Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/e91dfcd767d99d33fa74a1107be8b78293f4ac5f.roa
File:                     e91dfcd767d99d33fa74a1107be8b78293f4ac5f.roa (raw, json)
Hash identifier:          RplW64C2ZtD2zDWVDsMj1tRSe3Ylqb9gh2bOvX+8vNo=
Subject key identifier:   CF:89:85:F5:10:A6:FF:4B:D9:87:15:F5:80:5D:A1:56:78:07:46:44
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       10C4CB
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/e91dfcd767d99d33fa74a1107be8b78293f4ac5f.roa
Signing time:             Wed 24 Mar 2021 14:44:25 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.247.217.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1098955 (0x10c4cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=e91dfcd767d99d33fa74a1107be8b78293f4ac5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b3:4b:ff:8a:34:ef:d8:1b:aa:a1:7f:c6:40:
                    2f:0b:15:f1:5f:e7:ee:3b:33:57:68:0a:16:f8:63:
                    cd:03:1f:47:87:61:4d:e2:2b:41:97:03:6c:43:67:
                    ed:17:1f:f4:da:73:8d:33:c2:cb:5f:f5:5e:6f:81:
                    ca:f2:95:87:ca:8f:ba:ab:79:7e:63:51:1f:a2:63:
                    07:bb:4b:24:ee:61:59:a7:45:5c:08:52:47:8c:c6:
                    0e:b3:03:5a:2b:49:4c:78:92:1b:6b:f6:3f:24:dd:
                    f0:3b:73:86:a5:71:d9:b4:44:21:ed:a9:12:c5:ff:
                    c2:d8:67:36:ef:6f:c1:2e:20:55:58:3e:a2:a7:6b:
                    e1:64:d2:9b:a7:a8:3a:25:75:3e:cb:45:8c:44:af:
                    bb:9b:8e:d7:9b:35:e2:da:20:21:4c:2b:ac:ec:71:
                    32:27:6e:c7:ec:8c:5a:df:de:90:6d:7b:e4:4b:ab:
                    c4:3e:14:c0:dc:d7:80:89:26:80:60:db:f3:69:71:
                    be:cf:6d:09:8b:ab:48:54:53:86:89:8e:8b:67:40:
                    b6:a6:45:0a:d7:a9:f9:84:13:97:cf:f0:f5:21:d5:
                    10:61:b6:dd:09:36:47:b9:96:13:93:85:8e:99:60:
                    a0:2d:54:2c:ab:87:a9:b1:e6:29:db:f5:62:ae:14:
                    df:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:89:85:F5:10:A6:FF:4B:D9:87:15:F5:80:5D:A1:56:78:07:46:44
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/e91dfcd767d99d33fa74a1107be8b78293f4ac5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:6f:df:3f:e7:ac:1e:f5:9e:1c:e7:cd:d9:fd:ed:75:5f:b4:
         25:a6:7b:7f:cf:90:33:b1:0c:66:66:6e:e8:b1:de:cc:49:ae:
         75:ca:03:a7:61:20:9a:b5:c8:b9:29:9d:1f:1f:c4:b9:be:a6:
         9f:3c:b8:95:bb:5e:de:5b:8b:d9:9a:67:86:37:f0:50:b5:54:
         9c:8b:fb:c9:ef:02:04:6c:e3:24:db:58:7f:e4:6a:14:55:f1:
         cd:c6:a6:3f:fb:f2:76:f7:2a:1f:d6:dc:be:41:25:80:e9:e9:
         1b:64:5d:49:e7:ac:ba:45:48:a7:e8:b8:67:bb:6c:5c:68:69:
         1c:68:f7:8b:28:5a:28:31:df:59:17:19:8d:0a:19:52:c7:8d:
         69:ee:2f:ae:df:60:2a:11:38:76:12:cd:7c:77:8e:af:6d:38:
         72:ed:ec:38:cc:5b:0f:09:7d:a2:2f:14:87:0a:0d:3f:e3:c3:
         0f:8a:57:61:0d:bd:18:8e:4e:3b:cb:f3:4d:d6:1a:ce:a1:8b:
         57:50:0e:af:80:96:45:40:e7:c1:96:46:c2:fa:3b:59:41:1e:
         39:cd:52:2d:b4:63:68:51:ee:06:4e:eb:63:06:06:4e:cd:5e:
         59:f4:be:4a:02:72:32:8c:c2:41:73:89:31:87:cb:38:fd:2c:
         ce:10:18:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-ams.rpki-client.org