Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/e02cf3a9bf0dc111ab9323c7d45d5e8f367ffac1.roa
File: e02cf3a9bf0dc111ab9323c7d45d5e8f367ffac1.roa (raw, json)
Hash identifier: gkzgo1Mb2TKxSHqc25Z+kekUOw8piTnMVN0JDjOtFZA=
Subject key identifier: F5:C1:C4:4C:0D:C3:75:A1:EB:FD:A8:63:F9:A4:96:4A:36:4D:F9:3F
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 10BA83
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/e02cf3a9bf0dc111ab9323c7d45d5e8f367ffac1.roa
Signing time: Wed 24 Mar 2021 14:44:24 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.247.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1096323 (0x10ba83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=e02cf3a9bf0dc111ab9323c7d45d5e8f367ffac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b1:3a:d1:2e:28:69:73:81:9e:ae:e7:95:f1:
12:10:0d:be:21:cf:58:8b:f9:7a:73:b7:09:9a:8f:
28:03:11:cf:01:75:25:62:d1:9c:89:5e:d0:22:80:
44:77:1d:b6:da:bc:68:4d:42:eb:1e:46:c5:95:36:
34:23:8c:e2:d5:e8:d5:a0:60:43:1d:17:a6:a6:28:
ef:9f:ac:f1:4d:2b:e4:5a:8a:1c:1b:5b:5f:05:bf:
13:3c:45:a9:76:55:6c:a2:40:95:4d:b3:b6:10:fa:
ec:52:00:71:78:25:b2:29:4b:4d:1e:40:86:2b:21:
48:81:b1:e8:87:4e:68:29:5a:f7:69:c4:c6:2e:05:
1c:a2:46:aa:79:1d:16:8b:4b:4a:51:43:3f:2f:e0:
34:27:93:b3:ca:8c:f2:ef:a0:0f:6c:c4:8a:18:00:
7f:f3:28:e3:a1:fd:45:4f:8d:23:0c:cd:3f:1c:c2:
ca:3c:d7:a8:46:72:7b:c4:22:51:a7:61:c8:4a:73:
df:b5:f1:ff:f4:d1:25:b5:7e:9c:cd:c2:09:2b:73:
75:68:03:8f:01:7d:de:0d:c1:6f:8a:c1:c1:d3:ae:
1b:ae:2b:ad:d8:33:f7:3e:ce:08:73:e5:65:6c:66:
eb:fe:4c:16:8d:5f:6d:ca:e4:ae:a3:e1:3b:88:a9:
54:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C1:C4:4C:0D:C3:75:A1:EB:FD:A8:63:F9:A4:96:4A:36:4D:F9:3F
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/e02cf3a9bf0dc111ab9323c7d45d5e8f367ffac1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.247.45.0/24
Signature Algorithm: sha256WithRSAEncryption
02:4d:ef:f6:1e:6e:88:1f:ae:eb:e0:76:46:0e:3e:5c:7a:ed:
06:e7:76:df:de:91:61:3e:14:ef:37:7c:f4:04:4c:08:dc:27:
1c:52:d7:b7:23:73:04:13:63:96:96:75:58:05:cd:bf:85:8d:
3b:8a:ae:1a:42:89:8e:a4:07:b5:e8:3c:2e:c9:18:bd:92:fc:
33:30:0d:85:76:93:5f:6c:95:e3:7a:78:cd:6d:6a:a9:7e:33:
2c:fc:6f:fa:30:bb:78:e9:70:e4:eb:ac:4b:8d:ed:c2:f6:fa:
4e:c1:9c:ed:ec:d6:9d:59:7a:6a:17:b1:63:98:c4:5b:74:1e:
94:15:c5:a3:eb:a2:b8:b8:d6:9f:65:ba:3d:20:3c:9a:3b:62:
c0:2f:0a:bf:01:d3:e4:65:3a:f7:c5:be:58:21:99:85:f5:5b:
1d:d1:be:97:6d:96:0a:3f:cf:62:58:8c:8a:ac:0c:f9:b1:43:
08:63:ad:6a:a3:c0:a6:69:a6:4f:77:8d:09:f9:46:80:01:30:
2a:0b:66:34:1a:f3:2c:b8:05:7b:15:02:49:b8:40:6e:82:cc:
24:9e:18:4e:39:d1:8e:e0:74:c9:54:46:67:4e:ed:1b:62:88:
a6:cd:d3:90:6e:93:72:7e:ee:92:e0:22:a1:39:d6:93:f3:de:
8d:56:78:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-ams.rpki-client.org