Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0cd517cc-1f5c-4cfd-9b92-b7e90cf6974e/effec41a7b821fffd90578d3f8416fff094015e4.roa
File:                     effec41a7b821fffd90578d3f8416fff094015e4.roa (raw, json)
Hash identifier:          ggLa0w2934/m0Eia1tErbPhjgMG6NWh8Gw/8tIOkrlg=
Subject key identifier:   2E:57:CF:71:B6:28:0D:9E:4E:72:37:6E:4B:CD:94:85:35:FC:AF:A6
Certificate issuer:       /CN=0d5340d79102b793331c752f0dbbe0ddca1e18f6
Certificate serial:       0DAF50
Authority key identifier: F6:86:EF:12:82:2D:FC:94:82:86:B4:5C:22:31:32:55:C1:75:E2:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0d5340d79102b793331c752f0dbbe0ddca1e18f6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0cd517cc-1f5c-4cfd-9b92-b7e90cf6974e/effec41a7b821fffd90578d3f8416fff094015e4.roa
Signing time:             Wed 24 Mar 2021 14:30:24 +0000
ROA not before:           Wed 24 Mar 2021 14:30:24 +0000
ROA not after:            Tue 24 Mar 2026 14:30:24 +0000
asID:                     28009
IP address blocks:        190.93.192.0/20 maxlen: 24
                          190.93.208.0/20 maxlen: 24
                          200.85.176.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 896848 (0xdaf50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d5340d79102b793331c752f0dbbe0ddca1e18f6
        Validity
            Not Before: Mar 24 14:30:24 2021 GMT
            Not After : Mar 24 14:30:24 2026 GMT
        Subject: CN=effec41a7b821fffd90578d3f8416fff094015e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ee:37:d2:67:60:06:69:ec:d0:be:df:b5:9f:
                    8c:22:b5:44:c9:69:ac:13:1d:9e:71:c0:8b:2f:de:
                    05:c0:c3:a0:fb:d9:d0:ed:43:34:05:96:63:e8:fc:
                    b3:ae:a3:d4:20:46:80:d4:f9:eb:53:57:1f:4a:85:
                    f3:88:4a:ee:77:d7:f0:2c:b6:5f:7b:db:c2:ca:3a:
                    e9:52:0c:ad:a0:a0:bf:f5:c9:07:ef:19:32:7c:da:
                    d2:03:12:f7:a8:dd:3f:18:f6:07:3e:a4:ae:2f:f2:
                    01:82:f8:d3:a1:7a:2f:2a:1f:ea:7a:6d:df:97:2c:
                    36:d0:1c:1f:d1:81:dd:d2:51:3e:e8:23:3b:e0:d1:
                    f5:83:77:25:b6:6e:c6:b4:6d:24:75:c7:93:22:01:
                    1d:e9:5b:36:c0:74:70:0b:2f:fb:d0:7c:4d:0e:b7:
                    4a:4f:ab:80:b2:38:c6:93:a0:3f:22:a4:33:c3:bb:
                    20:9f:bf:75:4f:45:03:15:9c:92:26:40:ff:ed:91:
                    52:45:6a:7b:dc:ac:b6:72:bc:cc:52:a8:98:76:4c:
                    84:a5:f9:52:a3:b1:75:ce:0e:9c:c4:33:37:68:e0:
                    77:e8:db:88:e8:04:03:b5:4f:4f:57:c9:3d:59:af:
                    cd:3d:64:ef:15:30:6e:e5:80:df:7d:dc:84:d2:34:
                    14:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:57:CF:71:B6:28:0D:9E:4E:72:37:6E:4B:CD:94:85:35:FC:AF:A6
            X509v3 Authority Key Identifier:
                keyid:F6:86:EF:12:82:2D:FC:94:82:86:B4:5C:22:31:32:55:C1:75:E2:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0d5340d79102b793331c752f0dbbe0ddca1e18f6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0cd517cc-1f5c-4cfd-9b92-b7e90cf6974e/effec41a7b821fffd90578d3f8416fff094015e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0cd517cc-1f5c-4cfd-9b92-b7e90cf6974e/0d5340d79102b793331c752f0dbbe0ddca1e18f6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.192.0/19
                  200.85.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         00:54:34:40:8b:04:74:d7:be:f7:68:0e:ff:bf:6a:12:2d:75:
         27:f2:82:b8:bd:85:b4:c2:7e:ce:cd:58:ad:48:22:86:3b:a7:
         64:81:3c:a8:5a:89:90:96:3b:27:8d:42:0d:df:21:8f:02:1f:
         00:88:0d:8a:03:c2:62:97:22:b6:0c:64:e9:9b:6e:67:c1:9f:
         9f:a8:a2:97:34:5e:36:64:29:36:42:ac:b1:66:c3:56:c3:2f:
         16:9e:4a:79:65:f2:55:a3:33:c0:73:e9:4f:51:2f:87:3c:58:
         76:76:a5:75:97:7f:0a:08:4f:81:3e:f8:63:74:b7:c8:91:50:
         ac:1c:47:23:46:bf:12:29:44:06:62:8b:5c:5c:81:61:0b:4d:
         25:d5:83:b8:e9:17:32:42:bd:de:ac:3d:9b:d9:89:2e:42:a0:
         3e:7a:d9:71:bd:67:a8:29:ab:3e:8b:9b:15:2e:df:ce:e1:4b:
         57:ff:c2:b3:06:70:a4:7a:37:ce:ff:e2:46:57:0a:5b:b4:55:
         dd:54:31:e0:a6:be:23:87:6c:22:7e:a4:0d:9c:74:c1:07:5b:
         f4:31:5f:ae:e4:a4:70:3d:f0:ad:95:db:72:ac:71:12:1d:d0:
         d6:a9:26:ac:a6:2f:1a:7c:c8:37:24:41:32:f4:48:66:eb:0e:
         f3:37:c7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 15 14:30:49 2023 by rpki-client on console-fra.rpki-client.org