Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/de6047cbcdf02a13eadc0880bcc3ac4b3f317894.roa
File: de6047cbcdf02a13eadc0880bcc3ac4b3f317894.roa (raw, json)
Hash identifier: kteRCPZKgDzVjpx4dff2SbbSaBKgOuSOgQVtTXXSanI=
Subject key identifier: 87:B9:65:98:70:A8:41:19:51:CE:CC:EF:01:20:93:91:CF:58:B9:0B
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 101166
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/de6047cbcdf02a13eadc0880bcc3ac4b3f317894.roa
Signing time: Wed 24 Mar 2021 14:44:12 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.248.34.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1053030 (0x101166)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=de6047cbcdf02a13eadc0880bcc3ac4b3f317894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fc:aa:89:e0:a4:22:7d:47:b6:9a:f0:9b:02:
9a:eb:a2:93:db:cf:b7:f2:e5:4e:f9:a8:02:27:5b:
70:c4:4b:18:39:27:9f:df:c6:e5:1d:bb:fc:76:0f:
3e:3f:c7:42:38:6c:c2:e7:c4:ba:f6:69:33:c0:4b:
d8:ce:f1:b9:74:9e:b8:e1:d6:44:86:a2:5b:6f:38:
ec:1e:88:49:ca:d9:ea:83:72:74:43:ab:80:d7:ae:
ea:c8:b3:19:ca:19:2e:85:9a:f9:d4:15:97:6e:aa:
85:28:de:59:20:71:f4:0c:4d:2d:a8:d3:56:68:46:
cf:4a:7d:d2:fe:a4:fb:79:8c:4f:15:5e:1d:88:82:
ae:92:e0:c1:51:3d:09:54:1b:09:22:10:71:41:da:
a9:e8:41:d3:eb:77:d7:dd:ba:49:da:6d:6e:d0:63:
5f:3e:89:8f:2a:b6:68:ba:53:b4:4c:e4:46:18:74:
32:13:fe:c0:3d:6d:9d:85:e2:f0:8d:27:13:c4:08:
ea:dd:67:17:c8:74:d8:61:78:ee:67:4a:e0:20:2d:
86:a6:1b:a1:0a:29:a5:a1:cd:1a:1a:b4:78:27:ac:
0e:50:c2:f1:50:86:b0:ed:90:06:3b:e2:95:77:2a:
bc:86:e0:01:d9:ff:3e:0f:62:75:df:bc:01:2a:02:
76:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B9:65:98:70:A8:41:19:51:CE:CC:EF:01:20:93:91:CF:58:B9:0B
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/de6047cbcdf02a13eadc0880bcc3ac4b3f317894.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.248.34.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:91:a9:00:2e:2a:29:97:98:16:f6:bc:f7:07:ea:41:68:28:
74:5d:77:d2:e2:4b:a2:56:76:da:03:a2:b2:b8:1b:2f:93:81:
05:9d:91:eb:ec:20:02:7d:44:6e:54:29:be:03:df:19:52:cb:
09:29:a0:27:4d:f1:c2:17:d4:6a:a8:d6:8c:9a:25:54:4e:48:
aa:bd:cb:a0:0f:e6:39:70:12:ec:9d:95:1a:c8:3c:7b:c6:03:
11:e1:1e:92:9b:84:8c:9f:2f:71:c3:0a:c9:79:49:5b:3b:7a:
c6:6b:7b:8c:ab:92:80:df:f1:fa:79:36:ce:76:a2:68:82:b3:
10:ae:ac:a6:4f:6b:20:47:26:b1:82:19:5b:f6:a2:cf:52:fd:
d5:a8:a6:40:38:4b:1a:c5:72:b1:68:52:ab:79:9c:f7:6e:fb:
cf:9f:76:01:b9:6e:91:58:3e:19:74:9c:09:99:e8:c3:67:89:
53:56:12:77:a0:f8:00:8d:fa:9d:cc:c3:7d:e4:8d:2e:79:7f:
5c:df:3e:b5:a2:85:c9:a6:f1:37:19:c2:b6:f9:8b:0a:5f:e2:
f4:dc:51:1b:58:02:3b:f9:bd:57:6f:f2:27:74:be:8a:45:ed:
f0:d5:e2:ee:4d:b5:ed:73:d1:4e:87:12:a8:eb:7e:07:ef:a2:
af:96:72:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-ams.rpki-client.org