Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/4000753cee6a371cf52134ac02d1d5982dcd46d9.roa
File:                     4000753cee6a371cf52134ac02d1d5982dcd46d9.roa (raw, json)
Hash identifier:          tzkQfFTHrauxKMhCZ71bPVa6H/1rqEgNQi/O++I2/hc=
Subject key identifier:   62:6C:04:B8:31:BE:45:3E:3F:83:A1:81:38:9B:8B:DF:F2:B1:92:27
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       0E5A86
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/4000753cee6a371cf52134ac02d1d5982dcd46d9.roa
Signing time:             Wed 24 Mar 2021 14:30:56 +0000
ROA not before:           Wed 24 Mar 2021 14:30:53 +0000
ROA not after:            Tue 24 Mar 2026 14:30:53 +0000
asID:                     28075
IP address blocks:        200.32.117.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 940678 (0xe5a86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Mar 24 14:30:53 2021 GMT
            Not After : Mar 24 14:30:53 2026 GMT
        Subject: CN=4000753cee6a371cf52134ac02d1d5982dcd46d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:fd:58:cc:51:19:5e:9e:c6:cc:4c:14:fe:07:
                    e0:47:1d:4d:32:2f:c7:90:56:9f:32:41:29:4c:bd:
                    e7:2d:63:c1:7f:ce:b8:2e:0c:6a:a5:9c:10:c3:e2:
                    25:b9:8c:85:75:93:8e:1c:f0:94:b5:04:bc:cb:57:
                    20:5d:57:c1:e0:d3:33:d7:75:56:7a:34:ee:c4:64:
                    29:16:97:86:ae:f9:e9:c6:0d:58:8e:84:46:c8:bf:
                    65:84:5d:30:3e:51:df:d6:05:b6:b6:89:b1:d6:cc:
                    fc:be:c9:ee:29:a1:1e:0f:1b:ca:38:b6:03:3e:6f:
                    38:51:98:08:80:fb:0d:62:f5:2f:43:a9:05:81:3d:
                    ee:57:c5:81:6b:9b:03:38:9d:30:48:28:37:4e:b5:
                    62:cd:d5:55:bf:e3:13:9d:10:1f:5b:61:33:3b:0c:
                    27:72:b2:6d:58:14:b6:09:5a:bd:52:70:f3:42:ec:
                    6c:bc:ed:d4:3b:21:d5:cd:21:75:1c:0f:23:8f:52:
                    70:bd:ca:03:86:cb:40:ab:f4:d5:85:79:1e:34:f9:
                    bd:d0:59:f3:4f:b2:ca:ed:bf:c6:34:92:74:ca:18:
                    7b:2d:60:36:8c:ea:b7:8f:f6:34:ec:39:b5:37:90:
                    b4:59:c0:b3:fc:37:6b:bd:2b:11:16:38:95:cd:f6:
                    fc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:6C:04:B8:31:BE:45:3E:3F:83:A1:81:38:9B:8B:DF:F2:B1:92:27
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/4000753cee6a371cf52134ac02d1d5982dcd46d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.32.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:ab:82:43:6d:df:e4:5e:31:5d:d2:65:5a:d7:6f:ac:de:52:
         05:ea:72:7f:88:0d:4e:dc:c4:72:35:ee:e6:a8:94:9e:15:70:
         28:e4:ab:9c:65:2d:fc:36:a5:ae:28:5d:0f:8c:92:ad:fb:46:
         2a:30:f4:03:ed:61:f7:e8:d9:73:83:b8:9d:e5:34:49:df:18:
         4e:7a:96:8c:23:c5:36:07:49:8c:30:fb:b9:33:94:64:05:65:
         c7:5a:fa:dd:81:41:ca:3e:7b:77:cf:00:07:91:21:8e:92:6f:
         9b:2d:77:b7:8f:98:fe:ce:90:be:17:3e:73:b6:e6:69:c5:49:
         c1:fa:c8:74:b4:fd:39:28:e1:ab:d0:3a:b8:44:46:e0:d5:5c:
         40:e5:cf:b2:49:32:8d:cc:b9:3a:4d:f4:bb:ef:ab:37:ed:22:
         55:90:cf:b7:f9:a6:e3:1d:a0:1a:b1:c6:21:a1:4c:f6:09:ca:
         aa:38:ed:e7:63:92:a2:3f:52:88:0e:70:58:05:1c:77:d0:d0:
         f0:84:b8:dc:26:9f:49:71:97:d5:98:26:f1:25:7b:bd:cc:4e:
         48:45:e2:b3:16:13:06:be:ac:d4:52:1c:33:e0:4d:62:91:dd:
         71:b9:83:f9:3e:dd:08:c1:41:13:fe:e7:20:30:fc:3e:0b:2d:
         9d:b7:f5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 21 21:29:52 2023 by rpki-client on console-ams.rpki-client.org