Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/940ff8cec642267d6c517e70a95344cb7b1d96cc.roa
File:                     940ff8cec642267d6c517e70a95344cb7b1d96cc.roa (raw, json)
Hash identifier:          wl+nzuGb5Z0Mnj1M+yjQj2jAZ5zP3ML50Lp5UY3VKs8=
Subject key identifier:   3A:39:15:19:64:16:A6:BE:90:57:22:CB:A0:29:2B:5F:AC:1C:43:87
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       0E36C8
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/940ff8cec642267d6c517e70a95344cb7b1d96cc.roa
Signing time:             Wed 24 Mar 2021 14:30:55 +0000
ROA not before:           Wed 24 Mar 2021 14:30:53 +0000
ROA not after:            Tue 24 Mar 2026 14:30:53 +0000
asID:                     27787
IP address blocks:        201.234.136.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 931528 (0xe36c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Mar 24 14:30:53 2021 GMT
            Not After : Mar 24 14:30:53 2026 GMT
        Subject: CN=940ff8cec642267d6c517e70a95344cb7b1d96cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7c:95:72:92:ba:e0:9e:84:23:ae:1a:15:31:
                    41:0a:ed:bb:80:ca:40:74:76:66:c3:ce:ae:7d:6b:
                    92:1f:02:04:7d:95:85:4c:c1:1d:5f:f0:0b:3e:b7:
                    6b:e1:95:36:e2:8b:68:4a:af:40:16:db:2f:02:65:
                    86:f4:5f:4a:db:2b:9c:e5:58:af:10:05:2e:68:12:
                    5d:75:2f:e7:f9:39:0b:50:2b:72:88:27:72:ab:8a:
                    28:5e:cc:1f:3f:18:e4:da:e3:77:f7:bf:31:b2:e2:
                    80:82:d0:e0:e8:41:84:e2:bd:7d:31:b5:8d:7d:3c:
                    a5:46:39:b2:cd:5f:15:b8:fb:eb:e1:e0:58:ed:09:
                    58:b7:75:3f:f8:2e:e4:55:35:c5:0c:da:9e:9e:b2:
                    e7:56:5a:ea:11:6f:53:eb:93:92:a8:c1:b6:d6:be:
                    0f:26:02:db:ab:50:fa:eb:b6:cc:b6:99:b9:6c:18:
                    e7:88:c2:f3:77:58:a7:55:1b:69:02:b6:6f:3e:a1:
                    a6:bd:e8:e0:b1:0d:59:77:db:8f:55:81:58:71:d1:
                    c8:05:7e:bf:ad:b5:e3:41:72:12:ad:95:b7:d3:7d:
                    87:c2:eb:b0:50:79:d0:9a:e7:3d:26:4d:58:54:45:
                    26:74:01:17:8c:6b:77:92:2f:bb:ca:e3:4d:27:f2:
                    a2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:39:15:19:64:16:A6:BE:90:57:22:CB:A0:29:2B:5F:AC:1C:43:87
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/940ff8cec642267d6c517e70a95344cb7b1d96cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.234.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:77:51:d2:55:2d:2d:30:e9:5f:e7:45:2c:9b:21:c4:3e:0a:
         32:10:ca:01:69:71:42:c1:b8:a0:74:21:94:46:1b:02:a5:b6:
         20:34:07:16:2a:84:4d:e4:22:bf:8c:f2:01:fd:ec:d2:1a:ef:
         de:b9:11:b3:b9:4d:c3:9c:f5:1e:57:a6:92:5a:b6:6a:88:af:
         ee:34:9b:d9:65:09:98:7f:34:be:f9:83:91:c3:09:d9:d1:2f:
         93:4a:30:ad:6f:d8:02:43:11:23:e8:b0:66:b2:7b:b5:aa:e9:
         1b:22:56:88:b9:d7:be:db:51:98:b6:55:5a:b4:fb:1d:09:b0:
         3f:67:c4:fc:8a:21:ab:52:05:fa:f6:64:a7:0c:2d:2d:84:46:
         de:05:fe:2a:fe:06:cc:0e:2e:ef:63:e2:9b:0c:50:47:c1:a7:
         ff:8a:d7:ef:fa:19:e7:a1:29:12:dd:c5:fe:89:bd:1d:7d:10:
         b4:2d:16:98:60:e2:28:c0:c3:ab:13:72:7c:b9:a4:88:02:ff:
         98:e3:a5:18:cf:7f:ea:48:61:47:a4:ea:25:c9:35:a7:1e:95:
         3e:dd:e9:f2:68:a0:cc:de:c8:e0:86:e7:ac:c4:24:95:a0:2a:
         a1:2b:6e:7b:54:26:45:e4:97:12:7e:49:26:bb:7e:4a:c9:20:
         27:38:69:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 21 21:31:50 2023 by rpki-client on console-fra.rpki-client.org