Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/a23331f614d5d92a923f7b6b45729e60fbca49ae.roa
File: a23331f614d5d92a923f7b6b45729e60fbca49ae.roa (raw, json)
Hash identifier: zq7Ufs05lSURxGuhxyxuuTNvTo27Txl6j9DV+4cdX2M=
Subject key identifier: B4:9E:B3:C9:13:DF:F9:64:EA:79:30:23:CE:11:0C:24:17:E1:9C:78
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 108C34
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/a23331f614d5d92a923f7b6b45729e60fbca49ae.roa
Signing time: Wed 24 Mar 2021 14:44:20 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.248.238.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1084468 (0x108c34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=a23331f614d5d92a923f7b6b45729e60fbca49ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:38:cb:85:3f:1d:29:5c:f2:1c:f4:f1:bf:65:
8e:10:45:31:a7:ea:68:3b:9d:06:14:65:05:f9:64:
33:a9:a3:5b:98:f4:9d:b6:76:1c:64:cd:c9:92:30:
7b:9a:24:49:4d:dc:a2:b0:ba:f6:c8:d5:4a:75:3f:
2d:71:be:22:cc:b6:b6:f9:45:2f:43:ff:09:fc:8f:
c4:59:67:f8:9d:43:53:b2:12:90:f7:37:3d:d6:29:
db:85:5b:67:1b:f7:6f:8d:fb:86:a3:47:e8:c6:09:
11:c7:61:0a:97:9a:66:36:fd:61:91:80:d0:e2:1b:
79:84:ad:62:b0:a7:7e:c5:6d:76:be:a1:c3:eb:18:
e0:c3:26:bf:b5:1a:dd:65:4f:66:72:9d:c0:17:de:
7d:7d:9d:be:a3:ea:1d:2e:34:99:97:be:4a:d4:39:
51:8e:e2:b0:7a:d0:7d:92:30:78:4d:d5:f8:31:86:
96:32:96:f1:9a:75:df:bc:71:fc:65:62:33:0e:d2:
b4:35:1b:7e:f6:dc:b4:57:0a:05:e1:0b:57:0b:02:
10:74:bc:e6:4d:fa:93:a9:12:9f:8d:a9:d2:87:2d:
d8:8d:59:04:dd:8b:d2:bd:b3:b6:aa:44:16:6b:8f:
4a:33:eb:0f:48:da:a9:7e:bc:9f:80:d1:e4:cf:ad:
04:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9E:B3:C9:13:DF:F9:64:EA:79:30:23:CE:11:0C:24:17:E1:9C:78
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/a23331f614d5d92a923f7b6b45729e60fbca49ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.248.238.0/24
Signature Algorithm: sha256WithRSAEncryption
61:23:8c:38:f1:ab:26:b5:97:df:7e:e8:30:79:3a:10:86:65:
1e:cc:7b:34:98:38:f7:ec:ae:1f:bf:84:43:b6:c3:c2:d9:aa:
3a:b6:93:30:1f:c1:43:84:36:13:69:bf:97:ca:11:cc:da:87:
cf:93:b4:5d:51:da:55:72:b4:74:10:56:0d:5d:85:b5:d9:eb:
05:c8:45:01:7e:9a:a2:6c:7b:d3:ed:48:e3:fa:d7:f3:eb:a5:
12:67:70:a2:e9:6c:16:f8:69:1d:66:17:f6:e0:83:a2:6f:f3:
51:68:a6:ec:31:06:58:c0:bb:bf:29:20:66:c9:06:22:5f:20:
d5:d9:e8:91:43:19:fa:2f:f0:65:4a:41:bf:8f:d7:b2:ba:50:
e4:7e:77:16:34:04:47:14:d2:4e:63:ff:98:ab:32:45:a4:4d:
9e:77:28:a4:28:52:00:f5:eb:9a:c7:4f:4c:c8:55:46:7d:f4:
10:ee:00:48:6e:57:22:14:aa:20:44:8a:a4:6d:fd:bd:f3:0b:
ca:72:e5:03:c5:ec:87:f9:c9:09:3c:3e:69:b2:45:79:11:59:
b6:43:f0:31:be:ea:42:75:ab:bb:fd:e8:40:1b:51:dc:3b:4a:
7f:01:49:09:34:24:be:62:da:d4:90:f9:89:aa:49:97:e8:d0:
87:82:d7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:43 2023 by rpki-client on console-ams.rpki-client.org