Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/f5a50367dbed4d18848dc97ef91fc5e748d86069.roa
File: f5a50367dbed4d18848dc97ef91fc5e748d86069.roa (raw, json)
Hash identifier: 5cQPHLlXPKXGm9DBlaAppOl6G3lO1eLhkFlCsbu71hQ=
Subject key identifier: BB:64:94:9D:0A:3F:82:B5:60:98:D1:18:88:23:39:A9:63:CA:9A:5D
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 100B29
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/f5a50367dbed4d18848dc97ef91fc5e748d86069.roa
Signing time: Wed 24 Mar 2021 14:44:11 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.248.220.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1051433 (0x100b29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=f5a50367dbed4d18848dc97ef91fc5e748d86069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:24:12:c4:b0:a8:b9:c1:af:fd:dd:01:18:1e:
29:48:be:24:23:64:9a:39:3f:0b:c3:28:0f:f0:d4:
49:3f:53:87:15:44:f5:ed:1e:43:d5:bb:7b:04:19:
48:5d:c8:b5:40:a3:99:bb:ec:8c:06:9c:a6:8f:09:
92:3c:fd:8f:24:5e:ec:24:ec:1c:86:c6:48:2e:b8:
cc:5a:2f:0b:4d:13:30:fb:33:be:27:7f:e3:0e:1c:
34:55:f7:6e:71:32:87:df:e5:0e:33:4f:32:44:c8:
ee:cf:b4:a5:85:98:19:f7:c2:f2:b3:26:fb:a3:7b:
48:e1:11:b8:fa:68:1d:85:61:c5:cc:8e:6b:89:28:
e5:b6:79:f3:4e:7b:1c:a2:3a:34:5d:fa:42:4a:ec:
88:a8:27:84:9c:82:ce:6e:65:21:de:38:cb:88:89:
5b:fa:1f:d8:32:69:9f:e7:13:90:b3:7c:31:59:33:
18:2d:9b:98:eb:e2:0e:66:37:59:b3:44:22:2f:2f:
bb:51:0d:39:28:cd:46:4c:2c:8c:73:37:5e:c2:53:
62:0b:53:8c:d8:3d:bb:29:2c:3a:74:08:7a:6e:53:
f2:92:c0:69:0d:56:61:47:82:26:cc:6e:ad:32:21:
e6:ec:a8:7c:45:fd:98:9e:1e:c6:18:7f:46:b4:a6:
5f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:64:94:9D:0A:3F:82:B5:60:98:D1:18:88:23:39:A9:63:CA:9A:5D
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/f5a50367dbed4d18848dc97ef91fc5e748d86069.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.248.220.0/24
Signature Algorithm: sha256WithRSAEncryption
55:71:50:ec:a0:cc:3a:3e:a0:83:c3:fa:f2:21:35:3a:fc:00:
ef:e4:76:5d:4a:37:1d:5a:49:50:62:ac:90:54:82:7b:c0:bd:
e0:d2:02:73:d2:3a:24:ab:2a:ac:6f:04:e8:77:90:5f:ae:ed:
3e:ee:fa:af:37:71:56:25:66:fb:11:23:f7:92:1b:80:2f:b4:
a9:1a:5e:71:31:d7:ae:d9:94:e8:8e:08:79:db:c3:52:c9:2e:
3e:8d:ff:0c:02:11:4b:58:7a:1f:6a:24:a5:d4:61:84:52:7c:
40:07:4c:d5:7f:f7:e6:2c:2f:d5:4a:a2:80:6a:c8:e3:da:97:
1a:40:3c:19:75:cc:11:6b:d6:cc:d6:ef:07:87:07:07:bb:70:
2a:ab:bc:c0:23:22:54:f1:f0:12:d9:65:b9:b8:92:cb:d3:07:
8f:d5:37:fc:f1:c1:8b:d5:4d:79:86:8d:59:f0:d5:d8:c3:ea:
78:64:f0:c8:2f:15:87:bf:76:8e:52:8f:0e:05:d0:cf:16:6d:
e9:87:91:e3:48:20:73:3b:74:30:31:5d:92:7f:e1:3e:31:e8:
35:4c:6e:70:b4:a6:74:65:67:d0:6d:e6:59:93:fe:3a:bd:97:
21:1b:a8:27:96:f8:18:05:3e:0b:52:a0:33:5e:45:00:87:91:
00:d4:c5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-ams.rpki-client.org