Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/ddd86d98064f0a2f7b82ddf5f605044cfa716cf1.roa
File: ddd86d98064f0a2f7b82ddf5f605044cfa716cf1.roa (raw, json)
Hash identifier: SfajVPTESmHokaoT24uZB2foEtuQIlJIlX7WJm30zyk=
Subject key identifier: BF:C5:14:AC:78:D6:6D:1A:DC:9B:04:8D:06:31:72:3E:EA:35:E5:65
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 10D502
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/ddd86d98064f0a2f7b82ddf5f605044cfa716cf1.roa
Signing time: Wed 24 Mar 2021 14:44:27 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.247.22.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1103106 (0x10d502)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=ddd86d98064f0a2f7b82ddf5f605044cfa716cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:09:3e:1d:5b:1a:b5:79:03:71:23:c3:44:6e:
15:71:b4:77:ac:53:5c:1b:90:40:c7:7c:22:ff:e3:
db:f8:10:e8:99:e0:78:2c:34:50:ca:dc:7b:88:2b:
b3:f1:9a:23:4c:78:45:95:30:40:44:61:25:3c:06:
c4:cc:7d:91:75:96:88:40:e8:ec:af:bc:d5:57:f4:
0f:90:31:43:ef:21:b5:35:fb:63:3c:95:67:c8:13:
19:0b:fb:36:63:64:a4:36:c8:c1:78:c2:de:e9:15:
c8:8a:c1:ed:7c:8c:48:ad:2f:41:f6:75:8c:fd:10:
74:8f:24:05:4c:16:b4:8f:8d:ca:7b:a2:0f:59:66:
2b:8c:cd:77:f1:05:d2:26:c5:ed:c5:04:06:7a:a5:
21:28:7f:6d:0a:49:a4:b2:c8:e9:dd:86:de:58:ec:
bf:12:18:48:35:6b:96:d3:ad:7b:04:50:88:2b:ec:
0a:61:c7:15:98:ab:97:bb:4d:03:ed:81:a1:77:cb:
0d:68:85:57:0c:ab:83:e3:81:89:72:2b:2f:09:1a:
e6:32:c5:03:63:54:41:a5:fd:46:d9:c9:1c:20:15:
f6:0d:2e:10:d4:22:7f:cc:dd:52:94:08:f1:c7:ef:
78:66:6f:da:e0:e1:29:57:d5:a8:b2:a7:05:c2:3e:
cb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C5:14:AC:78:D6:6D:1A:DC:9B:04:8D:06:31:72:3E:EA:35:E5:65
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/ddd86d98064f0a2f7b82ddf5f605044cfa716cf1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.247.22.0/24
Signature Algorithm: sha256WithRSAEncryption
43:92:34:65:a1:26:64:21:9e:07:f1:cf:be:23:d3:65:e5:25:
d2:3e:45:b6:0b:78:97:a5:b1:db:f5:2f:1f:a7:95:ae:68:f7:
8d:ea:e0:73:d1:c0:3d:04:ce:fc:d2:ad:45:a4:47:c7:c0:e8:
9d:53:1f:96:c5:5a:b5:ac:a4:35:3f:6d:5a:07:b0:81:cf:f1:
93:17:08:93:d8:4b:d8:72:ec:c4:2d:1c:10:6d:30:af:d4:63:
35:1b:df:d4:5b:18:82:6b:ea:e9:e9:9c:12:96:98:45:3d:65:
df:50:51:16:fd:61:a9:8e:81:70:ce:14:b0:08:fd:ef:74:59:
14:e6:8c:7b:69:f1:26:62:e6:6d:72:d2:c1:bc:9d:fd:7d:ea:
e3:48:8d:74:91:b8:9c:c5:56:ba:c2:6c:f1:4b:07:c4:59:11:
8d:95:05:d8:c9:55:a2:c1:63:4a:0d:ad:a1:d6:be:90:be:29:
8c:cd:0c:e4:93:4a:d4:62:9d:be:ac:ce:42:d3:0a:5c:da:c3:
46:82:b7:b5:67:f4:63:d6:c0:c6:33:4a:e7:44:7e:ef:40:68:
a4:0d:f1:ec:6f:60:0a:82:3a:05:85:ec:48:e7:39:6f:0c:23:
d1:b4:56:4b:ca:3d:be:62:b3:56:e4:0a:f0:d7:c4:ab:dc:03:
1e:15:d6:32
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDENUCMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
MGE0ZmE0Y2FmNDgwY2I3NmMwYmM0YWVmYmY2MzNmOGNlM2IxZjkwHhcNMjEwMzI0
MTQ0MzQ0WhcNMjYwMzI0MTQ0MzQ0WjAzMTEwLwYDVQQDEyhkZGQ4NmQ5ODA2NGYw
YTJmN2I4MmRkZjVmNjA1MDQ0Y2ZhNzE2Y2YxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxwk+HVsatXkDcSPDRG4VcbR3rFNcG5BAx3wi/+Pb+BDomeB4
LDRQytx7iCuz8ZojTHhFlTBARGElPAbEzH2RdZaIQOjsr7zVV/QPkDFD7yG1Nftj
PJVnyBMZC/s2Y2SkNsjBeMLe6RXIisHtfIxIrS9B9nWM/RB0jyQFTBa0j43Ke6IP
WWYrjM138QXSJsXtxQQGeqUhKH9tCkmkssjp3YbeWOy/EhhINWuW0617BFCIK+wK
YccVmKuXu00D7YGhd8sNaIVXDKuD44GJcisvCRrmMsUDY1RBpf1G2ckcIBX2DS4Q
1CJ/zN1SlAjxx+94Zm/a4OEpV9WosqcFwj7L7QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFL/FFKx41m0a3JsEjQYxcj7qNeVlMB8GA1UdIwQYMBaAFEixvQ/Kc7iuYUnO
JUbMDxXgfnaDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDkwYTRm
YTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFmOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODQyYjYzM2YtODBiOC00ZjRjLWJlOTgtNjU2ZDZm
OWE3ZjM4L2RkZDg2ZDk4MDY0ZjBhMmY3YjgyZGRmNWY2MDUwNDRjZmE3MTZjZjEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NDJiNjMzZi04MGI4LTRmNGMtYmU5OC02NTZk
NmY5YTdmMzgvNDkwYTRmYTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFm
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIT3FjANBgkqhkiG9w0BAQsFAAOCAQEAQ5I0ZaEmZCGeB/HP
viPTZeUl0j5Ftgt4l6Wx2/UvH6eVrmj3jergc9HAPQTO/NKtRaRHx8DonVMflsVa
taykNT9tWgewgc/xkxcIk9hL2HLsxC0cEG0wr9RjNRvf1FsYgmvq6emcEpaYRT1l
31BRFv1hqY6BcM4UsAj973RZFOaMe2nxJmLmbXLSwbyd/X3q40iNdJG4nMVWusJs
8UsHxFkRjZUF2MlVosFjSg2toda+kL4pjM0M5JNK1GKdvqzOQtMKXNrDRoK3tWf0
Y9bAxjNK50R+70BopA3x7G9gCoI6BYXsSOc5bwwj0bRWS8o9vmKzVuQK8NfEq9wD
HhXWMg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-ams.rpki-client.org