Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/ec3f260bf30e4bd4349f506757f5c3d08bd53339.roa
File: ec3f260bf30e4bd4349f506757f5c3d08bd53339.roa (raw, json)
Hash identifier: 7Pe4S7kDsnJoRwWOwr3qovGHg7gwMKsNnYkKTsRP33U=
Subject key identifier: 8F:A1:11:4C:42:58:51:F2:8E:97:44:A6:63:27:23:FF:A0:94:87:F1
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 102407
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/ec3f260bf30e4bd4349f506757f5c3d08bd53339.roa
Signing time: Wed 24 Mar 2021 14:44:14 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.248.142.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1057799 (0x102407)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=ec3f260bf30e4bd4349f506757f5c3d08bd53339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4d:2e:aa:9c:24:62:f0:01:3a:dc:a2:7d:8d:
7c:4e:87:b3:1e:c0:cb:25:41:52:80:8a:81:a5:51:
a1:b5:15:2d:75:d7:f9:ff:15:b0:9b:2d:9f:db:2b:
ba:25:f6:76:45:49:26:6b:e8:bb:88:8d:6d:57:c0:
a0:66:60:58:c9:5b:62:f2:f4:6d:b2:ee:d5:fb:74:
a1:89:9f:ee:9d:bf:d9:54:21:0a:3b:4c:e1:bb:46:
1f:d1:39:e3:15:56:b6:6f:91:aa:3c:37:d8:97:9f:
8c:d0:67:2a:9e:8f:6d:f5:e7:10:60:dd:fb:94:f0:
2e:1a:7d:4c:91:b3:e4:8c:16:ac:55:26:ba:fc:a2:
00:32:1d:e0:aa:17:bd:b4:2b:26:e2:48:ae:be:fd:
37:a4:e7:c6:3c:d3:88:eb:f2:e0:9f:b9:6e:6b:6c:
e8:fb:5d:2b:66:7b:df:ae:0b:63:ce:56:d9:23:bb:
4c:2e:f7:a0:6c:47:31:1a:5e:f5:d3:53:15:98:6b:
fb:9a:3a:3a:d2:d6:2f:c4:22:ac:6f:40:fc:f1:75:
6a:26:ef:8f:18:99:40:7c:17:42:99:f4:c6:25:a1:
2d:3c:00:28:8b:08:44:25:6e:25:20:2a:42:31:eb:
5b:fb:63:a9:01:02:e1:21:02:98:67:97:69:28:17:
22:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A1:11:4C:42:58:51:F2:8E:97:44:A6:63:27:23:FF:A0:94:87:F1
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/ec3f260bf30e4bd4349f506757f5c3d08bd53339.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.248.142.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:85:34:d9:90:3a:83:e3:25:f6:a2:74:01:8c:f4:5c:58:80:
fa:90:d3:65:69:ec:b2:6f:0f:00:72:e2:c3:4a:a5:0a:47:79:
29:f2:2a:ea:60:bb:c8:60:19:c0:d7:14:9b:34:6f:b2:3d:8b:
d1:02:a6:3a:1e:a5:f6:e9:87:82:ba:91:c4:fd:0b:fd:d0:1e:
4d:4b:17:d3:2d:ef:34:a3:53:72:fa:be:5d:b4:dd:38:77:34:
d1:c4:72:33:42:d1:18:bf:21:5c:cb:7a:88:29:38:2e:6e:6c:
1e:5f:8d:54:44:25:cd:fc:5a:a6:0d:4f:1c:83:29:25:32:5b:
8b:c7:3f:b1:6b:23:1c:b4:07:f6:16:32:58:5f:a3:9a:ae:fd:
9c:22:4c:3c:62:d0:7c:bf:d0:6f:45:be:ff:f6:11:4f:d2:73:
8b:2e:c3:4d:b7:b5:c8:f2:9b:eb:84:b2:db:7e:ff:de:73:31:
ea:83:c3:42:97:8c:ef:12:45:83:fe:7c:21:24:00:21:63:d9:
f8:94:1c:0c:03:0d:b1:f8:53:21:31:cf:ee:d0:7e:4d:a5:e8:
4f:e8:c5:33:54:c4:56:da:8d:1c:96:12:b2:f7:bf:99:57:86:
b0:ad:10:9b:ce:d5:ec:fc:27:91:d0:44:f0:fe:9b:77:d8:32:
40:f4:01:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-ams.rpki-client.org