Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00434ddc-0b4e-4657-a86c-e3d95c749719/ab98499b6fca3fde8e88f26996a18fd481b7e123.roa
File:                     ab98499b6fca3fde8e88f26996a18fd481b7e123.roa (raw, json)
Hash identifier:          yQZIIxAT+IAyxy5QSVkoIsRFd4zMQNMORe9q+YB2jw0=
Subject key identifier:   5F:99:0B:CF:21:06:B1:8C:28:D2:7A:4F:B9:F0:3C:B3:17:86:32:13
Certificate issuer:       /CN=385854f9fee954935903b58b4043860f6a590865
Certificate serial:       029905
Authority key identifier: 4B:42:4D:D5:0A:E1:A8:BC:CA:D4:5C:03:13:07:A6:DF:87:F3:3B:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/385854f9fee954935903b58b4043860f6a590865.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00434ddc-0b4e-4657-a86c-e3d95c749719/ab98499b6fca3fde8e88f26996a18fd481b7e123.roa
Signing time:             Sun 20 Feb 2022 06:18:53 +0000
ROA not before:           Fri 05 Nov 2021 03:00:00 +0000
ROA not after:            Wed 05 Nov 2025 03:00:00 +0000
asID:                     265587
IP address blocks:        201.150.116.0/22 maxlen: 24
                          2806:3bc::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170245 (0x29905)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=385854f9fee954935903b58b4043860f6a590865
        Validity
            Not Before: Nov  5 03:00:00 2021 GMT
            Not After : Nov  5 03:00:00 2025 GMT
        Subject: CN=ab98499b6fca3fde8e88f26996a18fd481b7e123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f5:2a:44:5c:06:17:28:6c:ca:dc:a8:b2:be:
                    fc:5a:4e:db:97:f4:98:f1:07:a5:a6:ea:2a:12:4b:
                    22:19:08:4e:38:a4:5d:d2:8b:a6:11:6a:66:a2:d0:
                    bb:d3:c1:22:4b:67:06:58:dd:14:a3:01:85:71:37:
                    73:2b:5e:59:02:c6:ba:ae:88:e4:0c:70:4f:5e:24:
                    d8:26:69:5c:a0:c1:00:6d:75:0d:ed:8c:44:45:43:
                    99:a4:4a:56:8e:c2:d6:40:ee:67:5b:87:dc:51:39:
                    a8:ba:13:2b:9c:a5:3f:7d:d8:96:90:7c:46:fd:f0:
                    37:07:9c:86:05:ec:5c:a2:3c:2b:64:8d:bf:ac:5c:
                    2e:05:6a:3e:f2:3c:cb:0a:a2:65:c7:99:6f:71:26:
                    d5:f5:cb:e4:f4:f9:16:43:6f:8e:14:c9:64:93:65:
                    b7:20:ec:be:db:95:b6:c5:09:2b:62:80:17:2e:14:
                    7f:f6:16:82:0b:64:70:43:09:a5:02:8c:70:37:04:
                    3e:f8:13:63:88:37:70:f5:2a:b9:4f:8e:1b:43:cb:
                    76:7d:3b:35:be:fe:fd:4f:e1:6d:2a:37:90:a3:eb:
                    26:91:06:16:bf:a4:24:b4:a1:8a:fe:b8:af:1e:d0:
                    78:f8:d0:5b:09:af:30:79:10:79:d5:62:ae:99:3d:
                    74:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:99:0B:CF:21:06:B1:8C:28:D2:7A:4F:B9:F0:3C:B3:17:86:32:13
            X509v3 Authority Key Identifier:
                keyid:4B:42:4D:D5:0A:E1:A8:BC:CA:D4:5C:03:13:07:A6:DF:87:F3:3B:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/385854f9fee954935903b58b4043860f6a590865.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00434ddc-0b4e-4657-a86c-e3d95c749719/ab98499b6fca3fde8e88f26996a18fd481b7e123.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00434ddc-0b4e-4657-a86c-e3d95c749719/385854f9fee954935903b58b4043860f6a590865.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.116.0/22
                IPv6:
                  2806:3bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:73:21:6b:7a:0e:ec:2a:0e:de:43:f9:12:03:5c:b1:e8:98:
         29:45:1c:94:14:67:51:bb:4b:de:af:b7:3c:59:f3:22:27:c2:
         ef:ca:68:51:3c:73:48:20:ad:c3:5a:59:3d:6b:38:3f:f3:d9:
         a3:23:70:f6:40:7d:2d:37:40:6b:12:23:c3:e2:26:01:06:20:
         f7:88:51:f8:61:26:95:b3:58:2b:9f:22:d6:0f:ac:f9:de:78:
         ef:dd:b9:32:78:b8:77:4e:1a:12:86:2c:6b:74:bf:9a:fb:ad:
         47:e7:67:1e:c4:a4:aa:fe:2c:47:9d:09:49:4c:b3:15:81:b4:
         c2:ba:9d:41:4e:ee:0d:7d:99:3e:b0:87:a5:ef:92:55:d4:67:
         31:94:4c:4e:a0:8d:a1:9a:ed:dc:0b:8b:f7:ae:67:7b:88:78:
         9c:5a:3f:37:69:fe:62:ee:8f:86:a6:f7:40:05:c1:8a:d5:5c:
         7a:ac:8a:de:03:38:3e:f4:87:bb:9c:60:1f:f7:b6:9f:17:d6:
         b0:c2:91:8d:e0:c8:0e:f1:39:b2:d6:e7:41:bf:32:fc:5e:11:
         ea:b6:84:b1:01:5d:c5:56:01:e5:80:0b:89:1b:4c:a4:23:40:
         96:9d:a9:53:f7:c1:8d:3f:6a:98:09:99:d2:df:d4:f9:e6:f2:
         d2:fc:22:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:22 2023 by rpki-client on console-ams.rpki-client.org