Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0bf8544b-a090-4f47-b031-3aa7afa5cf19/ab27f7ce64bcc5470c8ad8920861a353bdce331f.roa
File:                     ab27f7ce64bcc5470c8ad8920861a353bdce331f.roa (raw, json)
Hash identifier:          +RTVGkY4DvTwW4BMgF4UMlPU/VsN1VbYcIduOQ67+Qg=
Subject key identifier:   CB:85:F0:9B:E5:47:84:EF:A8:AF:40:2A:F3:BC:D0:5B:81:7C:6F:27
Certificate issuer:       /CN=79accacc0240f5ad175ea4c7ab2598e062ba3852
Certificate serial:       110810
Authority key identifier: 81:8D:0A:07:2B:EC:05:E4:2E:6E:D3:53:13:A6:8B:A8:10:BF:F7:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79accacc0240f5ad175ea4c7ab2598e062ba3852.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0bf8544b-a090-4f47-b031-3aa7afa5cf19/ab27f7ce64bcc5470c8ad8920861a353bdce331f.roa
Signing time:             Thu 22 Jul 2021 00:54:24 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     267781
IP address blocks:        200.229.216.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1116176 (0x110810)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79accacc0240f5ad175ea4c7ab2598e062ba3852
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=ab27f7ce64bcc5470c8ad8920861a353bdce331f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7e:fa:d4:27:1d:67:f1:25:ec:78:2d:af:4a:
                    a2:20:1b:df:bd:4f:b0:fb:74:23:9d:e1:4d:98:fd:
                    e0:a7:56:26:a0:32:60:b5:ee:0b:cf:30:52:6b:55:
                    92:db:af:00:db:42:5b:5e:59:94:a3:08:ab:c6:bf:
                    d5:c3:0e:cd:1a:a1:30:d5:0f:1f:5f:ab:67:28:f0:
                    a0:c5:5e:8e:58:c2:43:b0:21:fc:22:21:2f:a3:7a:
                    28:0a:a4:8e:9a:e0:a2:3f:62:cc:00:b8:31:49:28:
                    36:96:22:51:be:3e:62:84:3e:cb:72:8e:05:f1:15:
                    d7:2d:cd:05:e4:2f:12:58:87:c3:3e:b0:1e:17:3b:
                    75:52:81:6d:d1:ec:70:6f:c7:87:00:e5:4c:cc:f2:
                    09:0e:96:70:48:a4:79:2a:d5:e3:51:87:30:6b:b0:
                    93:22:6f:6a:f4:d9:df:0f:86:e2:25:f7:35:4f:9c:
                    4b:37:25:48:03:6b:14:65:cd:c1:59:8a:a5:79:0e:
                    86:da:4f:be:0f:73:56:07:3e:4a:e8:a5:89:d9:d2:
                    ac:90:41:8e:60:1d:04:cb:1e:63:81:be:18:e1:9c:
                    8f:49:b6:7c:1d:36:11:84:5a:ed:74:f7:11:55:96:
                    54:09:63:08:7d:af:fb:9b:44:c4:1b:63:0f:45:8f:
                    68:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:85:F0:9B:E5:47:84:EF:A8:AF:40:2A:F3:BC:D0:5B:81:7C:6F:27
            X509v3 Authority Key Identifier:
                keyid:81:8D:0A:07:2B:EC:05:E4:2E:6E:D3:53:13:A6:8B:A8:10:BF:F7:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79accacc0240f5ad175ea4c7ab2598e062ba3852.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0bf8544b-a090-4f47-b031-3aa7afa5cf19/ab27f7ce64bcc5470c8ad8920861a353bdce331f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0bf8544b-a090-4f47-b031-3aa7afa5cf19/79accacc0240f5ad175ea4c7ab2598e062ba3852.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:79:39:7f:2c:d0:fe:8e:0f:c9:83:6a:52:4a:a7:be:84:69:
         d8:c0:03:a6:b7:28:a8:b2:0f:ab:bf:01:d2:2b:6a:7a:ce:31:
         6c:25:2d:44:a3:bb:ff:c1:d6:0d:c8:df:b7:4e:07:14:07:b1:
         9c:44:e3:32:47:d8:51:86:0a:b5:df:b9:52:6c:70:e5:9c:ff:
         be:34:79:08:21:6c:0b:ab:6c:4e:57:1d:00:0e:19:04:a3:4d:
         14:f0:4c:37:72:6f:c0:9d:59:09:a9:29:f7:ee:3d:ae:42:76:
         1a:ac:e2:a9:e9:a6:f9:7d:cf:63:9d:b4:da:0c:61:c4:d8:6f:
         29:58:ea:38:7f:6e:e1:0d:ec:74:e9:22:a9:96:2c:32:6f:a1:
         6c:2a:d4:40:0e:63:22:74:c1:f6:c1:95:a5:a8:ba:5e:54:48:
         a1:6c:7c:f3:52:32:48:5e:27:de:a4:85:fb:9f:ed:ff:bb:39:
         84:6d:71:5b:cb:9c:5a:c1:8c:a0:a5:d6:e7:46:4f:2e:16:56:
         d3:46:73:3e:fa:0c:b8:ad:95:7a:95:f2:90:2e:67:23:31:8f:
         c4:69:f4:0e:1b:70:77:f4:12:a4:de:e7:05:3d:3b:61:f8:df:
         25:cd:04:db:e2:77:5e:03:4e:ad:75:bb:b5:78:c9:b6:90:ba:
         4d:6c:de:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:08 2023 by rpki-client on console-fra.rpki-client.org