Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/ddc9c4afc3d32b8f3563f5f072a5261703692d9c.roa
File: ddc9c4afc3d32b8f3563f5f072a5261703692d9c.roa (raw, json)
Hash identifier: VAyFdfaPfdLkcA3y85POsYCQ12Gc5bfgq/i9j4zL9Ok=
Subject key identifier: E4:F9:D7:A2:E6:6C:E7:3E:3A:3E:3E:5E:EC:DD:31:C7:D2:DC:27:56
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 1080BC
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/ddc9c4afc3d32b8f3563f5f072a5261703692d9c.roa
Signing time: Wed 24 Mar 2021 14:44:20 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.247.130.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1081532 (0x1080bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=ddc9c4afc3d32b8f3563f5f072a5261703692d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:01:77:b2:d0:24:d2:d5:26:d8:6e:8b:8a:ec:
10:29:c7:65:aa:27:63:2c:56:68:98:dc:80:e6:f5:
70:d4:76:d5:e4:b2:8c:29:82:b4:10:97:c1:03:b4:
b5:5c:5d:ef:da:b9:d1:1d:2e:a7:c0:ac:04:d9:24:
d1:87:21:08:32:df:66:d3:33:1f:5a:5e:7c:db:a6:
eb:9b:58:87:9d:fc:7c:9c:78:ba:df:06:e6:8b:70:
7c:ed:55:c2:e0:ea:d9:2a:01:f8:5e:2a:10:45:2d:
df:e6:b6:35:2c:30:cd:9f:5e:c5:14:48:eb:b7:12:
04:7f:af:75:e9:43:c9:48:a0:60:a5:f9:28:16:bf:
c6:46:81:b5:64:18:bf:16:80:d2:14:43:86:22:b6:
45:40:48:18:75:08:27:b8:95:dd:ad:53:be:64:4f:
a7:9a:3e:30:20:c6:84:fb:6c:68:67:e7:fe:4d:38:
68:f5:4c:86:b4:88:61:d5:e1:25:78:45:de:07:7c:
d2:74:14:1b:e4:a7:be:f8:03:4d:20:7f:67:05:5c:
41:04:1e:dd:fc:cb:05:04:ea:f8:d6:ae:2d:f6:31:
d6:44:31:15:28:70:24:14:a2:08:1f:1d:e7:52:0e:
fa:af:75:ee:fa:b6:37:b8:59:7b:b1:8a:6a:ea:51:
83:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F9:D7:A2:E6:6C:E7:3E:3A:3E:3E:5E:EC:DD:31:C7:D2:DC:27:56
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/ddc9c4afc3d32b8f3563f5f072a5261703692d9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.247.130.0/24
Signature Algorithm: sha256WithRSAEncryption
39:48:ac:88:d3:1e:6f:38:e5:ba:0b:ac:0d:bc:74:0e:bb:6e:
5a:bd:44:be:66:d8:df:35:6f:34:be:f3:d2:f8:2b:4f:9f:ad:
fd:1b:f2:4b:c9:c6:92:38:a3:3f:87:56:67:0d:f8:e7:3a:73:
60:21:6f:9c:ba:1e:23:76:98:e8:31:d6:e7:37:b6:a5:00:f1:
2c:d3:80:0a:8b:9c:cd:96:26:75:63:35:30:91:c2:dc:1d:af:
b7:f1:ed:17:ca:2a:1f:44:f3:00:33:04:ab:dc:cd:cb:ab:07:
dd:d1:4f:49:39:35:90:75:3e:5c:ad:a6:4d:99:bf:46:2a:02:
63:14:ea:f4:95:0c:ed:04:60:b4:34:be:05:3e:4e:db:8b:53:
69:78:0a:54:cd:8c:32:f9:fc:ca:c5:18:f0:a7:3d:1a:46:60:
9a:be:6e:6e:28:5a:fd:21:0d:23:88:38:c5:42:e5:3a:bb:7a:
c2:c2:0e:6f:d8:9d:a6:9f:d2:b0:4d:d5:f6:8c:4b:a0:0f:6b:
12:1f:31:39:a9:11:dc:69:ed:8b:b2:3f:0d:75:27:52:34:b6:
d4:ec:54:49:72:e1:53:68:88:ef:83:ea:f2:ee:76:64:9f:56:
2d:67:2b:c5:59:7b:20:a6:40:5d:77:f9:ad:1c:22:41:ef:58:
af:4f:a9:89
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEIC8MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
MGE0ZmE0Y2FmNDgwY2I3NmMwYmM0YWVmYmY2MzNmOGNlM2IxZjkwHhcNMjEwMzI0
MTQ0MzQ0WhcNMjYwMzI0MTQ0MzQ0WjAzMTEwLwYDVQQDEyhkZGM5YzRhZmMzZDMy
YjhmMzU2M2Y1ZjA3MmE1MjYxNzAzNjkyZDljMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwwF3stAk0tUm2G6LiuwQKcdlqidjLFZomNyA5vVw1HbV5LKM
KYK0EJfBA7S1XF3v2rnRHS6nwKwE2STRhyEIMt9m0zMfWl5826brm1iHnfx8nHi6
3wbmi3B87VXC4OrZKgH4XioQRS3f5rY1LDDNn17FFEjrtxIEf6916UPJSKBgpfko
Fr/GRoG1ZBi/FoDSFEOGIrZFQEgYdQgnuJXdrVO+ZE+nmj4wIMaE+2xoZ+f+TTho
9UyGtIhh1eEleEXeB3zSdBQb5Ke++ANNIH9nBVxBBB7d/MsFBOr41q4t9jHWRDEV
KHAkFKIIHx3nUg76r3Xu+rY3uFl7sYpq6lGDgwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOT516LmbOc+Oj4+XuzdMcfS3CdWMB8GA1UdIwQYMBaAFEixvQ/Kc7iuYUnO
JUbMDxXgfnaDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDkwYTRm
YTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFmOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODQyYjYzM2YtODBiOC00ZjRjLWJlOTgtNjU2ZDZm
OWE3ZjM4L2RkYzljNGFmYzNkMzJiOGYzNTYzZjVmMDcyYTUyNjE3MDM2OTJkOWMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NDJiNjMzZi04MGI4LTRmNGMtYmU5OC02NTZk
NmY5YTdmMzgvNDkwYTRmYTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFm
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIT3gjANBgkqhkiG9w0BAQsFAAOCAQEAOUisiNMebzjlugus
Dbx0DrtuWr1EvmbY3zVvNL7z0vgrT5+t/RvyS8nGkjijP4dWZw345zpzYCFvnLoe
I3aY6DHW5ze2pQDxLNOACouczZYmdWM1MJHC3B2vt/HtF8oqH0TzADMEq9zNy6sH
3dFPSTk1kHU+XK2mTZm/RioCYxTq9JUM7QRgtDS+BT5O24tTaXgKVM2MMvn8ysUY
8Kc9GkZgmr5ubiha/SENI4g4xULlOrt6wsIOb9idpp/SsE3V9oxLoA9rEh8xOakR
3Gnti7I/DXUnUjS21OxUSXLhU2iI74Pq8u52ZJ9WLWcrxVl7IKZAXXf5rRwiQe9Y
r0+piQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-ams.rpki-client.org