Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/2fb7ea6e47fe8436c6e3df51483b1e238a6eef20.roa
File:                     2fb7ea6e47fe8436c6e3df51483b1e238a6eef20.roa (raw, json)
Hash identifier:          CzE5ThGpZNSi3h4LZaP8p3WfvvvsIRToJXIV2l2Vi+A=
Subject key identifier:   39:1D:5D:FC:7B:9B:4A:3F:B7:63:C9:25:8B:8F:C8:1F:63:3D:ED:9A
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       0E2EB6
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/2fb7ea6e47fe8436c6e3df51483b1e238a6eef20.roa
Signing time:             Wed 24 Mar 2021 14:30:55 +0000
ROA not before:           Wed 24 Mar 2021 14:30:53 +0000
ROA not after:            Tue 24 Mar 2026 14:30:53 +0000
asID:                     21756
IP address blocks:        201.234.38.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 929462 (0xe2eb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Mar 24 14:30:53 2021 GMT
            Not After : Mar 24 14:30:53 2026 GMT
        Subject: CN=2fb7ea6e47fe8436c6e3df51483b1e238a6eef20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:90:2a:f9:4b:03:97:bb:0b:5e:bf:c6:63:80:
                    01:39:c9:3e:7d:e0:22:f4:24:e0:ce:5f:7f:19:ef:
                    89:42:8f:00:ad:ce:25:9d:93:3f:bd:57:ee:67:48:
                    ac:08:71:35:15:79:ee:56:19:7d:cb:ff:58:59:d0:
                    1d:db:81:06:a5:83:99:57:b8:a9:3d:76:0f:da:19:
                    25:55:aa:64:f4:34:9b:1d:13:03:13:80:52:fa:89:
                    90:b9:5a:8c:c7:4e:e6:dd:5b:f5:29:1a:fc:11:01:
                    9f:1b:ec:fb:fe:65:72:61:c5:dd:57:07:e7:50:9c:
                    d9:6a:c2:4e:89:bb:d1:5c:a9:67:a1:2b:5c:70:19:
                    2f:42:37:91:f2:22:e2:f9:0c:db:c1:09:8a:b7:18:
                    fe:6b:ae:ff:73:76:7c:8f:a1:b0:b9:fa:44:6c:25:
                    e1:67:5b:9f:78:91:eb:47:cf:da:a4:1f:66:7c:f9:
                    55:e1:68:7b:76:75:ab:aa:de:50:b1:4d:64:51:eb:
                    7e:c8:f1:91:06:e0:37:0e:6b:a1:77:a2:fe:d3:e6:
                    05:d2:4d:50:c3:07:67:1a:fd:a9:41:2e:92:a5:83:
                    e7:07:cb:4b:fe:e5:ba:5c:30:32:98:43:ea:f6:dc:
                    95:36:7c:0a:44:7f:aa:32:02:d4:b3:fa:57:fc:14:
                    81:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:1D:5D:FC:7B:9B:4A:3F:B7:63:C9:25:8B:8F:C8:1F:63:3D:ED:9A
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/2fb7ea6e47fe8436c6e3df51483b1e238a6eef20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.234.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:25:9d:d0:8a:25:83:c4:69:46:18:55:ad:9d:23:85:0c:75:
         4a:66:b5:ee:15:55:df:0c:99:51:6b:5e:7e:38:c3:04:c4:02:
         2a:6c:0d:20:71:59:95:50:80:b5:ea:5f:ac:69:e0:77:ff:d9:
         64:35:02:92:df:94:76:3c:9b:e7:11:25:2f:e8:65:8a:11:3e:
         b1:07:21:af:1c:97:5c:7c:dc:f9:d1:9e:27:35:28:d7:b8:1e:
         df:4f:d8:c7:e6:0a:5c:06:41:ad:93:24:db:0a:66:3d:f5:cc:
         63:8a:2b:0b:6f:4c:e3:71:6d:aa:1b:86:57:20:25:18:5a:d1:
         6a:5e:18:ac:12:d0:6e:6e:d2:2b:fa:ef:86:9a:88:d5:a8:42:
         0d:ab:54:43:c1:0a:53:18:03:3b:c9:b7:c9:38:0b:53:6d:ad:
         a6:f9:e0:b7:f8:e9:7a:f8:46:9e:6b:b6:7e:13:af:7b:9e:95:
         cf:50:3c:e3:32:d2:22:68:76:98:ad:f1:24:83:a1:e6:00:c6:
         b5:10:61:82:ee:52:6a:c5:27:b9:aa:ce:ed:38:a7:4a:99:2f:
         73:c7:e4:b2:3b:49:b7:cd:ae:52:87:6e:a9:92:30:38:dd:32:
         d4:27:e7:5d:32:de:2e:68:6f:82:a5:e0:1c:79:b8:f5:fa:d4:
         32:a1:bf:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 21 21:29:52 2023 by rpki-client on console-ams.rpki-client.org