Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/fab9a71f6b384da5b3144af56d2ff5c2fb4cb86a.roa
File: fab9a71f6b384da5b3144af56d2ff5c2fb4cb86a.roa (raw, json)
Hash identifier: WSnOCvuoKK107YQmqLHyPr6YuTz8m8y1dLegNSvaMhk=
Subject key identifier: 0A:2D:0F:1B:DF:B9:1D:66:AC:CC:20:82:2B:52:E8:7E:93:4C:E6:99
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 0FD281
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/fab9a71f6b384da5b3144af56d2ff5c2fb4cb86a.roa
Signing time: Wed 24 Mar 2021 14:44:07 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.248.92.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1036929 (0xfd281)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=fab9a71f6b384da5b3144af56d2ff5c2fb4cb86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:da:99:0e:3a:46:93:48:a8:98:23:b6:a3:22:
38:43:02:1c:b3:b9:6d:f8:d3:07:e4:81:c3:dd:03:
30:00:84:13:67:9e:03:e6:62:bc:a9:fd:8e:92:59:
a5:e5:18:db:e9:15:30:8b:5b:71:d8:cd:85:d2:16:
a2:d0:f9:b0:fc:3c:5e:94:fb:8e:5d:8f:7c:7d:4e:
6e:74:ed:4e:b5:f4:d3:76:1d:4d:45:9c:7a:fe:6e:
16:8d:1a:c8:44:a4:07:8a:16:f5:12:3c:82:cd:71:
45:40:0f:07:b5:dc:7f:9e:21:4e:a1:b9:80:1c:df:
96:88:d1:71:a2:e0:ee:9f:cb:7f:5d:4f:8d:6b:ae:
67:69:11:ea:37:64:f5:00:a2:34:9c:c4:39:7e:e9:
29:32:dd:68:28:c0:8f:76:3f:c8:bc:1b:b1:b8:3e:
0f:76:1a:82:0d:b5:76:5c:ec:a0:27:82:c8:f2:92:
30:30:5c:a9:49:79:40:51:d7:95:35:24:7b:b1:f1:
27:02:b4:ca:6b:d8:c1:37:67:3a:3e:d9:31:af:23:
ca:0b:b2:54:bf:79:6b:e6:53:9d:eb:91:a2:9d:89:
86:26:b2:5b:89:d0:8b:ba:ec:6e:e0:6a:9b:00:3d:
d0:78:81:d0:a7:b2:f8:f5:16:c4:fd:46:15:1a:47:
d4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:2D:0F:1B:DF:B9:1D:66:AC:CC:20:82:2B:52:E8:7E:93:4C:E6:99
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/fab9a71f6b384da5b3144af56d2ff5c2fb4cb86a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.248.92.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:59:e6:c5:5c:62:51:26:dc:0e:dd:d5:28:d4:af:1f:e1:70:
8e:72:2f:01:69:f0:63:7b:4f:6a:c8:91:27:9f:52:f4:ae:25:
47:e6:64:a1:c5:72:0c:c9:45:9f:8f:ad:54:26:be:a2:f0:00:
31:06:5f:94:35:ae:fe:0c:1d:be:6c:0c:6a:fe:27:ac:41:2d:
a2:99:e0:71:f8:d1:b3:e2:17:73:7b:ff:49:97:f9:d9:45:c6:
96:97:8e:2e:a2:1b:13:9a:89:f6:3c:f9:14:71:7c:f7:8e:1a:
b2:eb:fb:f0:cb:4e:23:5f:9b:44:c8:05:4e:d1:b5:ae:60:33:
d0:06:d3:0d:23:68:c6:0d:8c:aa:bc:c3:38:db:c6:63:9a:6b:
df:11:87:83:b9:e6:85:29:3c:36:a1:fe:e0:84:8c:fe:24:ad:
1f:fb:2f:1f:97:86:7d:e2:99:da:e2:90:14:bf:25:81:1a:f5:
30:bf:e6:2f:23:24:a7:bd:ec:85:08:0c:99:ac:f9:69:70:93:
07:29:4e:5a:c4:e7:f0:e9:f2:f3:75:2c:59:74:97:f4:3b:1e:
9d:8d:51:81:19:64:3b:19:2a:86:2a:3e:4a:1f:10:a6:21:66:
2b:32:14:ba:9a:be:29:cd:09:b4:94:a2:9f:ff:fe:5f:28:5b:
b2:71:f8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-ams.rpki-client.org