Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/a1bd0482b6a7f1e229f1c427fc643f36c47f53a2.roa
File: a1bd0482b6a7f1e229f1c427fc643f36c47f53a2.roa (raw, json)
Hash identifier: uUDfG7TpT8wyAEQsFCXkupPYcFao8GfBmel0MyLWS4o=
Subject key identifier: F8:51:42:2E:FF:28:17:23:36:8C:A1:86:32:E2:CC:85:C9:53:FE:DA
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 106D0D
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/a1bd0482b6a7f1e229f1c427fc643f36c47f53a2.roa
Signing time: Wed 24 Mar 2021 14:44:18 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.248.221.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1076493 (0x106d0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=a1bd0482b6a7f1e229f1c427fc643f36c47f53a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c5:89:8d:b2:be:4c:85:6c:be:4e:45:0d:93:
db:2d:f0:e2:6a:41:98:d2:f1:97:9f:ff:c3:d4:23:
a5:ad:32:cb:b3:89:7c:05:e3:d1:d1:8a:2b:aa:82:
a3:03:50:bc:4b:4d:af:24:b3:8e:89:ed:3c:aa:84:
11:15:7d:a7:a2:27:4d:58:0b:ab:37:44:d2:e8:ab:
5d:88:79:f8:1c:d3:d8:2e:36:af:19:29:43:02:36:
ea:4e:2d:c7:15:5e:31:4b:a8:3e:ae:d8:eb:b6:81:
8d:9f:23:8e:90:af:21:22:58:7f:5a:36:dd:cf:a2:
cd:41:bc:81:3c:40:03:39:f9:85:2a:6d:f3:c5:fc:
cc:48:fb:84:f0:2c:cb:e8:87:77:db:51:6d:f7:94:
0b:02:7e:39:cc:a5:cb:5f:44:30:3d:93:3b:b4:c5:
28:8e:01:05:62:b8:eb:82:8b:9f:98:99:e7:5e:d4:
c5:b5:d6:56:81:bd:61:49:48:63:6c:5a:a5:8b:e6:
7c:62:20:e3:76:6d:47:96:33:9b:4c:31:6a:1c:b0:
b5:65:bf:2c:b3:90:8b:cb:49:57:f2:20:b6:f5:28:
b3:c9:a2:92:3b:77:06:86:20:53:d5:29:8b:9b:cd:
5b:8c:5b:07:7b:f5:b1:fb:b4:d8:bf:27:52:d0:63:
d3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:51:42:2E:FF:28:17:23:36:8C:A1:86:32:E2:CC:85:C9:53:FE:DA
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/a1bd0482b6a7f1e229f1c427fc643f36c47f53a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.248.221.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:da:27:36:6a:47:e9:9a:3a:0e:6b:21:f6:41:0a:8e:fd:5a:
49:b4:0d:b8:cb:10:73:8c:4b:06:37:de:3a:b9:f0:23:b1:62:
41:45:cd:7c:a1:4b:19:97:fb:82:d0:9f:29:7c:0d:70:b9:bc:
e2:fe:88:5d:1c:24:1f:af:82:bd:51:ec:df:13:74:0a:f4:25:
f7:20:69:02:68:1c:20:9c:77:e4:34:28:d2:6e:c4:02:f3:be:
58:ec:4f:a0:11:58:a8:84:eb:cb:84:ae:f3:4f:8c:d5:27:90:
1b:94:fd:c1:d1:85:93:1b:50:af:b4:f5:84:a7:20:87:74:c0:
21:70:16:d0:d2:d3:ba:5f:65:e8:8a:16:0a:a0:7e:88:c3:ae:
d0:b6:55:18:07:39:b2:09:d3:e7:dc:da:5c:5d:95:33:a8:2f:
10:5d:92:25:f4:54:a7:d9:18:81:49:45:82:df:56:2b:25:4e:
36:5b:fe:84:b1:8b:58:b0:df:9b:0d:e2:27:71:39:68:a7:58:
c0:64:1e:56:1f:46:45:a7:ef:70:56:bf:82:ff:53:59:9f:1a:
ea:a8:03:5b:5a:92:da:d1:a0:1e:40:84:02:11:cc:af:d0:11:
94:c4:23:3e:f8:1a:ef:ba:fc:5f:88:91:03:d5:a6:96:52:5c:
18:37:b4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:43 2023 by rpki-client on console-ams.rpki-client.org