Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0bf8544b-a090-4f47-b031-3aa7afa5cf19/d8e62e94e38a52230ec44ef121c05af887295134.roa
File:                     d8e62e94e38a52230ec44ef121c05af887295134.roa (raw, json)
Hash identifier:          i2mV3ad47scNyKwNP72CkdVf1HWJKCAKuVeEvMwHf3Q=
Subject key identifier:   58:4F:90:9D:06:D6:27:01:CB:00:07:6B:A3:50:7C:E4:85:E3:C9:89
Certificate issuer:       /CN=79accacc0240f5ad175ea4c7ab2598e062ba3852
Certificate serial:       0DD355
Authority key identifier: 81:8D:0A:07:2B:EC:05:E4:2E:6E:D3:53:13:A6:8B:A8:10:BF:F7:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79accacc0240f5ad175ea4c7ab2598e062ba3852.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0bf8544b-a090-4f47-b031-3aa7afa5cf19/d8e62e94e38a52230ec44ef121c05af887295134.roa
Signing time:             Wed 24 Mar 2021 14:47:33 +0000
ROA not before:           Wed 24 Mar 2021 14:47:33 +0000
ROA not after:            Tue 24 Mar 2026 14:47:33 +0000
asID:                     267781
IP address blocks:        200.229.218.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 906069 (0xdd355)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79accacc0240f5ad175ea4c7ab2598e062ba3852
        Validity
            Not Before: Mar 24 14:47:33 2021 GMT
            Not After : Mar 24 14:47:33 2026 GMT
        Subject: CN=d8e62e94e38a52230ec44ef121c05af887295134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a1:b2:86:78:20:a5:06:c1:41:90:9c:77:4e:
                    a3:18:70:2c:f7:09:28:3c:da:b1:39:b3:0e:6b:db:
                    d8:74:8d:d4:4f:62:02:61:88:c7:6d:4b:52:41:ca:
                    d6:38:d6:0b:28:28:fe:84:09:fb:53:7c:d3:97:00:
                    72:22:9e:e9:ea:9f:40:22:10:02:db:06:75:00:c7:
                    70:e3:d7:92:cc:3d:29:ee:cd:58:17:db:0b:2e:13:
                    94:9f:8a:9e:4d:bd:14:06:c4:9a:91:fd:4f:d3:a1:
                    c5:08:e0:30:1c:af:5e:5a:40:c6:f6:1b:20:a9:58:
                    8f:b9:74:82:8f:2b:40:b7:c0:a4:af:b7:f2:f6:0b:
                    6f:15:2e:47:dc:8a:db:80:ad:10:cb:ec:3f:59:50:
                    58:b0:02:37:00:46:20:72:3a:91:72:5a:ce:7c:25:
                    9e:56:74:98:08:f4:c8:be:79:60:4d:82:ee:6d:9f:
                    86:05:c1:f8:52:1a:c7:d4:1a:22:9a:26:41:9f:94:
                    06:cc:b4:a0:ad:01:2b:20:2a:9b:4d:42:02:3d:1c:
                    2b:07:c2:46:c5:7c:7a:f1:59:2e:84:eb:70:6f:49:
                    a7:8b:73:19:85:5d:cb:31:3d:4a:c1:5a:0c:76:5e:
                    38:c2:77:d4:aa:41:45:01:05:d7:40:9a:93:ea:3a:
                    e7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:4F:90:9D:06:D6:27:01:CB:00:07:6B:A3:50:7C:E4:85:E3:C9:89
            X509v3 Authority Key Identifier:
                keyid:81:8D:0A:07:2B:EC:05:E4:2E:6E:D3:53:13:A6:8B:A8:10:BF:F7:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79accacc0240f5ad175ea4c7ab2598e062ba3852.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0bf8544b-a090-4f47-b031-3aa7afa5cf19/d8e62e94e38a52230ec44ef121c05af887295134.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0bf8544b-a090-4f47-b031-3aa7afa5cf19/79accacc0240f5ad175ea4c7ab2598e062ba3852.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:94:da:8a:f3:b9:fd:4d:40:12:b8:23:06:4b:8f:45:41:13:
         64:34:43:31:4a:0a:79:35:e2:0e:aa:51:92:22:b6:3c:e8:39:
         65:10:e1:fe:0a:85:a9:e5:b0:ad:1b:f0:6d:0c:26:01:d1:46:
         fc:90:96:98:0a:3c:28:3d:04:d0:6e:14:2d:89:d5:ad:cb:2e:
         bd:77:c9:6d:1e:19:a1:16:0a:cc:92:8b:b4:e7:51:d6:d8:0e:
         86:b9:1a:9a:cb:53:c2:2a:fe:07:2f:31:f5:30:b5:60:07:72:
         a0:00:e8:17:3f:fb:f2:30:a3:38:70:b6:b4:4e:1c:b9:ec:42:
         fd:dc:4d:43:25:b0:ce:31:ce:d2:b0:8f:63:95:77:98:58:8c:
         ce:d6:f9:15:58:a4:d5:e2:7d:27:01:0f:8e:1b:0f:d8:14:fd:
         9f:f3:74:01:2d:ce:30:90:a4:70:83:34:ea:49:7c:7b:92:34:
         a3:ab:8c:b9:0e:65:dc:8a:81:55:a6:1f:b3:62:8b:f4:eb:1f:
         b5:00:5f:0f:5e:4d:47:82:cb:fb:da:0f:da:9c:d8:1c:98:c5:
         08:0a:76:9a:55:bb:20:11:97:bf:b9:62:80:60:4d:4d:75:01:
         aa:b3:bf:4a:c7:6d:c6:15:03:26:a0:bc:91:f9:8e:9d:16:05:
         b6:44:49:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-ams.rpki-client.org