Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/c79f0cf228afe3f795bf2fac3724282d8c5e804f.roa
File:                     c79f0cf228afe3f795bf2fac3724282d8c5e804f.roa (raw, json)
Hash identifier:          D8hf+MonwHEPTYXWngSr9qr/oPShsX0kXpQjaObpy8Y=
Subject key identifier:   32:A0:4D:82:49:80:E0:05:0E:E9:A8:8C:E6:F8:3A:8B:09:0B:ED:29
Certificate issuer:       /CN=eb6de066f1c70b82f75b54d19209c0e03f1f0279
Certificate serial:       148D60
Authority key identifier: 76:12:49:46:59:CF:CF:F8:19:4B:DD:87:76:20:C2:55:68:E0:EA:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eb6de066f1c70b82f75b54d19209c0e03f1f0279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/c79f0cf228afe3f795bf2fac3724282d8c5e804f.roa
Signing time:             Wed 12 Jan 2022 17:50:24 +0000
ROA not before:           Wed 12 Jan 2022 03:00:00 +0000
ROA not after:            Sat 12 Jan 2030 03:00:00 +0000
asID:                     17079
IP address blocks:        186.32.96.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1346912 (0x148d60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb6de066f1c70b82f75b54d19209c0e03f1f0279
        Validity
            Not Before: Jan 12 03:00:00 2022 GMT
            Not After : Jan 12 03:00:00 2030 GMT
        Subject: CN=c79f0cf228afe3f795bf2fac3724282d8c5e804f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:bd:a3:b2:2a:7b:d8:16:b2:d4:71:08:42:c2:
                    95:70:be:33:0d:da:f7:b8:92:a7:df:03:da:f6:af:
                    21:1a:ac:7e:c2:8e:3c:f9:45:e9:90:3b:b2:0c:52:
                    51:cb:32:69:82:c3:1f:5a:6f:4d:95:4f:f5:78:98:
                    34:95:b5:7a:69:bb:69:c4:5d:44:43:a7:2b:ec:dd:
                    59:d3:e2:87:ae:ec:f7:8e:95:62:d3:27:f7:9c:53:
                    89:f3:ff:33:fb:71:27:c1:0e:c3:5d:a1:d6:a9:3c:
                    92:2c:91:2c:e6:96:16:38:05:a4:c2:7e:62:30:9e:
                    3e:3c:33:88:e4:90:90:b3:26:ff:20:af:1a:ef:32:
                    be:d0:43:fc:a5:db:08:08:1c:2e:01:76:02:61:fa:
                    2f:b6:26:ec:dd:9b:d6:07:4a:3c:69:66:a4:1b:6d:
                    61:b3:92:9b:4c:0b:2c:7c:c5:f9:c2:c5:16:91:26:
                    c8:76:28:d1:35:84:3f:2e:48:61:af:77:3e:0a:7e:
                    13:be:a7:c4:bc:84:a1:ba:f9:7b:39:65:c5:da:45:
                    ab:a1:83:86:4a:3d:ab:41:7e:f1:15:6f:21:4c:01:
                    d1:26:5a:0d:20:98:bf:6a:59:50:dd:62:2c:32:b8:
                    45:5a:53:9e:73:9f:c8:ae:15:e2:ef:a3:40:60:5c:
                    fd:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A0:4D:82:49:80:E0:05:0E:E9:A8:8C:E6:F8:3A:8B:09:0B:ED:29
            X509v3 Authority Key Identifier:
                keyid:76:12:49:46:59:CF:CF:F8:19:4B:DD:87:76:20:C2:55:68:E0:EA:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eb6de066f1c70b82f75b54d19209c0e03f1f0279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/c79f0cf228afe3f795bf2fac3724282d8c5e804f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/eb6de066f1c70b82f75b54d19209c0e03f1f0279.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.32.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:c6:bb:a8:91:a4:15:7a:68:4e:80:ce:36:a0:73:59:9a:27:
         3e:14:0a:3d:67:04:d1:58:e8:1d:b4:d9:c3:ee:97:ba:aa:42:
         55:47:2d:90:cd:a7:28:40:c5:db:e8:6b:78:83:b3:fd:da:d5:
         e6:9d:20:30:1a:ff:63:b0:8a:d0:51:dd:10:ad:00:2e:c6:42:
         98:23:c3:aa:60:2c:16:ed:f0:fc:8f:a0:82:94:b1:33:4e:94:
         9d:93:58:86:af:c2:16:ac:17:15:d5:db:aa:e0:14:aa:fd:15:
         6d:b0:45:0c:fe:84:31:ab:33:6e:18:3c:cf:f9:45:3d:b5:22:
         e2:f4:7e:ab:95:09:45:49:d7:0b:ca:8a:aa:52:0d:ea:30:a9:
         2a:bb:b3:02:86:ef:e1:73:c5:2a:6d:d0:3c:6b:a5:7b:e3:05:
         d8:4b:55:bd:38:92:66:48:14:08:7e:5c:1a:cf:d3:49:f8:72:
         09:c4:4b:c7:92:37:15:10:0c:94:86:75:a6:92:62:2f:ed:42:
         e0:00:37:92:6e:b8:7a:3a:10:bb:e7:95:2e:67:df:bf:fd:84:
         38:e5:c9:fb:38:df:dd:28:27:de:64:4a:11:da:50:bb:b1:e6:
         55:5f:b6:92:67:f6:d9:08:53:06:38:e4:11:a6:4e:eb:82:59:
         3e:51:e3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:42 2023 by rpki-client on console-fra.rpki-client.org