Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/e429be81070c5fd41badbc2357a5b87ecc6005a8.roa
File:                     e429be81070c5fd41badbc2357a5b87ecc6005a8.roa (raw, json)
Hash identifier:          QIHEP7maUlxUpfzL1Uq3b2V7HWxTy8/LBO7HTVThsDE=
Subject key identifier:   03:0D:DE:91:D2:73:0A:60:CD:58:53:10:DB:0D:25:81:89:0A:01:FE
Certificate issuer:       /CN=1248882eb1c8e66ab5c23f667362567e6d7db671
Certificate serial:       12443F
Authority key identifier: 5E:BD:EC:8C:B5:BB:EC:06:16:5E:8C:39:DD:BC:7A:E2:61:91:8A:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1248882eb1c8e66ab5c23f667362567e6d7db671.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/e429be81070c5fd41badbc2357a5b87ecc6005a8.roa
Signing time:             Fri 08 Oct 2021 16:23:09 +0000
ROA not before:           Fri 08 Oct 2021 03:00:00 +0000
ROA not after:            Sun 08 Oct 2023 03:00:00 +0000
asID:                     263781
IP address blocks:        138.118.107.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1197119 (0x12443f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1248882eb1c8e66ab5c23f667362567e6d7db671
        Validity
            Not Before: Oct  8 03:00:00 2021 GMT
            Not After : Oct  8 03:00:00 2023 GMT
        Subject: CN=e429be81070c5fd41badbc2357a5b87ecc6005a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cb:c6:54:5b:ee:4b:db:ea:71:7f:2b:d9:7d:
                    06:a9:93:ea:7b:e9:ca:3e:8a:d7:41:bf:df:34:67:
                    1e:0a:6a:1d:7d:6f:01:8a:20:41:e3:8e:b8:49:99:
                    de:46:b5:9c:f2:ab:0c:6c:e1:56:f5:6f:d9:ec:ec:
                    1b:d2:cf:0e:16:72:8e:da:06:88:7d:02:31:64:78:
                    34:66:29:59:b4:52:87:93:00:b3:a4:0a:cb:a5:4f:
                    9f:89:6f:bd:c9:37:c6:85:c5:95:48:df:e8:9c:14:
                    2d:7f:d3:a9:f8:5f:3c:2a:65:95:3e:8a:ef:d8:61:
                    db:6e:c3:87:f3:5a:b7:b1:75:b3:aa:90:68:0c:54:
                    af:a6:4c:b7:b8:ef:2b:9c:a9:40:8b:73:f0:df:29:
                    db:09:b9:24:b4:60:11:5a:e7:d6:21:5c:c6:7f:db:
                    ec:43:15:2c:04:8d:5e:c0:68:44:1b:f9:aa:47:bc:
                    82:2c:99:ed:15:80:90:28:79:85:b6:fd:4e:31:21:
                    a1:ec:92:a2:0d:df:18:b6:9c:fd:9d:d8:e7:1d:3e:
                    7d:22:38:17:6d:2a:ce:f5:7a:5f:65:28:0e:0e:79:
                    f9:c5:fe:c3:d2:95:28:7d:55:31:31:f3:09:1c:3d:
                    1a:92:b3:ce:01:83:a7:40:7f:11:49:01:e4:69:f6:
                    10:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:0D:DE:91:D2:73:0A:60:CD:58:53:10:DB:0D:25:81:89:0A:01:FE
            X509v3 Authority Key Identifier:
                keyid:5E:BD:EC:8C:B5:BB:EC:06:16:5E:8C:39:DD:BC:7A:E2:61:91:8A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1248882eb1c8e66ab5c23f667362567e6d7db671.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/e429be81070c5fd41badbc2357a5b87ecc6005a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/1248882eb1c8e66ab5c23f667362567e6d7db671.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:19:23:73:ea:38:e8:f6:2b:d7:8d:0d:59:13:86:55:a4:98:
         ff:50:7b:c1:45:45:ca:62:54:bd:f3:84:7e:a6:f0:43:c4:e2:
         51:ac:1d:03:9c:49:d9:f9:78:29:a4:a9:5d:2a:06:22:90:bc:
         75:2a:4c:e4:e8:15:51:ea:73:38:87:39:a4:fa:95:86:5b:7c:
         d9:8a:f1:28:d6:cf:69:fd:b8:03:d0:3d:2f:89:6d:f1:a1:67:
         b8:42:03:85:09:9d:a1:68:af:6b:92:2e:e4:70:f5:fb:e5:5f:
         ce:07:d9:34:45:3f:ed:d6:e9:45:b4:89:4b:f5:d3:d5:e7:84:
         20:42:20:30:12:db:8c:db:4f:48:27:51:bb:a5:94:69:b3:b1:
         51:61:8a:56:3a:80:45:2b:df:a7:8b:0e:00:a2:f6:bc:b6:4a:
         21:92:6b:d4:e4:ac:d7:df:e8:41:b6:47:31:b7:f2:d8:68:44:
         61:fb:35:42:3b:92:e3:bc:63:cd:ef:4b:85:fb:3e:10:e0:b6:
         1e:80:9f:8c:c6:d6:cf:5c:b8:a2:f2:23:5f:31:6c:cb:61:ed:
         0a:6f:9f:52:cc:94:76:11:5b:71:99:bf:98:b1:bf:ab:76:48:
         58:f4:1e:80:7a:71:d8:38:d7:04:1c:74:1b:75:76:19:9e:a7:
         23:fa:53:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 7 09:19:07 2023 by rpki-client on console-fra.rpki-client.org