Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/aa7837d486fa3d459d8ad1b4a7ca8212ebacf544.roa
File: aa7837d486fa3d459d8ad1b4a7ca8212ebacf544.roa (raw, json)
Hash identifier: BSvIet63hBWo4IbEDasTBicMul0Pdf/xrGb9hJUOGLk=
Subject key identifier: 8C:08:EB:33:8F:71:B7:7F:22:53:6D:17:72:6C:08:96:CE:93:BA:79
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 10B748
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/aa7837d486fa3d459d8ad1b4a7ca8212ebacf544.roa
Signing time: Wed 24 Mar 2021 14:44:24 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.247.17.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1095496 (0x10b748)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=aa7837d486fa3d459d8ad1b4a7ca8212ebacf544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2f:d5:3b:55:16:a2:33:05:de:8d:69:4c:41:
34:3f:7a:e7:0c:b8:73:6d:e3:67:91:9f:16:fa:e5:
b7:81:81:3d:c1:73:70:30:53:ae:0a:26:e7:85:d7:
b7:2b:d0:92:e9:61:a0:83:31:0f:63:50:60:ab:8d:
b1:0e:c5:3a:21:a6:8d:f8:01:89:4c:a2:47:1e:17:
b6:bd:72:34:6c:4e:eb:43:57:2e:49:47:f2:96:c2:
72:5f:39:d1:67:eb:7a:a0:cf:6a:b2:a1:37:c5:57:
36:ce:51:d8:70:70:e2:db:12:8f:3b:43:82:24:f0:
b3:35:d9:b5:aa:34:f1:4c:2e:1f:e6:2a:81:e7:17:
2e:37:bb:74:e8:53:13:80:7b:c5:0c:b4:3a:3f:8d:
5d:49:78:cb:ca:8d:04:43:81:28:da:ac:e3:7b:cc:
7c:66:93:70:a2:54:42:d1:7b:36:8a:55:a7:15:39:
6d:d6:b5:7c:46:ca:84:b2:51:69:1d:d8:c9:71:8c:
e4:3c:61:3a:26:7d:31:64:f5:09:8d:d3:5a:90:09:
3f:41:00:38:3e:6e:87:2e:bd:d6:35:a3:ed:13:ae:
c8:5a:4a:31:6b:fb:42:08:68:f2:c5:3e:ff:3d:dc:
93:c4:82:cb:ac:10:b0:60:3f:48:ad:39:9b:62:84:
65:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:08:EB:33:8F:71:B7:7F:22:53:6D:17:72:6C:08:96:CE:93:BA:79
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/aa7837d486fa3d459d8ad1b4a7ca8212ebacf544.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.247.17.0/24
Signature Algorithm: sha256WithRSAEncryption
51:53:dc:3f:52:bc:ef:ae:19:4d:44:7c:a1:53:a3:fe:43:ce:
7d:f9:ff:08:b0:69:12:0c:a3:ea:24:01:ba:c0:dd:4b:07:41:
77:13:45:f4:56:cb:32:0c:02:45:17:eb:42:80:de:a3:60:18:
53:60:64:cc:d6:3d:1b:2b:b1:b8:af:bb:20:0b:53:de:2a:96:
fc:c5:6e:12:c4:bb:46:78:2e:05:e0:69:84:6c:c5:0f:7b:cc:
29:f9:74:26:ad:e3:09:f0:e8:92:b0:a9:b7:26:a2:1c:b0:33:
cd:12:4a:0b:c6:b4:8a:60:5a:f0:6e:81:bd:66:55:d7:02:ec:
9a:38:cf:7f:02:f0:fb:7c:bd:1a:60:a4:49:a5:45:8c:c7:f3:
3a:06:bb:61:8a:05:54:65:a8:c4:16:22:8a:c6:1e:c7:74:40:
87:39:95:35:89:c3:f2:a3:65:44:2c:5a:eb:3c:cd:1d:9a:a0:
3e:bc:5e:07:e5:72:fa:ab:6d:b5:9c:bb:b8:eb:65:f6:af:9b:
37:22:f0:78:02:a0:33:7f:fa:57:d4:33:c2:39:fa:50:c8:d7:
ed:51:7d:b3:c9:a8:ee:bf:5a:3e:bd:3b:13:70:bb:10:b2:bb:
56:18:4a:f3:9a:bb:ed:de:41:db:24:ee:df:f2:a7:c2:dc:fa:
9d:0f:6b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:43 2023 by rpki-client on console-ams.rpki-client.org