Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/003bf825-b144-476d-89c7-4987bdc328da/64aaa6aa0ecefd35cbbea9f11b20cd93a6d0a423.roa
File:                     64aaa6aa0ecefd35cbbea9f11b20cd93a6d0a423.roa (raw, json)
Hash identifier:          WvF7YBzG6lGN8BTH8bWlFG0gBJDAzLZku9RN0UKwlDs=
Subject key identifier:   F3:D9:84:AC:72:B8:0F:23:6D:BC:F4:23:A7:71:02:9A:AA:95:30:DF
Certificate issuer:       /CN=b8e5cbfb9465a07deba594219e5ffc698fbfbabb
Certificate serial:       BCF8
Authority key identifier: 00:6D:71:13:48:C6:78:C3:31:34:E9:B4:AB:28:C4:BB:2B:F0:E7:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8e5cbfb9465a07deba594219e5ffc698fbfbabb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/003bf825-b144-476d-89c7-4987bdc328da/64aaa6aa0ecefd35cbbea9f11b20cd93a6d0a423.roa
Signing time:             Mon 09 May 2022 21:58:27 +0000
ROA not before:           Mon 25 Apr 2022 03:00:00 +0000
ROA not after:            Thu 25 May 2023 03:00:00 +0000
asID:                     28036
IP address blocks:        165.98.219.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48376 (0xbcf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8e5cbfb9465a07deba594219e5ffc698fbfbabb
        Validity
            Not Before: Apr 25 03:00:00 2022 GMT
            Not After : May 25 03:00:00 2023 GMT
        Subject: CN=64aaa6aa0ecefd35cbbea9f11b20cd93a6d0a423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:16:57:4f:4b:eb:55:91:0d:de:6c:2a:e5:13:
                    45:86:fe:19:0d:b2:b0:06:b1:f6:40:50:26:83:fa:
                    89:e5:06:4d:6c:e2:b3:21:57:0b:e5:2f:d4:5a:6a:
                    84:0b:30:e6:da:9a:4c:8b:07:93:70:8e:be:15:40:
                    81:49:35:34:3d:e3:f1:e5:24:b8:54:6b:93:1e:ea:
                    89:f2:0d:a8:7b:6a:0b:2e:d7:db:39:d3:86:cd:85:
                    ad:c0:5e:97:5c:82:f6:80:75:cb:f0:88:6c:95:21:
                    49:ca:4b:6d:73:c3:02:9c:ce:fa:7a:a4:ba:01:87:
                    ab:2b:c6:d7:3b:58:1a:92:24:ec:96:cf:5d:84:31:
                    33:06:88:95:5f:70:da:fe:38:d5:f5:c5:6b:d3:b3:
                    72:d1:bc:8c:75:83:a8:74:a9:9c:62:44:9f:a3:df:
                    43:1d:2b:24:65:3d:ed:bc:e9:d1:63:7e:b6:6b:c2:
                    60:50:82:7d:fc:79:4a:70:1a:2e:9a:6a:e8:fc:e7:
                    31:dd:28:ba:b3:74:21:23:44:e5:88:9e:0e:e0:bf:
                    bc:09:fd:f2:08:8e:48:93:5a:53:92:75:ec:17:28:
                    44:e1:37:f6:70:db:65:b2:99:13:8d:20:aa:9b:1f:
                    4e:6c:ce:ee:db:02:20:05:a3:60:4a:8f:90:7d:87:
                    31:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D9:84:AC:72:B8:0F:23:6D:BC:F4:23:A7:71:02:9A:AA:95:30:DF
            X509v3 Authority Key Identifier:
                keyid:00:6D:71:13:48:C6:78:C3:31:34:E9:B4:AB:28:C4:BB:2B:F0:E7:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8e5cbfb9465a07deba594219e5ffc698fbfbabb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/003bf825-b144-476d-89c7-4987bdc328da/64aaa6aa0ecefd35cbbea9f11b20cd93a6d0a423.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/003bf825-b144-476d-89c7-4987bdc328da/b8e5cbfb9465a07deba594219e5ffc698fbfbabb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.98.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:ed:46:37:47:a3:81:5f:60:1c:02:bd:e6:2d:ed:4b:2d:2a:
         0f:25:5a:b8:4e:7c:5c:cd:21:e8:8b:ec:21:45:61:99:28:77:
         ca:49:72:47:d1:f4:a9:60:41:2d:97:44:4a:2b:46:c2:72:9a:
         34:93:74:3a:1b:30:19:f6:4f:28:30:7d:2c:d1:94:25:ce:f5:
         c2:8b:5c:02:44:02:8a:99:21:62:8b:36:01:51:36:c8:45:26:
         4c:e8:1c:a4:37:1b:4a:a7:30:aa:62:17:64:bb:bb:ba:b5:38:
         fc:18:ef:06:b6:2a:06:d2:b3:d8:cb:70:2b:8c:e0:ab:c5:3a:
         a9:bb:bd:86:f1:9a:75:e2:a5:c7:a9:47:cb:4c:7a:46:cb:02:
         55:92:8c:d0:d6:eb:58:5e:f0:b5:18:19:83:fb:8b:32:47:77:
         b1:6a:bf:b9:9b:e6:11:8c:35:47:24:af:c8:a2:03:78:eb:b4:
         6e:81:6c:71:d8:58:5b:1e:67:0b:23:8f:9e:76:83:f0:4b:8b:
         d2:d3:5e:0c:d2:ec:90:88:f2:13:55:ed:62:0c:98:e3:0f:1a:
         c3:cc:05:9a:6a:98:17:31:44:5a:a5:84:e0:5f:33:fc:e1:42:
         f8:93:00:5b:53:de:7e:09:9c:1e:49:a6:52:78:b8:23:17:0a:
         c6:d3:a8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:07 2023 by rpki-client on console-fra.rpki-client.org