Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0e7871a7-9b56-491a-b50f-b961e07842ad/25d56fbd1ee3d0b91b8ba7f7fa0885c78e7c2ad6.roa
File:                     25d56fbd1ee3d0b91b8ba7f7fa0885c78e7c2ad6.roa (raw, json)
Hash identifier:          roA56AWrhSHXMx0NNMgVoI8tUneDNWJe2018wIGpVm4=
Subject key identifier:   E9:66:99:00:AF:1D:45:BD:1C:F2:1D:1C:93:EB:64:58:2E:05:33:FC
Certificate issuer:       /CN=bb85d8416a3a6cc72fec0191c797cfa9f558ee3b
Certificate serial:       02EA27
Authority key identifier: EF:AC:29:B0:98:0F:79:8C:78:5E:B3:53:1F:FB:55:9C:2E:34:FA:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb85d8416a3a6cc72fec0191c797cfa9f558ee3b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0e7871a7-9b56-491a-b50f-b961e07842ad/25d56fbd1ee3d0b91b8ba7f7fa0885c78e7c2ad6.roa
Signing time:             Wed 24 Mar 2021 14:35:30 +0000
ROA not before:           Wed 24 Mar 2021 14:35:30 +0000
ROA not after:            Tue 24 Mar 2026 14:35:30 +0000
asID:                     271818
IP address blocks:        2801:12:100::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191015 (0x2ea27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb85d8416a3a6cc72fec0191c797cfa9f558ee3b
        Validity
            Not Before: Mar 24 14:35:30 2021 GMT
            Not After : Mar 24 14:35:30 2026 GMT
        Subject: CN=25d56fbd1ee3d0b91b8ba7f7fa0885c78e7c2ad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b0:1c:cf:eb:7f:cc:e6:fe:d4:6c:73:10:11:
                    e7:e8:c4:34:c7:59:e2:9a:30:90:3b:e2:25:3d:dc:
                    2a:19:9a:65:0e:52:c6:cc:10:c3:95:86:b7:cb:ea:
                    11:30:fc:b9:a5:51:6c:cb:61:14:8f:45:05:93:6a:
                    df:ca:9d:aa:56:f4:04:65:f2:0b:40:db:50:f2:c8:
                    45:eb:bc:d7:cf:71:43:c5:38:10:d6:ae:25:02:66:
                    72:eb:4b:3a:71:3e:8b:cd:2c:c6:64:4a:41:b4:90:
                    59:e3:25:d7:39:40:f5:3b:6a:6b:71:3d:ca:4c:31:
                    47:10:d5:9d:17:bd:76:1c:83:a7:47:ca:aa:e4:4a:
                    f0:c0:31:53:f4:64:13:32:db:ce:ac:10:a4:b5:40:
                    92:d8:9f:f6:e4:24:b7:55:b4:61:4f:2e:a8:77:30:
                    81:f7:06:b1:f8:96:ec:7b:d9:4b:45:0e:4b:67:50:
                    2f:78:d1:c1:03:74:59:14:91:f4:61:5f:dc:7b:54:
                    7a:47:cd:c7:8b:f1:e5:ad:39:05:e9:8d:36:a4:41:
                    38:87:2c:04:92:ab:98:da:27:60:12:89:60:94:d6:
                    a5:36:79:6d:bf:77:bf:1f:84:c0:7b:bb:1d:28:ad:
                    22:2e:61:98:da:65:c4:6a:19:4b:78:e0:3b:8e:ba:
                    6e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:66:99:00:AF:1D:45:BD:1C:F2:1D:1C:93:EB:64:58:2E:05:33:FC
            X509v3 Authority Key Identifier:
                keyid:EF:AC:29:B0:98:0F:79:8C:78:5E:B3:53:1F:FB:55:9C:2E:34:FA:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb85d8416a3a6cc72fec0191c797cfa9f558ee3b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0e7871a7-9b56-491a-b50f-b961e07842ad/25d56fbd1ee3d0b91b8ba7f7fa0885c78e7c2ad6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0e7871a7-9b56-491a-b50f-b961e07842ad/bb85d8416a3a6cc72fec0191c797cfa9f558ee3b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:12:100::/44

    Signature Algorithm: sha256WithRSAEncryption
         4e:d9:af:df:74:03:e5:ff:e2:9d:04:0b:13:65:37:ef:fb:a3:
         12:37:09:d8:38:33:a6:c7:c8:81:f6:9c:9c:e1:9c:89:2d:28:
         f1:43:6f:5b:c4:1d:27:3d:5b:3a:1e:7c:39:fb:54:0f:d3:85:
         fb:c7:7b:93:27:b3:6e:6a:f7:bc:07:58:0b:d7:b2:61:f1:84:
         f9:14:5a:56:04:63:19:bd:a2:cc:5a:4e:31:d3:73:3b:a5:82:
         bb:58:bb:64:42:7f:1a:b9:fb:8f:05:c1:e9:b1:88:42:b7:7a:
         84:1d:c0:b0:68:d4:92:7c:88:e7:81:d5:7e:f7:66:8b:ff:1d:
         d4:f5:54:f1:1f:1b:95:da:ba:22:57:14:f1:b3:49:6c:08:9d:
         45:c7:f3:0b:e2:b8:80:98:c6:3f:15:1f:f3:b0:f9:29:c2:9f:
         52:f8:21:eb:c5:79:cf:e0:c5:e9:fa:0f:9a:88:18:86:00:9c:
         b5:6a:e7:e4:44:2c:52:77:d7:45:4b:f3:17:5d:db:09:cd:e7:
         86:ba:b7:7a:ae:a3:f6:ab:a7:bb:16:8e:79:7e:7a:8f:3e:4d:
         36:84:0f:d8:4a:d1:4f:7e:c1:25:f1:a5:a9:d8:a8:0b:c9:36:
         b5:aa:11:a8:86:c5:64:39:79:ab:23:c1:88:72:ce:11:a0:72:
         77:a5:42:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:09 2023 by rpki-client on console-fra.rpki-client.org