Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/e0c436d56a99b808a06db7dd0a3047ec154884e6.roa
File: e0c436d56a99b808a06db7dd0a3047ec154884e6.roa (raw, json)
Hash identifier: u+pWc9DAHdHMCdQkDcgRJaEIQZDBjsg3FejFBYukkCQ=
Subject key identifier: 8A:06:43:16:52:B7:3C:E4:82:53:26:60:43:DA:8F:A0:E1:9C:42:55
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 10F0C3
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/e0c436d56a99b808a06db7dd0a3047ec154884e6.roa
Signing time: Wed 24 Mar 2021 14:44:28 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.248.184.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1110211 (0x10f0c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=e0c436d56a99b808a06db7dd0a3047ec154884e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:73:11:44:4f:07:52:71:2e:5d:ac:7d:c5:4f:
e9:09:5e:9b:f1:8f:64:74:32:7e:01:f0:14:84:dd:
8d:39:34:94:bf:65:82:69:de:9c:13:74:31:85:bc:
15:96:12:29:db:ea:71:35:94:5d:73:36:5c:1d:44:
8a:11:86:72:95:64:27:c2:3d:02:7f:ff:bc:01:ff:
07:0b:6a:4c:64:41:e7:5b:e4:c8:43:2f:bc:3f:65:
77:dc:7b:bc:26:2c:a1:49:aa:f5:77:50:86:27:96:
45:1d:a5:72:2a:49:39:a4:ea:f8:0b:d4:b3:5d:15:
4e:22:c7:5b:d1:16:76:f1:7b:2c:fd:05:8e:b1:ca:
a8:27:fc:1a:9c:f4:0b:3a:36:57:69:c4:cf:e0:0d:
11:f1:9d:2c:31:33:67:c0:85:d8:a9:5c:a3:3b:25:
95:ed:83:af:7f:d1:8d:5c:af:9f:c3:18:7c:e2:7c:
90:95:20:ea:af:61:ef:e6:b3:54:2f:4e:63:4c:55:
41:ce:1c:f5:78:bf:c0:ba:a2:d0:2d:05:34:ca:e1:
af:d1:c4:53:15:8d:b9:83:ce:fe:25:1a:fa:08:e3:
05:f6:e0:50:0d:95:57:7d:1e:fb:b1:90:92:58:a0:
71:21:24:7b:f7:41:2d:0d:ae:7c:fe:73:ba:91:49:
16:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:06:43:16:52:B7:3C:E4:82:53:26:60:43:DA:8F:A0:E1:9C:42:55
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/e0c436d56a99b808a06db7dd0a3047ec154884e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.248.184.0/24
Signature Algorithm: sha256WithRSAEncryption
62:54:bb:63:ac:fe:4c:7f:25:1f:06:f2:aa:a5:bf:39:96:8d:
84:ce:3f:3b:03:0a:f2:02:98:f5:fd:5e:3d:0b:fa:cb:2d:2e:
48:64:93:e8:ea:18:91:c1:16:56:cf:7e:b4:57:f5:e2:95:b0:
5f:f0:74:fe:f5:2f:00:35:85:4e:42:91:8e:a4:c7:86:f6:19:
bd:14:14:92:65:8e:27:d2:b0:20:c7:33:1d:f8:0c:ea:97:da:
bc:b6:8b:31:eb:04:a3:22:ef:f0:07:74:35:01:fb:e0:76:bd:
6c:3f:44:81:94:32:c0:21:8e:cb:be:14:1d:f2:72:a2:10:ef:
38:20:45:61:bf:7d:16:4f:31:ac:a2:74:e6:d9:06:09:bb:e2:
96:5f:46:69:57:4e:27:17:01:27:9a:54:ae:c7:36:17:ea:b1:
76:05:d6:3e:a9:23:0f:de:58:dc:14:7b:05:fa:12:ea:0f:61:
ba:78:e9:d1:0f:f1:a0:0a:65:eb:62:43:2c:2a:e7:5b:0e:3b:
b2:b5:a7:b1:27:f2:bf:ca:03:73:ca:ab:81:81:74:7e:e8:77:
9f:d6:d4:c3:c8:23:86:9d:e0:b8:4b:fa:be:74:16:07:ab:ba:
12:61:85:94:3b:6d:7c:5d:76:48:d1:25:3f:64:b5:d0:c3:da:
3e:7b:69:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-ams.rpki-client.org