Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/d090af2653d5212e15a8965d4ce711df1e7d993e.roa
File: d090af2653d5212e15a8965d4ce711df1e7d993e.roa (raw, json)
Hash identifier: pVsGWL1Xctio0WuJgayqWArpggSfPwxq0IgTYmtpKFQ=
Subject key identifier: 6F:35:87:33:C8:AF:01:79:8D:74:9C:43:3E:EA:B1:35:62:E0:10:CE
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 10BB5C
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/d090af2653d5212e15a8965d4ce711df1e7d993e.roa
Signing time: Wed 24 Mar 2021 14:44:24 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.247.155.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1096540 (0x10bb5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=d090af2653d5212e15a8965d4ce711df1e7d993e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ca:74:e3:f9:fb:b5:dc:84:27:4a:1e:83:66:
7f:39:58:bf:09:84:30:2b:ca:dc:ea:b8:ba:2b:be:
0f:06:79:ed:41:cc:72:22:83:05:70:9d:2e:5f:69:
10:68:f7:0f:76:4a:27:e6:2d:38:f6:cc:c9:1e:5a:
59:5e:62:39:33:05:19:4d:38:70:06:bf:87:0d:1b:
fc:50:09:c5:c8:ed:21:7e:5b:cc:9f:56:4b:1b:2b:
07:64:e8:3f:0a:07:d9:4a:e7:71:18:f4:2e:df:36:
62:75:a9:33:56:7f:5c:37:ea:f9:06:ca:12:c3:90:
7c:85:1d:9e:3f:d8:7b:a7:10:26:e7:43:c5:f2:a2:
54:00:e2:e9:f2:be:0f:90:ac:08:9b:24:85:6f:6c:
61:ad:30:bf:87:c1:0f:09:5c:bb:67:f6:63:14:eb:
cb:7f:b6:c2:cc:bd:ea:20:0d:e6:49:15:6f:d1:a5:
49:cf:aa:28:92:b0:b2:a4:fe:ab:8a:49:21:b4:c1:
5f:9c:9e:9c:85:ca:dd:06:20:5e:f0:1a:06:75:c5:
16:c6:0c:62:65:7b:99:b3:6a:a3:01:a0:d6:4b:91:
20:d9:c9:56:60:96:42:d0:49:c2:32:fd:e8:bd:8a:
5e:fb:53:f6:81:82:c4:ca:53:e3:22:64:ee:a7:12:
3b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:35:87:33:C8:AF:01:79:8D:74:9C:43:3E:EA:B1:35:62:E0:10:CE
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/d090af2653d5212e15a8965d4ce711df1e7d993e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.247.155.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:22:f7:91:ca:a6:f2:f3:9a:a8:7a:3e:a6:87:61:80:b8:6d:
05:26:d2:56:1e:b3:aa:9a:02:c9:68:ca:38:7a:8a:7f:f3:a7:
d6:9b:3e:99:ae:5a:72:48:ac:4a:37:47:cb:bd:e9:be:21:ca:
84:f4:4e:2a:7c:65:b5:06:df:51:93:69:be:d0:2e:da:65:a8:
36:5f:45:82:bf:cf:8b:61:ac:9a:a8:a6:b1:bd:cf:02:66:a7:
99:b8:6f:44:05:05:0f:8d:58:02:dc:28:65:79:e5:51:a0:e8:
21:40:15:80:86:1c:d4:89:41:36:0d:e3:25:63:3a:83:a0:63:
63:05:cb:d0:86:0d:c4:56:4d:74:c1:16:ee:35:9d:87:3f:3f:
9e:7b:e5:d2:e7:f3:72:3c:18:f2:3e:9f:cc:aa:89:e9:d0:61:
89:34:56:79:dc:e0:c3:1b:b6:7d:da:e8:df:5b:03:76:f1:56:
0c:b2:a8:35:0d:d0:cd:be:a9:99:5b:9f:8a:a3:2f:13:52:53:
88:a3:50:78:ad:4a:80:8d:e3:d0:e6:15:51:55:71:b2:19:c0:
89:e0:d0:ce:8c:34:3b:2a:59:9f:b6:bf:43:85:19:ce:88:de:
89:1a:a1:b5:ee:ba:54:01:bf:62:a7:b2:2c:d9:18:3b:15:68:
98:36:fd:c4
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDELtcMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
MGE0ZmE0Y2FmNDgwY2I3NmMwYmM0YWVmYmY2MzNmOGNlM2IxZjkwHhcNMjEwMzI0
MTQ0MzQ0WhcNMjYwMzI0MTQ0MzQ0WjAzMTEwLwYDVQQDEyhkMDkwYWYyNjUzZDUy
MTJlMTVhODk2NWQ0Y2U3MTFkZjFlN2Q5OTNlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgsp04/n7tdyEJ0oeg2Z/OVi/CYQwK8rc6ri6K74PBnntQcxy
IoMFcJ0uX2kQaPcPdkon5i049szJHlpZXmI5MwUZTThwBr+HDRv8UAnFyO0hflvM
n1ZLGysHZOg/CgfZSudxGPQu3zZidakzVn9cN+r5BsoSw5B8hR2eP9h7pxAm50PF
8qJUAOLp8r4PkKwImySFb2xhrTC/h8EPCVy7Z/ZjFOvLf7bCzL3qIA3mSRVv0aVJ
z6ookrCypP6rikkhtMFfnJ6chcrdBiBe8BoGdcUWxgxiZXuZs2qjAaDWS5Eg2clW
YJZC0EnCMv3ovYpe+1P2gYLEylPjImTupxI7uQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFG81hzPIrwF5jXScQz7qsTVi4BDOMB8GA1UdIwQYMBaAFEixvQ/Kc7iuYUnO
JUbMDxXgfnaDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDkwYTRm
YTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFmOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODQyYjYzM2YtODBiOC00ZjRjLWJlOTgtNjU2ZDZm
OWE3ZjM4L2QwOTBhZjI2NTNkNTIxMmUxNWE4OTY1ZDRjZTcxMWRmMWU3ZDk5M2Uu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NDJiNjMzZi04MGI4LTRmNGMtYmU5OC02NTZk
NmY5YTdmMzgvNDkwYTRmYTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFm
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIT3mzANBgkqhkiG9w0BAQsFAAOCAQEAqiL3kcqm8vOaqHo+
podhgLhtBSbSVh6zqpoCyWjKOHqKf/On1ps+ma5ackisSjdHy73pviHKhPROKnxl
tQbfUZNpvtAu2mWoNl9Fgr/Pi2Gsmqimsb3PAmanmbhvRAUFD41YAtwoZXnlUaDo
IUAVgIYc1IlBNg3jJWM6g6BjYwXL0IYNxFZNdMEW7jWdhz8/nnvl0ufzcjwY8j6f
zKqJ6dBhiTRWedzgwxu2fdro31sDdvFWDLKoNQ3Qzb6pmVufiqMvE1JTiKNQeK1K
gI3j0OYVUVVxshnAieDQzow0OypZn7a/Q4UZzojeiRqhte66VAG/YqeyLNkYOxVo
mDb9xA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-ams.rpki-client.org