Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/c5a6723e10525e6cd9d3a63767ca283923e4276d.roa
File: c5a6723e10525e6cd9d3a63767ca283923e4276d.roa (raw, json)
Hash identifier: T1AX+FdLqihFzX7dQUjrwsDYQoSVa3BUUAlGwzNXU+Q=
Subject key identifier: F3:FD:77:1A:D3:7E:99:8B:33:3C:87:FE:16:AF:95:17:CD:A0:D1:1A
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 10E149
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/c5a6723e10525e6cd9d3a63767ca283923e4276d.roa
Signing time: Wed 24 Mar 2021 14:44:27 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.248.1.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1106249 (0x10e149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=c5a6723e10525e6cd9d3a63767ca283923e4276d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:00:d7:46:d1:be:b3:28:e4:36:1b:39:b6:6f:
4d:bf:ae:d3:15:06:86:17:16:b5:fa:84:d2:d2:4c:
fe:f7:c3:f3:3e:06:75:70:ca:d4:d7:ba:08:b5:21:
ac:2b:37:aa:98:5c:7d:7e:75:3e:4b:7a:c5:f0:7a:
8b:9a:40:cc:31:72:70:3a:35:59:3f:c6:d4:33:c2:
94:09:f0:74:08:5c:b5:73:a3:3e:d1:cc:4c:58:26:
a1:73:38:4d:d7:31:25:88:c3:f1:62:4a:a3:cc:8d:
c2:f0:15:3d:cf:5b:d4:9c:44:15:f7:8b:a0:58:02:
b6:6a:44:cd:ae:70:8f:7d:6e:3a:4d:24:e5:22:3b:
7d:55:67:79:1f:c0:b8:cf:e5:77:7c:bf:ea:9e:60:
dc:4c:6b:02:00:56:d1:e8:d4:b7:ea:69:01:f1:27:
b3:8a:96:05:5b:75:8f:89:37:02:b6:ef:b6:68:fe:
99:eb:5a:7f:4f:bb:bf:5c:e3:d1:3d:aa:d8:aa:f4:
ee:1a:cf:46:95:23:58:32:20:c9:4b:d4:4b:19:ed:
1d:d0:77:9c:75:7a:84:6f:7b:9a:3d:a7:3a:10:f1:
1a:18:e6:30:4d:94:fe:df:99:55:2f:a4:37:c7:75:
b2:7f:65:c6:e2:fd:ce:80:8b:64:76:6f:65:53:80:
2e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FD:77:1A:D3:7E:99:8B:33:3C:87:FE:16:AF:95:17:CD:A0:D1:1A
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/c5a6723e10525e6cd9d3a63767ca283923e4276d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.248.1.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:c5:11:e7:08:80:59:7a:ba:ef:21:f9:57:30:63:c9:5d:a0:
dd:61:57:03:77:bd:ba:06:3b:28:cc:20:80:49:0f:be:e7:d6:
38:c7:b9:2d:9e:f9:c3:24:5c:90:39:0e:44:03:4c:a1:d1:0f:
8c:4a:25:c5:09:e5:ab:e2:8b:d3:d5:70:1a:e1:8b:4f:82:ba:
d9:88:ff:1b:64:f9:d8:50:66:12:5c:e9:aa:a9:8d:b3:0e:ad:
34:a6:fa:84:4c:13:a3:68:91:d0:d8:e5:4d:c7:4b:b4:9e:6e:
f0:64:74:d8:30:52:e3:06:bb:2c:02:95:9e:ed:31:6c:fb:33:
55:6d:21:3a:3c:bb:18:77:d7:63:42:46:e9:59:c1:9c:d8:c2:
18:fb:e3:b5:35:c1:73:a7:6c:2a:a4:43:30:dc:44:6f:94:d3:
19:43:ac:85:4b:b2:d3:3c:97:23:75:c1:95:53:0d:9b:9e:21:
75:94:2f:c7:94:63:48:ce:48:29:30:1e:31:33:c3:61:6b:2a:
fb:a1:15:47:d6:07:1b:4a:55:1d:d6:23:d0:92:22:07:49:4a:
bc:39:7e:97:9b:65:b1:a4:da:ac:9b:bf:cb:6f:3c:a2:48:fc:
6b:7b:f7:54:7f:fd:9e:9e:d6:89:d9:e8:e5:f3:3e:57:0b:2a:
8b:27:ae:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-ams.rpki-client.org