Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/fb43cd38324c77ecc2aa49617f2d7767d6642d47.roa
File:                     fb43cd38324c77ecc2aa49617f2d7767d6642d47.roa (raw, json)
Hash identifier:          EPqZORPC+eXwactX/I1Z1RdGmksjZJBHVd/bK48y/3Y=
Subject key identifier:   A7:FE:B9:B6:2C:FC:6B:3B:27:32:80:A0:4F:98:88:6A:4B:15:E0:33
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       0E1C6D
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/fb43cd38324c77ecc2aa49617f2d7767d6642d47.roa
Signing time:             Wed 24 Mar 2021 14:30:55 +0000
ROA not before:           Wed 24 Mar 2021 14:30:53 +0000
ROA not after:            Tue 24 Mar 2026 14:30:53 +0000
asID:                     28097
IP address blocks:        190.216.221.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 924781 (0xe1c6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Mar 24 14:30:53 2021 GMT
            Not After : Mar 24 14:30:53 2026 GMT
        Subject: CN=fb43cd38324c77ecc2aa49617f2d7767d6642d47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ac:44:27:1a:22:fa:9e:a3:95:94:75:88:ba:
                    8d:48:03:38:bb:0a:1b:34:8d:e7:8e:39:3b:18:53:
                    52:bb:69:0e:5c:3a:5d:e7:5e:fb:28:d8:6f:27:17:
                    48:a7:c5:fc:97:ae:50:dd:9c:bb:78:e9:49:68:95:
                    7c:02:c6:ad:81:9b:83:5a:29:96:24:65:e1:dd:9a:
                    24:de:d7:4d:ef:ba:4a:53:c1:03:de:12:c4:f0:b9:
                    1e:99:43:d1:96:3b:a0:56:e8:17:cf:96:c4:c2:de:
                    9c:15:69:7b:f0:f2:16:f1:93:72:a4:65:40:b5:35:
                    41:a7:b5:3b:64:83:2e:11:31:02:5f:04:ab:72:7a:
                    3a:9e:a0:61:e7:7b:9d:26:ce:08:87:6f:c3:71:24:
                    a0:89:7d:bd:bc:53:e8:7f:0a:bb:b4:ee:7d:a5:4f:
                    a3:45:52:bb:c6:72:8e:66:a1:e4:b1:90:72:a6:c4:
                    16:91:7d:44:d3:6b:bd:8c:32:13:57:70:09:b5:e5:
                    36:4c:84:15:e8:d3:8c:d9:bf:6b:31:2f:68:50:33:
                    74:df:ec:06:29:de:df:3e:51:c6:11:58:fc:72:4c:
                    04:db:8a:c9:11:50:3f:1e:5c:c7:74:bc:f9:56:f3:
                    9d:0a:f4:19:df:f1:5c:5c:72:25:52:c7:e9:66:d6:
                    7d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:FE:B9:B6:2C:FC:6B:3B:27:32:80:A0:4F:98:88:6A:4B:15:E0:33
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/fb43cd38324c77ecc2aa49617f2d7767d6642d47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:33:80:b2:48:ac:db:be:fb:78:5a:48:b3:02:4e:0e:5e:68:
         d9:dd:03:5f:ed:65:f0:91:63:bb:e1:36:8e:72:8b:c4:2c:87:
         5b:cd:f8:d5:c4:fc:3a:ac:f8:a0:df:de:75:f5:18:ef:c3:42:
         fe:7a:f7:0c:cf:94:50:5c:a4:3d:38:61:ab:d2:6a:97:4b:47:
         7f:84:e8:2a:f5:c1:d5:22:87:04:95:eb:92:57:ff:cc:42:8b:
         23:8a:93:e8:59:b1:0a:a2:63:f2:e2:be:9d:07:4b:79:ae:2e:
         87:ec:5e:1f:3a:93:08:9a:b1:47:e7:ae:71:cf:dc:3e:d7:a4:
         af:b0:47:cd:56:2e:9e:27:44:ae:cf:cc:ad:76:02:c0:c0:2b:
         5e:f6:29:67:94:fb:a8:04:04:25:75:cd:29:f9:2c:51:4c:b3:
         05:9f:cc:c8:42:03:7e:dc:76:9d:5c:c8:0c:8d:9f:c4:96:09:
         1f:9e:06:3e:95:62:a9:e7:da:98:c4:6e:9d:27:15:14:38:ab:
         f5:90:2a:2d:be:45:31:af:7d:46:68:de:38:50:b0:5f:10:55:
         96:bf:9f:43:b0:d0:ca:19:2a:91:c1:58:7e:4a:c0:c3:2e:ba:
         aa:ff:40:56:ef:ee:17:e7:f7:aa:5d:9e:0e:76:1b:12:b4:17:
         d6:a1:5f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 21 21:31:50 2023 by rpki-client on console-fra.rpki-client.org