Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/fabcf7f71ea2abf222c768f93a1f53e8beda7391.roa
File: fabcf7f71ea2abf222c768f93a1f53e8beda7391.roa (raw, json)
Hash identifier: KpPeaYz9ybbVPGVKaACjHSCbIfAajTKTTjCCk7oiyL8=
Subject key identifier: 85:AD:23:53:F7:F9:1D:B2:4A:5F:18:EE:35:DA:C2:44:68:A2:7E:2A
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 10F6CD
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/fabcf7f71ea2abf222c768f93a1f53e8beda7391.roa
Signing time: Wed 24 Mar 2021 14:44:29 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.247.13.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1111757 (0x10f6cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=fabcf7f71ea2abf222c768f93a1f53e8beda7391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:05:54:56:55:ff:79:a0:1b:2b:ee:19:f2:d7:
45:19:e4:9f:f2:ca:bc:7d:48:08:58:f2:44:e7:21:
17:33:5d:30:af:3e:d0:05:26:e6:01:48:9e:c6:7f:
7d:45:ba:bc:ec:44:3f:bd:82:85:4a:14:74:ca:f5:
dd:a4:02:8f:e7:67:f9:e1:00:56:8a:45:74:84:e2:
74:6b:72:44:3b:91:da:55:75:07:8c:6f:d9:ef:e2:
71:83:14:96:1c:3d:32:62:da:a7:12:f4:c6:70:4e:
ce:01:af:45:8d:46:38:be:f2:6a:6f:b3:42:d8:f8:
08:a6:82:7e:85:7d:b3:79:19:73:96:18:13:25:d0:
18:58:d1:a7:78:24:19:b7:ee:11:6e:c4:7c:6b:d2:
38:da:02:f9:a6:e2:d9:33:67:b3:a4:ba:0e:10:3b:
19:e7:95:cb:e1:f3:ca:5e:e1:cb:3f:e1:ad:c7:dc:
bd:60:24:ed:d7:cf:28:df:46:bb:f6:b6:50:0f:ab:
1b:17:77:11:95:b5:87:ef:86:8c:36:66:58:54:c8:
7a:28:c2:5a:71:e1:d2:35:04:00:f6:51:b2:6a:c8:
8b:33:46:7b:d1:ab:3f:56:9e:d0:55:bd:1c:6e:de:
a6:df:4a:ff:d4:34:c2:62:2f:e9:54:bf:be:3f:b8:
9c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AD:23:53:F7:F9:1D:B2:4A:5F:18:EE:35:DA:C2:44:68:A2:7E:2A
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/fabcf7f71ea2abf222c768f93a1f53e8beda7391.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.247.13.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:5e:a9:7e:9e:56:87:61:62:9b:c8:c9:9e:22:83:aa:a0:1d:
10:8b:c4:b7:71:84:91:6a:ea:df:de:bb:09:d4:e5:d6:83:bf:
c5:9e:d5:f6:14:d5:8c:48:84:4e:d8:df:22:92:93:65:8a:b9:
35:d8:d1:8d:29:c5:47:02:b8:88:aa:25:bf:8b:08:79:66:f0:
59:cb:50:1f:c0:c1:92:d9:b8:b3:15:56:e1:cd:0c:05:54:7d:
d1:98:da:97:22:f8:8c:84:f8:4e:c5:21:56:af:1e:cb:4f:4a:
bb:b3:e7:92:2d:cf:31:27:cb:d2:55:f0:ed:48:f9:c1:39:f0:
d0:7f:3e:ee:2a:0a:50:43:06:9b:1c:63:b4:69:30:6c:63:db:
7a:fb:76:db:07:3b:80:a7:e6:f0:f5:db:76:cc:ad:26:7e:fe:
f6:fd:9a:73:01:74:b5:d5:52:d1:48:ad:e5:33:8f:96:cf:e1:
94:8e:a9:ca:56:47:a4:39:65:b6:2a:8c:d3:23:d4:57:46:4b:
0b:cf:23:c2:de:72:23:12:57:6c:b1:ea:7a:6c:70:c2:ee:8f:
dd:0e:b2:f5:de:ca:b6:ec:16:74:e6:03:62:e4:24:64:b6:e3:
a7:cd:7e:b1:d3:c1:f9:87:9a:ed:86:5f:2a:22:5d:85:00:7e:
b7:16:aa:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-ams.rpki-client.org