Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0e7871a7-9b56-491a-b50f-b961e07842ad/acb11dec20402796ca1a41ffa2ed8d3ff72bff93.roa
File:                     acb11dec20402796ca1a41ffa2ed8d3ff72bff93.roa (raw, json)
Hash identifier:          McsxkykJpXIHPuremndyhTd0EmAsxnN/5iZ4WUEovUM=
Subject key identifier:   82:17:39:85:4D:59:D6:C2:C3:E6:DE:E7:2B:22:34:A1:9A:31:8C:49
Certificate issuer:       /CN=bb85d8416a3a6cc72fec0191c797cfa9f558ee3b
Certificate serial:       02EAED
Authority key identifier: EF:AC:29:B0:98:0F:79:8C:78:5E:B3:53:1F:FB:55:9C:2E:34:FA:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb85d8416a3a6cc72fec0191c797cfa9f558ee3b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0e7871a7-9b56-491a-b50f-b961e07842ad/acb11dec20402796ca1a41ffa2ed8d3ff72bff93.roa
Signing time:             Wed 24 Mar 2021 14:35:31 +0000
ROA not before:           Wed 24 Mar 2021 14:35:30 +0000
ROA not after:            Tue 24 Mar 2026 14:35:30 +0000
asID:                     14080
IP address blocks:        2801:12:100::/44 maxlen: 44

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191213 (0x2eaed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb85d8416a3a6cc72fec0191c797cfa9f558ee3b
        Validity
            Not Before: Mar 24 14:35:30 2021 GMT
            Not After : Mar 24 14:35:30 2026 GMT
        Subject: CN=acb11dec20402796ca1a41ffa2ed8d3ff72bff93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e4:61:6a:21:18:3e:39:bd:c4:26:71:f4:36:
                    e5:f8:9f:52:40:05:9d:a5:a4:09:00:89:2d:cf:9a:
                    71:e1:c5:13:f7:b7:3f:50:e5:b1:47:04:b1:ef:9f:
                    01:d5:29:99:66:56:40:29:94:6f:29:7b:dd:a5:04:
                    04:2b:f7:69:cc:91:48:1a:81:8a:62:a7:5d:c6:8f:
                    59:5a:cd:65:49:41:37:d3:76:42:ca:97:6e:f2:fa:
                    b0:03:9d:c7:1c:b1:91:d2:ff:8f:ab:40:1b:69:28:
                    9e:d2:79:0b:43:fc:04:ab:84:70:6a:8c:9c:5f:e2:
                    9b:b0:08:56:21:6a:4e:cb:f0:4b:fe:e9:88:fa:92:
                    3b:1d:b4:a2:37:0f:a9:18:17:65:89:72:9f:d1:46:
                    f6:c3:04:08:09:13:fc:06:b3:08:eb:cc:cf:15:75:
                    46:46:2e:fb:6b:e2:7b:b7:4f:fc:46:e2:e5:45:1a:
                    3f:a5:e7:2d:14:c0:32:5f:f9:28:aa:eb:dd:a5:54:
                    00:76:04:0a:d9:88:67:8e:71:61:90:13:71:26:22:
                    98:14:8c:e9:67:01:a8:11:82:f5:a0:51:d6:b0:8f:
                    77:e1:cc:ea:c2:f9:e7:5f:3c:04:f5:1d:10:8f:0c:
                    ad:89:92:b3:d1:bb:ed:5e:fb:10:e2:bb:d7:17:95:
                    8c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:17:39:85:4D:59:D6:C2:C3:E6:DE:E7:2B:22:34:A1:9A:31:8C:49
            X509v3 Authority Key Identifier:
                keyid:EF:AC:29:B0:98:0F:79:8C:78:5E:B3:53:1F:FB:55:9C:2E:34:FA:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb85d8416a3a6cc72fec0191c797cfa9f558ee3b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0e7871a7-9b56-491a-b50f-b961e07842ad/acb11dec20402796ca1a41ffa2ed8d3ff72bff93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0e7871a7-9b56-491a-b50f-b961e07842ad/bb85d8416a3a6cc72fec0191c797cfa9f558ee3b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:12:100::/44

    Signature Algorithm: sha256WithRSAEncryption
         0c:40:0f:c5:dc:72:97:d8:ae:c5:03:59:50:13:71:6e:a8:43:
         af:15:56:51:6e:63:33:a7:c8:ae:e0:27:89:ac:7e:71:41:c4:
         d8:e4:96:6a:10:b1:a8:9d:bb:f0:66:08:64:92:22:e8:c9:4f:
         21:56:f2:e8:a1:d3:35:cb:51:4f:32:7f:f4:38:51:d4:08:e4:
         35:c0:fb:72:59:96:cc:9b:74:2c:b1:63:53:48:2a:6a:66:f0:
         06:8e:29:63:a5:e1:cd:72:a0:9b:11:92:7d:e6:3c:e8:68:a9:
         1d:95:87:d6:26:09:1f:e2:c9:ae:34:d9:f1:3a:3f:7b:48:61:
         f1:a4:ea:d5:95:06:11:f7:02:86:8a:15:99:32:4a:d4:8d:af:
         38:92:d6:9f:f3:e5:7f:12:6d:43:c6:37:03:b7:34:d7:5d:14:
         2a:fe:a5:2c:da:2b:d5:1e:cd:5d:9f:22:01:08:25:3f:fb:68:
         27:ba:da:39:ed:84:a6:08:53:3d:3f:ad:b0:05:e5:88:73:a0:
         64:95:7a:ea:41:d4:98:06:6c:a9:e3:94:8d:8b:a7:60:80:57:
         10:f7:f3:d0:59:5a:90:bc:3b:32:a9:97:35:31:29:36:f2:23:
         00:c4:79:80:20:b0:96:20:a4:20:04:b2:b4:ae:97:bc:52:d6:
         6c:a9:92:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:09 2023 by rpki-client on console-fra.rpki-client.org