Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/d209114563ec3d4371150e4272641b50b7d2274c.roa
File: d209114563ec3d4371150e4272641b50b7d2274c.roa (raw, json)
Hash identifier: qGDPMDW69SiYIbvCNcHvFy3w6/QBT1CA7Oe5m6sgBiE=
Subject key identifier: 60:E8:D5:99:05:B5:2A:8E:AE:E9:C5:EF:76:16:09:BC:E2:96:A5:6A
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 108A51
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/d209114563ec3d4371150e4272641b50b7d2274c.roa
Signing time: Wed 24 Mar 2021 14:44:20 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.247.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1083985 (0x108a51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=d209114563ec3d4371150e4272641b50b7d2274c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7c:f1:b7:a2:95:71:7f:9a:be:21:1a:d9:56:
bd:12:ac:ee:25:00:71:34:3b:55:50:ae:d6:6d:cc:
64:43:5e:92:ae:66:a1:d8:bd:91:14:01:19:9e:42:
5f:34:b4:04:25:18:98:c3:c6:90:85:a8:e4:77:05:
ae:76:0c:48:da:1a:ff:b3:cf:64:72:3d:2e:02:47:
ed:c6:b5:f4:e3:16:8c:ca:40:e1:b1:1e:d9:f0:02:
14:15:e3:59:a5:0d:84:54:a8:98:b7:f3:4a:f8:0f:
6f:71:81:a5:f5:78:37:67:9e:f3:3e:a7:81:fd:c5:
d6:b0:ba:d4:45:82:c1:c0:35:6d:46:d9:16:94:a6:
77:b3:74:31:d5:e8:f5:6e:37:69:f1:2d:a1:46:0f:
d3:86:f8:1e:e5:7b:93:bf:54:0a:5f:a5:3d:bc:70:
f7:5d:ef:3d:13:b9:d5:54:7e:5c:61:bd:34:59:6f:
e7:77:3f:1c:3d:a0:73:c9:92:c1:98:b3:5e:ae:63:
8a:87:33:71:44:dc:b1:a9:4b:30:69:32:50:5f:ad:
fb:71:c3:4e:59:08:05:6b:18:d9:60:dd:08:d5:43:
6b:5a:19:5f:d9:61:3d:8a:34:2f:02:aa:c9:b3:10:
3a:0b:d9:72:b0:17:a5:0b:78:fc:52:85:d7:4f:9b:
46:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E8:D5:99:05:B5:2A:8E:AE:E9:C5:EF:76:16:09:BC:E2:96:A5:6A
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/d209114563ec3d4371150e4272641b50b7d2274c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.247.46.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:74:8a:31:59:34:93:3f:63:d8:78:bb:9b:73:a5:7b:f9:52:
98:f6:b6:31:9a:86:e9:77:72:b0:1b:0b:49:91:0b:39:30:27:
ca:31:33:f2:c4:51:25:9c:73:79:2a:86:04:98:fc:df:8a:cd:
f2:18:90:eb:0e:45:89:89:bd:f4:0c:ff:64:9b:64:9b:93:0d:
b9:13:51:d7:bd:fa:31:b2:29:c4:2e:1e:72:5f:9e:a4:cf:76:
4d:8a:df:59:a8:2c:28:d0:1f:7e:2e:68:37:59:31:16:70:f0:
8a:6b:41:a7:39:5d:cc:70:f1:53:09:15:04:be:56:d7:2e:a5:
6d:8b:a5:0e:32:56:71:3f:ed:1c:0c:21:4e:ff:7f:99:09:9c:
75:89:68:77:74:04:3b:09:f4:68:fb:a1:d7:94:f3:9c:c5:ce:
19:18:f4:8e:a0:8e:7b:fc:2f:68:ee:29:87:a3:d6:06:57:9b:
6a:b1:4a:19:e6:1f:f8:ad:93:dd:74:0f:8c:67:8e:6b:b7:8a:
ad:91:da:67:bd:24:7a:4a:30:11:de:af:55:54:d7:7d:a5:d4:
b2:a7:0a:49:cf:09:20:94:6d:a6:8e:00:a4:bf:31:66:0e:70:
b0:64:bb:23:98:54:ea:d2:c8:d5:e4:58:3b:94:86:58:7d:01:
f1:aa:4f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:29 2023 by rpki-client on console-fra.rpki-client.org