Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/35b9148bef8649e8145565807824a04dd8c3897a.roa
File:                     35b9148bef8649e8145565807824a04dd8c3897a.roa (raw, json)
Hash identifier:          uycuCdABQtHVAyE23qmpb/rOFW5DfL1oM9pFwWhBmEA=
Subject key identifier:   B5:9B:5B:2C:84:14:6C:D8:88:5B:0D:BA:30:22:B5:90:9B:57:7A:79
Certificate issuer:       /CN=c02c00d9cd0064a040f39e140974a987585ff12e
Certificate serial:       0FF6
Authority key identifier: 6F:F7:9C:05:C6:2B:0F:71:1C:BF:1F:04:30:E3:A1:55:6D:AD:9D:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c02c00d9cd0064a040f39e140974a987585ff12e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/35b9148bef8649e8145565807824a04dd8c3897a.roa
Signing time:             Mon 25 Oct 2021 19:45:39 +0000
ROA not before:           Mon 25 Oct 2021 02:00:00 +0000
ROA not after:            Wed 25 Oct 2023 02:00:00 +0000
asID:                     3640
IP address blocks:        158.97.64.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4086 (0xff6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c02c00d9cd0064a040f39e140974a987585ff12e
        Validity
            Not Before: Oct 25 02:00:00 2021 GMT
            Not After : Oct 25 02:00:00 2023 GMT
        Subject: CN=35b9148bef8649e8145565807824a04dd8c3897a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e4:c9:48:be:fa:02:e7:38:70:82:7a:e9:ba:
                    df:7f:30:9a:65:bb:40:c3:bc:49:ba:f0:66:0e:75:
                    08:85:3e:af:22:63:80:c8:2f:4f:99:7a:43:b5:6d:
                    03:89:96:47:67:8c:9e:b3:f5:99:0a:30:66:1e:49:
                    21:d4:eb:56:c9:38:8a:5c:ad:d1:38:dd:58:ba:d8:
                    7c:e4:9a:0e:54:16:31:bb:62:2e:d6:73:b6:7f:8d:
                    4a:d0:78:91:4d:60:4c:3d:ca:86:8a:e1:89:e9:f7:
                    bf:43:a1:79:c7:de:99:1d:ed:f0:08:45:50:cf:6b:
                    8c:2d:0a:54:ca:e9:0b:64:47:e0:6a:61:16:b4:c8:
                    4e:7a:42:be:c6:09:b6:c5:d9:14:a1:1f:ec:b1:5e:
                    2f:25:21:ea:ff:6a:92:78:fa:04:24:01:42:e4:8c:
                    d6:83:dd:63:53:b4:50:7a:66:da:95:ba:2f:d8:36:
                    3a:12:0d:3d:80:2b:1b:a9:fb:e5:9c:b9:0b:aa:26:
                    58:17:07:8c:52:c6:c4:88:21:f8:48:ca:76:aa:18:
                    21:c2:85:dd:64:22:3f:20:1a:02:b8:dd:ac:83:e2:
                    44:93:70:c0:05:8e:c1:b2:8a:42:0d:29:09:28:a1:
                    ce:e4:1b:54:6c:00:a3:2b:71:fb:f5:c2:da:4a:87:
                    ae:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:9B:5B:2C:84:14:6C:D8:88:5B:0D:BA:30:22:B5:90:9B:57:7A:79
            X509v3 Authority Key Identifier:
                keyid:6F:F7:9C:05:C6:2B:0F:71:1C:BF:1F:04:30:E3:A1:55:6D:AD:9D:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c02c00d9cd0064a040f39e140974a987585ff12e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/35b9148bef8649e8145565807824a04dd8c3897a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/c02c00d9cd0064a040f39e140974a987585ff12e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.97.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:89:38:b4:8c:7b:0d:06:ec:a9:b8:31:44:c1:d0:ab:83:10:
         49:78:2e:a9:dd:c9:de:a7:7f:45:91:04:68:fd:d6:25:86:1e:
         ec:38:6d:61:e4:89:e5:08:2a:59:66:7f:ca:9f:7c:d4:7d:55:
         70:1a:26:3f:a9:6d:57:b5:3e:60:28:a4:1d:2e:97:0f:b6:68:
         8e:3d:f7:8b:60:7a:bf:e4:59:8b:fa:d7:a4:a1:21:85:f6:a1:
         a9:17:b4:7f:d8:94:26:83:50:02:00:e6:cc:7e:a6:b5:b0:b2:
         02:6f:da:30:56:4a:21:ca:b2:50:8d:14:94:33:77:ac:d7:d6:
         34:2b:ab:15:23:a7:80:ec:f2:60:45:9f:68:fe:dc:94:df:42:
         3f:f9:c6:34:6a:04:e8:c4:0e:ca:7e:6d:19:b5:19:f9:8f:b3:
         a9:d9:40:9d:9e:27:3d:8f:a5:7c:6c:6e:0f:e0:36:7b:c0:0f:
         de:b1:25:2f:d8:44:72:d7:9a:84:3d:70:03:59:54:83:fa:ee:
         4e:e8:ce:ab:7d:64:c7:80:fb:03:91:45:b5:eb:06:77:a6:67:
         33:54:a3:fb:e3:dc:9c:be:3a:2c:67:6b:55:25:5e:69:d8:32:
         18:3c:1a:51:bc:6d:f1:7d:49:42:ef:9e:b2:84:0e:fd:64:e1:
         64:0e:b5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:22 2023 by rpki-client on console-ams.rpki-client.org