Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0bf8544b-a090-4f47-b031-3aa7afa5cf19/dca3097ea72f45b36be905718ba355681e219154.roa
File:                     dca3097ea72f45b36be905718ba355681e219154.roa (raw, json)
Hash identifier:          +bdkcpHciushUDMATunZ2YKK15tgpolzdyC9b+cmpD8=
Subject key identifier:   AB:09:D1:4B:42:7E:8B:26:C2:B7:97:FC:C4:D3:9C:A9:3B:81:05:3B
Certificate issuer:       /CN=79accacc0240f5ad175ea4c7ab2598e062ba3852
Certificate serial:       10F1D3
Authority key identifier: 81:8D:0A:07:2B:EC:05:E4:2E:6E:D3:53:13:A6:8B:A8:10:BF:F7:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79accacc0240f5ad175ea4c7ab2598e062ba3852.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0bf8544b-a090-4f47-b031-3aa7afa5cf19/dca3097ea72f45b36be905718ba355681e219154.roa
Signing time:             Mon 19 Jul 2021 20:53:18 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     267781
IP address blocks:        200.229.217.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1110483 (0x10f1d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79accacc0240f5ad175ea4c7ab2598e062ba3852
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=dca3097ea72f45b36be905718ba355681e219154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8e:ad:b9:fb:1f:1a:4b:d9:47:41:98:0b:ac:
                    bd:e8:ac:d9:b2:29:88:7f:24:31:e4:68:bf:4c:bf:
                    b3:b5:22:5b:00:7b:6c:f7:1b:ab:42:e7:ac:d7:08:
                    64:6b:d4:41:97:ef:7b:40:15:51:00:c9:42:22:7d:
                    b7:6d:35:73:ab:c7:02:0f:f1:9d:4a:18:74:7c:4a:
                    12:36:5b:8a:5b:f1:51:45:a4:7d:96:fc:e7:f8:91:
                    64:ba:9b:94:ad:7d:0f:0c:c8:e2:c0:4a:c9:f7:9d:
                    a4:29:f9:e3:2f:72:50:55:62:a4:92:2b:e0:f7:ff:
                    fb:7f:2b:72:86:91:62:5b:f9:ce:86:0b:3c:2b:d8:
                    c1:59:b8:bd:ae:d6:7f:1a:ac:35:58:e2:92:2d:d8:
                    33:a6:94:db:fb:ec:08:11:23:08:9b:5c:9b:14:d6:
                    ba:42:9b:e7:d0:0b:f6:51:f0:2f:05:64:1e:1a:c6:
                    ad:33:c1:bc:5d:a0:30:df:da:46:a6:7c:da:15:d8:
                    e0:96:46:c9:00:99:12:be:35:99:5c:c5:4c:21:12:
                    87:e0:83:e3:a1:24:48:b1:4b:bc:84:94:a9:e7:91:
                    94:08:cc:6c:52:9f:9c:3c:dd:bd:b7:48:f2:5f:a6:
                    46:32:00:cc:e3:6d:90:8b:28:17:da:f0:aa:7e:74:
                    4a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:09:D1:4B:42:7E:8B:26:C2:B7:97:FC:C4:D3:9C:A9:3B:81:05:3B
            X509v3 Authority Key Identifier:
                keyid:81:8D:0A:07:2B:EC:05:E4:2E:6E:D3:53:13:A6:8B:A8:10:BF:F7:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79accacc0240f5ad175ea4c7ab2598e062ba3852.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0bf8544b-a090-4f47-b031-3aa7afa5cf19/dca3097ea72f45b36be905718ba355681e219154.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0bf8544b-a090-4f47-b031-3aa7afa5cf19/79accacc0240f5ad175ea4c7ab2598e062ba3852.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:2f:91:87:4d:f9:46:e0:f2:04:26:11:0b:8e:f9:32:0b:87:
         f8:6e:31:bc:a2:75:88:cb:9c:81:60:14:1f:3a:bf:da:f6:fe:
         5e:a4:30:20:77:f2:60:aa:a6:34:43:f3:7d:ce:e5:84:ef:7f:
         9e:c9:69:90:12:d6:20:1f:71:88:c7:54:d2:40:d3:e1:9b:48:
         9f:5e:ae:9d:67:d3:b5:7c:cc:92:1a:2a:58:23:f4:94:46:a0:
         79:d9:df:13:eb:ef:e9:fc:b1:a9:10:33:82:3d:dc:ee:95:1b:
         a2:55:da:72:cb:97:af:94:d4:cd:8e:15:b8:d5:6e:a1:d5:74:
         cf:12:6c:a4:be:0d:48:d5:33:fc:e5:54:35:20:b8:59:fc:2e:
         53:d1:6e:75:ab:f5:da:da:56:90:11:43:47:65:e0:dc:e4:5a:
         d9:58:28:25:f4:b4:cd:e9:49:db:29:c1:63:9f:c5:a0:0a:dd:
         13:59:3d:de:c2:c6:b8:f0:b0:2e:a4:be:fe:9e:3b:86:59:7e:
         95:dc:14:cf:ce:2f:5e:94:8d:d6:d1:ac:ed:91:76:84:ed:cd:
         8a:c9:09:96:07:aa:8f:73:17:c1:d6:d3:f0:0f:76:55:be:5a:
         9f:27:91:e8:8b:b8:14:63:f8:91:e1:83:dc:9e:32:f3:4c:8c:
         7a:52:52:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:08 2023 by rpki-client on console-fra.rpki-client.org