Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/d2e8cea7629ffac5d98db67b6051ab3a0117b247.roa
File: d2e8cea7629ffac5d98db67b6051ab3a0117b247.roa (raw, json)
Hash identifier: 5Qr1vsURrkXFpX1O2EedAjRnBuVueepcPhCRQcgs6No=
Subject key identifier: 27:21:D4:44:96:27:4C:B4:7C:CA:7E:EF:70:5A:26:7B:77:2C:CD:FE
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 2323AB
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/d2e8cea7629ffac5d98db67b6051ab3a0117b247.roa
Signing time: Fri 20 Jan 2023 23:43:51 +0000
ROA not before: Thu 19 Jan 2023 23:39:13 +0000
ROA not after: Mon 20 Jan 2025 23:39:13 +0000
asID: 278
IP address blocks: 132.248.22.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2302891 (0x2323ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Jan 19 23:39:13 2023 GMT
Not After : Jan 20 23:39:13 2025 GMT
Subject: CN=d2e8cea7629ffac5d98db67b6051ab3a0117b247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2e:39:6e:ba:03:b8:e8:30:51:e2:57:21:bd:
4e:fc:57:e8:a0:ae:3b:c4:bc:12:fa:0f:75:49:c4:
7e:41:62:fd:5b:65:e2:b4:a1:d8:ad:c6:44:38:fe:
9c:fd:5c:fe:bd:7d:7d:d4:ff:b9:b1:1e:3b:33:00:
27:b0:58:a0:3e:2c:de:ee:6a:f4:01:6a:0b:9a:07:
89:5f:3a:49:93:23:73:93:08:7e:f6:4e:44:a9:d2:
c8:7c:5c:0e:34:6f:04:1f:8c:fa:d9:f8:ee:6f:15:
88:91:98:75:3c:8f:7d:71:d0:37:b4:3e:70:43:ab:
39:9d:35:e0:dc:bb:c9:3a:ff:6f:21:3e:ce:35:ca:
50:57:bc:6d:44:f0:4c:07:e4:cf:bd:06:8c:2f:92:
c9:8f:2a:06:bc:6d:47:31:d8:59:a8:1f:56:4c:2e:
5c:45:7a:dd:36:81:2f:ca:18:c2:51:10:6a:9b:99:
30:a3:4a:98:0b:d4:3b:4e:a8:02:1d:e3:db:3d:cd:
be:fe:06:c6:b6:cf:f2:49:f7:2d:0e:d5:54:d6:50:
ed:fe:89:cd:62:91:d4:ff:81:de:f6:85:fc:c4:95:
5a:60:a0:e7:0f:8b:49:85:f4:ba:d1:65:22:e8:c1:
48:6c:61:ce:4b:4b:27:86:ee:d9:67:b2:cb:77:9d:
b9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:21:D4:44:96:27:4C:B4:7C:CA:7E:EF:70:5A:26:7B:77:2C:CD:FE
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/d2e8cea7629ffac5d98db67b6051ab3a0117b247.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.248.22.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:fd:db:38:e4:62:14:dc:b7:03:6d:fb:93:bd:5f:2d:62:c1:
d4:e6:f3:a9:87:aa:a7:bb:53:62:eb:1a:ec:62:3b:f5:c8:e5:
ff:cb:25:95:b8:d3:ab:a1:b9:a2:63:7f:61:8e:7b:42:27:f0:
c8:1f:ee:cd:0c:48:fb:03:49:5e:30:88:4b:bb:02:a2:a2:f0:
38:50:03:b9:3f:72:da:9f:5f:4f:f3:1b:11:32:db:e9:87:ba:
22:1a:c4:07:23:5a:d7:5b:2a:18:e9:d0:c9:72:2e:36:33:7c:
4d:7b:68:a2:d6:b4:e4:97:e8:75:53:a5:76:b3:d2:55:33:3b:
fd:59:eb:db:9b:4c:43:6c:b8:b4:fb:0e:e6:4d:19:de:6c:0b:
11:91:fe:ec:a8:8c:70:e5:9a:e0:7b:4a:15:29:f1:0c:05:95:
94:61:56:16:b3:f7:db:59:c5:c7:8f:8a:ca:fc:a2:14:1c:d8:
7d:33:62:3e:69:74:95:52:99:b7:92:b7:1b:84:25:3f:80:e6:
96:19:c5:53:89:78:b6:18:9e:f4:46:91:d0:8b:75:a8:29:fc:
96:3a:10:b1:0a:68:2d:c4:9d:85:13:b4:87:cd:76:dd:cc:6d:
a3:5d:3e:6f:b0:ef:6b:f9:26:01:8c:d8:8e:a3:a9:4f:30:8b:
fe:be:9c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-ams.rpki-client.org