Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/ff5e061d6078d009c4cdfa601b989feff67df1c3.roa
File: ff5e061d6078d009c4cdfa601b989feff67df1c3.roa (raw, json)
Hash identifier: J4AlnjOFqFQ4PLzshckqYV/PqpAo7bH9uGdJYz84y9E=
Subject key identifier: 4E:BF:B7:8F:2D:BF:30:4A:8A:7C:9B:F9:10:A7:E2:57:3C:65:79:8B
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 10B0F2
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/ff5e061d6078d009c4cdfa601b989feff67df1c3.roa
Signing time: Wed 24 Mar 2021 14:44:24 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.248.158.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1093874 (0x10b0f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=ff5e061d6078d009c4cdfa601b989feff67df1c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:30:d1:2d:4f:51:78:ac:64:13:08:8d:7c:7f:
d3:2d:e3:d3:7b:60:83:17:18:6c:f5:37:52:2d:39:
ad:f0:e2:0b:a9:00:ce:90:ac:c2:f9:a1:c1:bc:90:
ee:74:95:bc:22:03:f7:91:f6:f6:fd:18:36:fb:f1:
4c:7e:48:03:b6:2d:3c:81:55:39:78:5d:30:b5:c1:
65:15:2c:67:8a:03:52:85:58:ec:9c:95:72:2d:96:
b7:5f:bd:77:db:a3:0d:54:96:2e:1f:1d:70:46:c1:
fc:fb:b3:f2:5b:dd:e5:c6:5a:38:31:02:58:56:a7:
20:0f:2f:84:bb:dd:dc:ea:3e:9c:1d:3b:49:7b:e1:
78:0a:6c:14:a5:87:85:f0:32:f7:ca:db:fb:8f:f8:
a6:10:7b:34:3e:3e:8f:e1:56:89:3c:f8:e0:21:0b:
6e:be:f8:92:11:b8:ea:28:ab:34:ac:85:f9:a7:5b:
79:9b:df:c6:5a:b6:91:98:29:ff:78:af:12:8c:c6:
b2:31:25:91:59:8b:6d:03:6f:87:02:f1:bb:2f:9f:
6e:d9:7f:33:27:ba:d4:c9:86:f6:be:c3:65:a2:57:
8f:a1:26:55:bf:82:ea:84:43:31:01:2a:78:4e:98:
9f:f2:5c:58:b5:f9:9d:48:ec:bc:fc:89:cc:88:29:
ba:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BF:B7:8F:2D:BF:30:4A:8A:7C:9B:F9:10:A7:E2:57:3C:65:79:8B
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/ff5e061d6078d009c4cdfa601b989feff67df1c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.248.158.0/24
Signature Algorithm: sha256WithRSAEncryption
78:46:4a:06:4e:d9:12:ed:9d:2f:74:7e:fb:ad:27:87:a3:34:
6f:ce:c0:d6:4e:cc:45:9e:81:5a:af:11:79:1f:ba:a0:91:5b:
97:48:63:e2:52:99:bc:d1:66:e4:6c:68:53:b6:b9:da:f9:42:
3e:12:32:bf:39:f0:90:f6:83:ba:e3:d7:a5:07:46:d0:af:4e:
fb:98:e8:47:b8:bd:6b:0c:bd:f5:67:9f:02:53:67:7c:a2:18:
ad:68:b0:b2:89:2f:83:a0:e6:d5:b2:94:fe:a5:b8:1e:10:05:
26:8b:d6:b7:0a:ff:3b:0b:cf:9d:01:de:d1:a7:65:41:99:7c:
a0:66:ab:b8:7e:14:59:3b:9e:e4:34:28:19:83:b6:22:16:c2:
45:ea:58:08:33:16:8e:e6:e7:79:9a:ef:a4:88:25:3a:1a:b5:
6d:91:39:2f:e6:0a:d7:82:20:b4:a0:df:c5:69:3e:dd:d6:81:
56:46:37:e0:9c:0c:cd:85:a3:6f:a8:80:68:4d:0e:36:60:70:
8a:1c:95:1e:20:64:7f:f2:dd:f3:fe:65:bd:e8:c1:6d:7a:e3:
09:56:d1:8c:24:b9:d8:5e:76:67:8b:cc:96:78:64:db:5a:57:
0d:44:0f:d3:14:90:b0:f1:bc:6a:8f:ab:b9:2b:83:c8:ea:1d:
d0:39:a1:41
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDELDyMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
MGE0ZmE0Y2FmNDgwY2I3NmMwYmM0YWVmYmY2MzNmOGNlM2IxZjkwHhcNMjEwMzI0
MTQ0MzQ0WhcNMjYwMzI0MTQ0MzQ0WjAzMTEwLwYDVQQDEyhmZjVlMDYxZDYwNzhk
MDA5YzRjZGZhNjAxYjk4OWZlZmY2N2RmMWMzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA6TDRLU9ReKxkEwiNfH/TLePTe2CDFxhs9TdSLTmt8OILqQDO
kKzC+aHBvJDudJW8IgP3kfb2/Rg2+/FMfkgDti08gVU5eF0wtcFlFSxnigNShVjs
nJVyLZa3X71326MNVJYuHx1wRsH8+7PyW93lxlo4MQJYVqcgDy+Eu93c6j6cHTtJ
e+F4CmwUpYeF8DL3ytv7j/imEHs0Pj6P4VaJPPjgIQtuvviSEbjqKKs0rIX5p1t5
m9/GWraRmCn/eK8SjMayMSWRWYttA2+HAvG7L59u2X8zJ7rUyYb2vsNlolePoSZV
v4LqhEMxASp4Tpif8lxYtfmdSOy8/InMiCm6eQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFE6/t48tvzBKinyb+RCn4lc8ZXmLMB8GA1UdIwQYMBaAFEixvQ/Kc7iuYUnO
JUbMDxXgfnaDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDkwYTRm
YTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFmOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODQyYjYzM2YtODBiOC00ZjRjLWJlOTgtNjU2ZDZm
OWE3ZjM4L2ZmNWUwNjFkNjA3OGQwMDljNGNkZmE2MDFiOTg5ZmVmZjY3ZGYxYzMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NDJiNjMzZi04MGI4LTRmNGMtYmU5OC02NTZk
NmY5YTdmMzgvNDkwYTRmYTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFm
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIT4njANBgkqhkiG9w0BAQsFAAOCAQEAeEZKBk7ZEu2dL3R+
+60nh6M0b87A1k7MRZ6BWq8ReR+6oJFbl0hj4lKZvNFm5GxoU7a52vlCPhIyvznw
kPaDuuPXpQdG0K9O+5joR7i9awy99WefAlNnfKIYrWiwsokvg6Dm1bKU/qW4HhAF
JovWtwr/OwvPnQHe0adlQZl8oGaruH4UWTue5DQoGYO2IhbCRepYCDMWjubneZrv
pIglOhq1bZE5L+YK14IgtKDfxWk+3daBVkY34JwMzYWjb6iAaE0ONmBwihyVHiBk
f/Ld8/5lvejBbXrjCVbRjCS52F52Z4vMlnhk21pXDUQP0xSQsPG8ao+ruSuDyOod
0DmhQQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-ams.rpki-client.org