Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/fac7439b1962033e7e587dc0cb7bf223bb92518a.roa
File: fac7439b1962033e7e587dc0cb7bf223bb92518a.roa (raw, json)
Hash identifier: hRBEJMwg3FqkI7rZh7fdpI2AFVvRX4e5FvxCnbf3XUo=
Subject key identifier: 4A:39:A9:CC:18:B5:A2:EF:3C:FD:AB:BF:50:5E:91:80:D4:93:E7:A0
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 106CBD
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/fac7439b1962033e7e587dc0cb7bf223bb92518a.roa
Signing time: Wed 24 Mar 2021 14:44:17 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.248.173.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1076413 (0x106cbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=fac7439b1962033e7e587dc0cb7bf223bb92518a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d1:4e:36:25:5b:2c:d5:01:00:22:b4:2a:23:
b7:bb:6d:1e:fd:82:24:a9:0f:b7:91:07:6a:03:e3:
35:96:30:d2:9f:41:4b:15:27:9a:0d:c1:9d:e5:42:
2b:25:7e:22:ce:15:3b:76:08:d6:d9:e9:ae:e1:31:
c3:f3:41:d4:92:16:1f:e7:0a:a5:99:dd:cb:5b:09:
7f:b0:b7:a7:7b:5d:8c:8d:53:8e:f2:8f:5f:5b:11:
1c:56:af:2a:fb:2c:62:34:e4:f0:49:72:0b:13:4e:
d3:6f:5a:0b:56:41:cc:55:c9:7a:8b:f4:70:09:7e:
e5:4a:43:f3:d9:a9:19:02:a0:a4:4d:d4:16:e4:3a:
ba:e9:6d:de:17:86:ab:ee:90:18:79:2b:e4:c7:63:
72:c6:4a:0e:32:f6:92:17:5a:12:da:1e:3e:f1:52:
89:e5:17:4b:07:f1:d2:68:c4:6c:7e:a8:09:b1:da:
a8:dd:89:1e:11:09:f8:6e:fc:26:57:d6:66:56:89:
21:34:a0:ae:16:9e:e3:f1:25:e6:2a:c9:a2:fb:fe:
4e:d1:ea:4c:10:59:fa:ae:00:f6:1a:c2:df:cc:5b:
70:89:d1:a1:95:e7:1a:79:0b:4c:d5:26:24:71:16:
61:27:16:04:47:51:94:4d:73:58:d2:23:2f:0a:e4:
a0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:39:A9:CC:18:B5:A2:EF:3C:FD:AB:BF:50:5E:91:80:D4:93:E7:A0
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/fac7439b1962033e7e587dc0cb7bf223bb92518a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.248.173.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:39:87:49:c7:57:ae:6b:b9:67:26:52:9f:0c:bb:26:59:40:
6d:26:9b:90:7d:9a:13:01:e0:5c:63:89:24:f2:81:34:13:69:
e1:d9:68:c7:0c:90:c2:dc:d4:6b:fd:24:08:07:f5:0a:cd:08:
4f:85:5d:b8:f4:0c:e2:4e:40:b3:fe:65:dc:e2:4e:c9:e1:8c:
ac:9f:39:a4:21:25:65:73:3a:c1:ed:dd:ca:82:f3:ad:62:30:
18:e4:78:ff:23:52:03:21:3f:59:99:53:e8:7c:22:be:0b:23:
cb:43:01:81:98:d2:08:81:8e:8d:24:45:12:54:77:8c:eb:92:
fc:af:30:60:2a:3d:8a:46:77:2c:cc:f4:0c:02:d0:74:28:f5:
43:d4:cb:a1:9e:60:d2:03:a2:bb:c7:85:7c:0f:2d:2c:ae:8d:
47:ba:39:a8:de:3f:5f:a8:fd:26:8b:26:34:d9:4b:f7:f3:61:
07:41:08:32:68:26:82:c5:b8:8b:a8:dc:d5:5e:a8:46:c6:33:
c4:a8:49:c2:31:0e:20:cd:a0:49:50:b6:a0:d6:37:10:82:ad:
de:63:cd:fe:2c:cc:6f:f0:56:b1:16:d2:d5:5f:af:f9:03:2e:
5a:86:70:b0:2d:c9:5d:f4:ad:6b:e4:e4:52:c9:e1:14:7f:1f:
e7:71:9d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-ams.rpki-client.org