Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/f7880b03651f1f736a1dc16fddeeb3fdf922042e.roa
File: f7880b03651f1f736a1dc16fddeeb3fdf922042e.roa (raw, json)
Hash identifier: qwve2hYFY+zBV1mkbiGicFCuGl5NB+usbZgVaCLPDx0=
Subject key identifier: B0:D2:D6:DB:45:5E:2E:86:6A:9C:D0:57:F0:4A:1E:BA:F5:64:E2:98
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 0FFAE7
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/f7880b03651f1f736a1dc16fddeeb3fdf922042e.roa
Signing time: Wed 24 Mar 2021 14:44:10 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.248.99.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1047271 (0xffae7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=f7880b03651f1f736a1dc16fddeeb3fdf922042e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:67:33:e2:80:ef:ab:8f:54:6c:25:60:92:dd:
7c:54:ec:7a:8c:4a:1a:e5:94:ee:9a:db:2f:a9:44:
76:bf:d1:52:d5:68:dc:ab:92:d9:a6:80:1d:1b:84:
d9:86:f0:59:51:7b:fd:61:8b:56:02:ac:bb:ac:15:
19:d1:28:92:86:05:1d:b6:18:9b:96:d3:0d:5e:80:
f5:e2:cd:64:c5:76:17:9a:d9:c7:61:89:07:a0:6c:
0e:c1:83:59:1a:45:9d:42:fe:83:ae:e8:4a:4e:b4:
9b:04:f8:e6:4e:fe:8e:52:2d:3c:21:d7:64:24:e1:
1c:b5:4f:92:02:1e:37:15:b5:9c:b7:a2:9f:12:85:
35:3d:f4:72:48:eb:e7:75:24:93:cb:60:72:97:cf:
b2:d3:f1:fd:2f:83:60:6d:d7:59:36:e6:5e:75:4d:
d4:0a:72:e9:41:2d:37:b8:16:c7:f8:f0:7e:a4:f0:
03:f4:10:83:e7:41:af:6c:ed:2f:fc:d8:fc:35:5b:
e8:e5:a7:5f:e1:f2:d8:de:82:c3:24:21:10:84:92:
77:17:10:2b:8b:04:77:44:1e:29:36:0f:9c:d2:85:
b0:c7:fa:09:a9:a7:c1:2a:9d:e5:fd:2d:48:de:0f:
92:69:5f:0d:ef:b9:b3:de:ca:c8:91:58:38:31:07:
9b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D2:D6:DB:45:5E:2E:86:6A:9C:D0:57:F0:4A:1E:BA:F5:64:E2:98
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/f7880b03651f1f736a1dc16fddeeb3fdf922042e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.248.99.0/24
Signature Algorithm: sha256WithRSAEncryption
25:8e:4a:14:b0:89:cd:d2:3e:ca:6f:45:60:c3:ad:56:cb:15:
e1:72:aa:3b:ba:42:38:82:cc:2d:04:ce:31:2d:9f:97:e5:21:
f9:78:4c:bb:6b:16:5c:9d:37:9a:f2:fe:0b:05:4f:f4:6b:63:
25:c5:00:75:a3:7c:51:99:e2:39:1b:c1:9d:7d:45:94:7a:03:
d4:e0:36:47:73:2f:91:20:f4:f8:a9:3c:07:78:07:88:06:c0:
52:a9:88:9b:91:cb:94:61:6c:fa:15:29:1f:7c:9b:51:2f:ce:
2c:b7:e6:5d:15:bd:44:db:32:50:70:70:36:f4:06:e0:c7:40:
b3:00:27:20:6a:b4:fe:aa:65:d7:ca:2a:8a:07:0c:35:78:0f:
8a:34:8c:c3:0a:d7:ab:9a:52:41:0a:73:42:92:bc:ca:c9:95:
fd:c7:fa:01:df:3a:17:04:37:4b:fa:e6:d1:8a:1c:b4:1c:4a:
86:0d:29:a7:f0:8b:b0:0f:3d:ca:2f:0f:ed:58:06:7a:1e:93:
a1:ab:18:4f:07:20:77:65:2f:dd:bd:9b:1a:0b:fd:1d:e6:a0:
d3:f1:e1:63:31:01:d0:42:e1:37:45:8f:1c:46:1d:38:a4:6b:
f5:30:ca:27:87:27:5e:46:5e:dc:9e:61:8e:2e:4d:24:7d:05:
f3:54:e6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-ams.rpki-client.org