Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/ff2199e899bbea5bcf1184a3761475338323febf.roa
File: ff2199e899bbea5bcf1184a3761475338323febf.roa (raw, json)
Hash identifier: w5ZtcbovR2eYERZDzOE8ZUpdJ+Ud7MHHKlI2jRrUIwQ=
Subject key identifier: 32:C1:8C:34:CE:3E:C1:9B:C7:92:DC:E4:6F:3D:1A:63:EC:D6:9A:07
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 104BE0
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/ff2199e899bbea5bcf1184a3761475338323febf.roa
Signing time: Wed 24 Mar 2021 14:44:15 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.247.85.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1068000 (0x104be0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=ff2199e899bbea5bcf1184a3761475338323febf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:dd:df:77:60:13:34:0e:ad:1b:12:a4:84:d1:
54:33:b1:55:24:88:6e:e5:f1:79:16:a2:62:35:f1:
45:07:65:ae:b4:ac:5f:ed:a5:b6:d5:20:21:30:d7:
50:1c:a0:89:c4:86:44:1f:c8:c2:28:ff:d8:cf:86:
11:76:a0:c3:97:bf:2c:82:d1:c4:b5:33:56:84:36:
39:aa:70:9a:52:0f:44:46:d7:11:bf:72:05:80:0d:
c3:50:59:4b:df:6d:72:63:eb:7e:ec:92:9e:11:96:
81:b7:b9:3e:cd:77:99:7e:af:22:74:cd:b8:c6:b9:
92:c7:c3:0b:81:76:c5:a1:7b:7d:a1:7d:58:46:49:
9c:ce:0c:f5:36:ee:31:30:86:97:d8:bb:90:80:56:
fe:6a:13:9a:bd:62:4a:ec:02:ab:8b:3f:01:54:86:
be:94:0b:fd:e1:51:5c:a8:13:cb:b2:52:80:e0:01:
ec:92:32:f0:c2:26:c4:c5:30:07:94:b1:75:1b:1d:
9f:03:7a:6c:fa:0d:0a:12:6c:ba:19:31:80:f1:e7:
6e:c6:9b:bd:03:72:de:24:25:3d:c6:49:76:48:71:
b5:0a:ad:70:e8:4c:ec:e8:c9:f4:07:98:42:77:e1:
95:c5:f8:85:21:3f:ca:8e:e6:bd:a2:9e:db:85:6d:
b4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C1:8C:34:CE:3E:C1:9B:C7:92:DC:E4:6F:3D:1A:63:EC:D6:9A:07
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/ff2199e899bbea5bcf1184a3761475338323febf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.247.85.0/24
Signature Algorithm: sha256WithRSAEncryption
28:7b:e0:45:82:8d:8a:6a:4f:f2:1a:38:86:f7:bb:52:d4:df:
39:ff:d7:48:3a:0e:d7:a9:b9:82:e0:b4:24:13:64:30:3b:a4:
a7:ff:c5:74:4f:eb:8c:3d:20:4b:98:35:2a:e9:c9:fa:fd:c3:
01:2c:74:9e:2a:d6:32:aa:7e:9f:55:8f:48:a0:0b:87:a5:27:
53:c7:82:b5:c3:2f:57:21:1f:39:50:c0:97:48:e7:85:66:f5:
a1:df:fc:41:26:e5:14:b2:fd:8a:6e:21:b9:be:52:e0:92:ca:
f3:4c:2f:b2:4a:31:02:d6:08:43:35:65:c6:49:ca:09:28:57:
99:d0:e3:49:4a:ac:d1:93:62:f7:97:1c:61:61:d0:f7:f9:f5:
3b:8d:d4:b4:56:30:79:06:5e:6d:29:94:cc:e6:a9:28:84:a5:
be:4f:7b:7c:b3:c5:a1:30:5c:8c:a2:93:b7:2f:b1:2c:1c:aa:
36:38:e2:fd:c5:e0:ae:39:25:48:bd:ea:f8:43:0e:68:92:68:
5d:7d:c7:0a:1d:a6:99:3a:4a:18:ed:26:f2:87:2d:1b:1e:d8:
a1:70:4b:80:69:20:e3:c7:1f:49:83:fe:b5:0d:f2:52:3d:a7:
6d:61:fc:9a:26:2d:64:66:7f:fc:3d:e2:3c:4d:dd:de:34:b8:
21:4f:c6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-ams.rpki-client.org