Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/c47713c2fb0cc61aba8016763bca312e9e76fb00.roa
File: c47713c2fb0cc61aba8016763bca312e9e76fb00.roa (raw, json)
Hash identifier: NrT9fsHrJfizkr5o/xm5l643qAocM/gQoBV/Ns4tDM4=
Subject key identifier: DF:1B:BC:77:A8:65:CD:75:7F:09:A4:B1:50:8F:DB:80:60:48:A4:A5
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 109028
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/c47713c2fb0cc61aba8016763bca312e9e76fb00.roa
Signing time: Wed 24 Mar 2021 14:44:21 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.248.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1085480 (0x109028)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=c47713c2fb0cc61aba8016763bca312e9e76fb00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b6:d7:9b:87:b4:22:b1:19:59:8e:67:c6:04:
a9:3a:ec:06:9e:7b:07:f3:01:48:a6:e4:ea:3b:a2:
4d:de:7f:75:00:80:02:be:cd:7e:54:13:39:35:53:
be:17:6b:a0:14:9a:59:e2:d9:3f:bc:b2:73:3c:57:
76:94:54:e5:87:ae:68:ff:b8:9b:4f:59:c1:38:53:
ac:49:47:4c:e0:6a:2a:f4:bc:d5:40:5e:e8:55:0d:
af:73:04:79:5f:cc:d1:67:0d:38:e6:fa:f6:6c:46:
3c:d2:8e:49:1c:cb:72:9e:29:18:87:dd:50:ad:6b:
97:38:97:09:f2:97:76:ab:c0:bc:0e:30:4a:03:df:
db:dc:dd:5a:6e:2c:d5:ae:25:c0:73:07:f9:27:d2:
36:60:c0:0f:7a:14:47:2c:2d:21:8c:0e:2d:f1:59:
f6:d8:42:43:99:8a:95:26:a3:43:df:cf:54:d1:1a:
fa:54:2e:ce:a1:0f:b7:35:97:32:71:13:20:88:4f:
b4:f8:8b:45:83:1d:8e:bc:5b:6c:0b:e2:f2:49:f6:
82:d4:19:32:c5:d5:b5:d7:55:05:5a:d3:7c:67:b0:
22:75:74:93:1e:aa:52:d6:91:09:36:07:a8:6a:98:
3f:dd:5a:9e:8e:44:bc:32:8e:da:9d:17:1e:3e:6b:
0c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1B:BC:77:A8:65:CD:75:7F:09:A4:B1:50:8F:DB:80:60:48:A4:A5
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/c47713c2fb0cc61aba8016763bca312e9e76fb00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.248.157.0/24
Signature Algorithm: sha256WithRSAEncryption
33:5d:ea:7f:cd:60:7f:dd:6a:85:ab:24:92:7f:e4:7e:b5:7e:
94:86:1f:cf:2b:5b:af:8e:b6:14:8a:d6:34:4c:5d:0c:4e:2a:
ab:ad:1b:c8:4f:c7:f9:cf:60:c6:55:ee:3f:6d:97:15:d3:45:
24:d6:6e:79:a7:07:90:3a:65:6f:f7:28:f4:e6:07:43:b5:f6:
45:9e:8f:a9:f8:d8:34:56:c6:ad:49:b5:93:ff:ab:15:d8:6f:
bc:b9:76:55:16:b0:3a:a5:ad:1c:d0:85:a3:58:1d:36:1a:38:
a5:6d:05:1b:95:82:73:7c:44:5f:3d:51:91:4e:62:de:fd:18:
32:a5:a7:18:cc:7b:c5:4c:32:f2:ec:88:08:55:de:45:85:b3:
2e:c2:40:55:ca:84:1e:3f:c8:98:e3:ea:4b:c2:15:c6:28:7d:
42:fc:e5:50:e5:2c:e5:dc:d3:c6:20:c5:48:a7:81:2b:d4:41:
44:08:0e:75:88:45:86:b1:fe:d7:43:ba:84:40:40:39:b0:3c:
c8:62:b8:53:ee:7e:36:0d:29:15:66:fa:32:6e:e0:4f:77:b3:
10:ca:10:9d:df:fc:0d:11:f3:1e:0d:14:c3:7b:bc:6e:94:85:
18:fe:86:6d:fd:92:93:48:ef:db:95:9e:75:d3:77:31:f4:95:
fe:3c:7f:45
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEJAoMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
MGE0ZmE0Y2FmNDgwY2I3NmMwYmM0YWVmYmY2MzNmOGNlM2IxZjkwHhcNMjEwMzI0
MTQ0MzQ0WhcNMjYwMzI0MTQ0MzQ0WjAzMTEwLwYDVQQDEyhjNDc3MTNjMmZiMGNj
NjFhYmE4MDE2NzYzYmNhMzEyZTllNzZmYjAwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlrbXm4e0IrEZWY5nxgSpOuwGnnsH8wFIpuTqO6JN3n91AIAC
vs1+VBM5NVO+F2ugFJpZ4tk/vLJzPFd2lFTlh65o/7ibT1nBOFOsSUdM4Goq9LzV
QF7oVQ2vcwR5X8zRZw045vr2bEY80o5JHMtynikYh91QrWuXOJcJ8pd2q8C8DjBK
A9/b3N1abizVriXAcwf5J9I2YMAPehRHLC0hjA4t8Vn22EJDmYqVJqND389U0Rr6
VC7OoQ+3NZcycRMgiE+0+ItFgx2OvFtsC+LySfaC1BkyxdW111UFWtN8Z7AidXST
HqpS1pEJNgeoapg/3VqejkS8Mo7anRcePmsMGQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFN8bvHeoZc11fwmksVCP24BgSKSlMB8GA1UdIwQYMBaAFEixvQ/Kc7iuYUnO
JUbMDxXgfnaDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDkwYTRm
YTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFmOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODQyYjYzM2YtODBiOC00ZjRjLWJlOTgtNjU2ZDZm
OWE3ZjM4L2M0NzcxM2MyZmIwY2M2MWFiYTgwMTY3NjNiY2EzMTJlOWU3NmZiMDAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NDJiNjMzZi04MGI4LTRmNGMtYmU5OC02NTZk
NmY5YTdmMzgvNDkwYTRmYTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFm
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIT4nTANBgkqhkiG9w0BAQsFAAOCAQEAM13qf81gf91qhask
kn/kfrV+lIYfzytbr462FIrWNExdDE4qq60byE/H+c9gxlXuP22XFdNFJNZueacH
kDplb/co9OYHQ7X2RZ6PqfjYNFbGrUm1k/+rFdhvvLl2VRawOqWtHNCFo1gdNho4
pW0FG5WCc3xEXz1RkU5i3v0YMqWnGMx7xUwy8uyICFXeRYWzLsJAVcqEHj/ImOPq
S8IVxih9QvzlUOUs5dzTxiDFSKeBK9RBRAgOdYhFhrH+10O6hEBAObA8yGK4U+5+
Ng0pFWb6Mm7gT3ezEMoQnd/8DRHzHg0Uw3u8bpSFGP6Gbf2Sk0jv25WeddN3MfSV
/jx/RQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:43 2023 by rpki-client on console-ams.rpki-client.org