Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/caa0b58c3b3f47999f2bba2331df7130884c13ab.roa
File: caa0b58c3b3f47999f2bba2331df7130884c13ab.roa (raw, json)
Hash identifier: kfie4o7rvlN3Uj4nAq86BsK7r0JXPw+rmpRbnI0JRps=
Subject key identifier: 84:5B:7D:AC:7B:27:F9:5C:92:0D:8B:2C:AD:7A:D2:D1:7C:7E:81:71
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 106C28
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/caa0b58c3b3f47999f2bba2331df7130884c13ab.roa
Signing time: Wed 24 Mar 2021 14:44:17 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.248.145.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1076264 (0x106c28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=caa0b58c3b3f47999f2bba2331df7130884c13ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b0:86:78:7c:11:0f:c8:fd:2f:c9:a1:5b:5b:
bc:0e:e3:13:16:66:75:21:1e:18:fe:57:2e:9b:34:
6a:9a:fc:ae:63:d3:21:7f:09:9b:53:f8:05:dd:2e:
ce:24:96:ec:f9:58:81:c6:3a:c6:a1:26:86:90:3f:
43:f3:dd:64:b6:30:db:90:e8:07:d1:7f:61:7c:10:
2e:8f:a0:8f:20:ea:78:0c:af:d5:6f:fe:2c:b5:12:
6b:14:77:d0:c9:02:5e:9f:48:77:a4:4e:73:ee:79:
03:e0:ca:5e:b1:bc:7b:10:f0:9c:7f:01:27:33:15:
81:44:4b:b9:15:58:9c:76:81:6f:70:d4:c4:1b:4f:
10:cd:e3:10:1e:86:07:e2:a5:72:e3:ff:1d:a5:83:
b4:c4:80:d1:60:89:18:ac:06:9e:b3:71:76:d6:d3:
47:51:d3:44:06:46:86:e2:10:8d:90:21:91:a4:25:
5d:98:42:f4:5d:41:a9:8c:72:5e:04:1c:f1:e6:c1:
8e:5c:83:4f:a5:24:ed:47:0c:f8:05:40:89:ef:a7:
f9:bd:b5:3b:b0:8c:11:5d:be:9e:39:09:89:c6:9b:
b5:c8:e2:39:97:d9:d2:be:80:17:b7:84:17:fc:8f:
ef:0d:5c:d2:05:10:b8:0b:dd:d3:83:49:e6:2b:c4:
43:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:5B:7D:AC:7B:27:F9:5C:92:0D:8B:2C:AD:7A:D2:D1:7C:7E:81:71
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/caa0b58c3b3f47999f2bba2331df7130884c13ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.248.145.0/24
Signature Algorithm: sha256WithRSAEncryption
98:b5:e9:b5:e1:fc:a6:22:9a:e8:1c:19:12:bc:e4:4b:1c:16:
93:d2:59:79:bb:ba:be:a0:32:39:cd:78:28:70:f4:4b:b4:0b:
a1:d3:e4:3a:b6:66:b1:71:28:05:a4:0e:d3:b3:b5:02:15:44:
fe:b6:74:d5:ef:7f:89:4b:76:23:60:79:14:35:2b:e3:63:90:
ff:ca:83:c4:8e:64:c5:eb:c3:f8:1f:39:b0:12:37:e6:b6:05:
f3:68:ba:a2:6b:e9:3e:1d:4a:e8:54:0b:ad:9e:6b:90:30:9c:
75:78:61:4c:1d:df:25:b7:e6:b4:11:3d:6b:3b:c6:19:fd:c3:
20:78:45:e8:a8:d2:84:26:91:14:40:68:69:68:38:61:d6:61:
ef:9a:99:60:df:71:47:d4:fb:13:e3:2c:a5:65:cd:4b:53:2b:
ce:fb:19:4a:a9:e1:5d:96:ce:3f:67:ca:6e:26:3f:43:77:67:
ee:fd:00:cf:cb:46:c1:e9:ef:cf:8a:fd:5e:ea:7f:0d:50:6c:
31:5e:4d:9d:f9:55:fa:3d:1d:b1:f3:0b:ea:38:ee:60:9b:04:
60:da:d1:4c:fd:8a:43:99:75:ff:a7:0c:b6:35:81:82:5e:7d:
f7:2e:4a:eb:08:49:b6:46:6f:42:77:8d:59:da:30:df:f7:b6:
97:48:73:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-ams.rpki-client.org