:
4b:be:06:0e:e5:e9:02:99:7f:39:10:d6:25:40:7d:
8e:4b:9b:f0:41:f6:11:5f:20:b5:39:35:36:93:4f:
02:54:20:59:0e:31:72:3a:34:4d:09:6e:48:75:5e:
2e:69:cc:96:ff:f6:74:b1:1f:21:db:07:24:30:a1:
04:8b:8b:a3:c4:47:18:7b:46:3b:27:2a:c9:81:19:
90:c7:83:31:03:35:98:5d:72:dd:92:db:f2:64:c1:
ef:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:12:45:A1:A6:CF:C0:64:41:A6:7F:F6:DE:36:52:C5:FD:6D:94:77
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/a06e5be87e73c3b658f98b3929212784cca84aad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.247.166.0/24
Signature Algorithm: sha256WithRSAEncryption
19:79:76:80:d9:cd:23:6c:8f:88:5c:1c:f9:f4:97:9f:59:85:
89:98:df:1a:bd:b1:b5:f5:f4:52:d5:fe:d0:09:d0:13:49:37:
56:4f:4f:7b:04:31:fa:16:b6:2f:17:14:85:88:f5:2e:23:51:
56:4f:8f:97:38:2a:f7:85:b6:10:cc:be:c1:fb:fe:f4:83:ae:
51:64:80:de:5e:30:4c:79:00:67:40:e1:a1:d4:0c:98:47:96:
4a:0e:ad:ef:c2:05:3e:08:cb:d1:f8:8c:30:82:c4:d0:c6:24:
30:d9:9a:ae:1f:53:cd:a2:94:58:ff:ad:5f:7c:73:2d:63:3c:
f9:c7:f2:0d:02:5f:95:6c:b6:74:64:28:ca:56:4f:58:19:ed:
ba:5d:e9:38:e6:60:36:f5:b7:67:f9:39:0e:1f:ad:c9:dd:55:
a6:82:b8:6c:9a:81:00:7b:ed:85:db:24:6a:d6:05:49:31:de:
23:0c:27:ec:20:45:cc:cc:94:2a:08:6c:7b:d5:b0:d2:e0:8b:
4e:1e:c0:21:49:e2:17:c5:39:01:c1:cb:2b:6a:91:60:18:e9:
6e:bb:5d:2a:01:30:06:b6:cf:37:d0:78:d5:b6:a0:c4:bb:5d:
99:80:0f:10:e6:86:40:75:0f:d6:15:f3:0b:9a:05:0a:24:0a:
bf:a8:4d:c1
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEIMPMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
MGE0ZmE0Y2FmNDgwY2I3NmMwYmM0YWVmYmY2MzNmOGNlM2IxZjkwHhcNMjEwMzI0
MTQ0MzQ0WhcNMjYwMzI0MTQ0MzQ0WjAzMTEwLwYDVQQDEyhhMDZlNWJlODdlNzNj
M2I2NThmOThiMzkyOTIxMjc4NGNjYTg0YWFkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAn9SrVn44aoJlB2JqoGiYjvz2ZYU23YVa0OyOIFLFpL4n8P/w
y3ZhQGoafOqTaDL3/HeXW0nj7ZlTkjem2HacDTXzpwdwCS3UHYELWiP908BMvgu/
Jg6+0oCww0yWJlQDwWx20b1KFKA7EYOWg7WLB8uWWPjR7DXmZ8WHWrPZPZdCPf0s
V/1OmzK6C/AlNOTdUsbCFiPuKunfCyaXLLpVKpx9IvVLvgYO5ekCmX85ENYlQH2O
S5vwQfYRXyC1OTU2k08CVCBZDjFyOjRNCW5IdV4uacyW//Z0sR8h2wckMKEEi4uj
xEcYe0Y7JyrJgRmQx4MxAzWYXXLdktvyZMHvlwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJQSRaGmz8BkQaZ/9t42UsX9bZR3MB8GA1UdIwQYMBaAFEixvQ/Kc7iuYUnO
JUbMDxXgfnaDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDkwYTRm
YTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFmOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODQyYjYzM2YtODBiOC00ZjRjLWJlOTgtNjU2ZDZm
OWE3ZjM4L2EwNmU1YmU4N2U3M2MzYjY1OGY5OGIzOTI5MjEyNzg0Y2NhODRhYWQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NDJiNjMzZi04MGI4LTRmNGMtYmU5OC02NTZk
NmY5YTdmMzgvNDkwYTRmYTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFm
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIT3pjANBgkqhkiG9w0BAQsFAAOCAQEAGXl2gNnNI2yPiFwc
+fSXn1mFiZjfGr2xtfX0UtX+0AnQE0k3Vk9PewQx+ha2LxcUhYj1LiNRVk+Plzgq
94W2EMy+wfv+9IOuUWSA3l4wTHkAZ0DhodQMmEeWSg6t78IFPgjL0fiMMILE0MYk
MNmarh9TzaKUWP+tX3xzLWM8+cfyDQJflWy2dGQoylZPWBntul3pOOZgNvW3Z/k5
Dh+tyd1VpoK4bJqBAHvthdskatYFSTHeIwwn7CBFzMyUKghse9Ww0uCLTh7AIUni
F8U5AcHLK2qRYBjpbrtdKgEwBrbPN9B41bagxLtdmYAPEOaGQHUP1hXzC5oFCiQK
v6hNwQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:29 2023 by rpki-client on console-fra.rpki-client.org