Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/135632df-9761-412f-9c4f-0111d9aff3ad/e844ce1e17e6e84110b76e682d491aa4b4f6df10.roa
File:                     e844ce1e17e6e84110b76e682d491aa4b4f6df10.roa (raw, json)
Hash identifier:          XFSyagUdxmhqAxqZhKaDv43SuIcGUzZUX7nJOq4wgsE=
Subject key identifier:   A8:99:72:0F:6A:DD:D3:AA:29:BD:EC:39:5F:2D:0A:87:9B:71:03:6A
Certificate issuer:       /CN=1bcfea8d0412e4c6eee276cfa4586b58320bdf8c
Certificate serial:       05B1E3
Authority key identifier: 25:62:D7:CD:09:64:F6:31:4C:A9:D6:01:5A:E4:A2:ED:F3:08:C8:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1bcfea8d0412e4c6eee276cfa4586b58320bdf8c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/135632df-9761-412f-9c4f-0111d9aff3ad/e844ce1e17e6e84110b76e682d491aa4b4f6df10.roa
Signing time:             Wed 24 Mar 2021 14:47:38 +0000
ROA not before:           Wed 24 Mar 2021 14:47:37 +0000
ROA not after:            Tue 24 Mar 2026 14:47:37 +0000
asID:                     270073
IP address blocks:        138.118.203.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 373219 (0x5b1e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bcfea8d0412e4c6eee276cfa4586b58320bdf8c
        Validity
            Not Before: Mar 24 14:47:37 2021 GMT
            Not After : Mar 24 14:47:37 2026 GMT
        Subject: CN=e844ce1e17e6e84110b76e682d491aa4b4f6df10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e5:aa:f3:45:9f:65:d0:83:9e:37:56:2d:15:
                    0a:7c:65:66:e3:52:1f:27:de:b2:50:4d:32:d9:16:
                    ed:00:ad:27:4a:f9:a7:1f:45:10:e4:44:66:49:b0:
                    fc:d4:39:f8:8a:80:07:57:bc:c3:f1:ed:43:63:64:
                    fd:a3:4c:b3:1a:2c:89:d1:53:08:6e:e2:94:92:ee:
                    e3:34:2f:41:10:96:b9:9b:bb:87:27:34:bc:51:9b:
                    7e:fc:8d:db:07:5e:d5:41:d5:24:7b:77:55:51:d9:
                    5f:f8:3c:2b:57:e9:1f:2c:d6:22:4c:90:20:bc:31:
                    d2:7e:30:62:be:14:53:ea:b7:f3:2a:ce:c1:ef:23:
                    c5:ed:75:8d:14:ed:ae:22:e5:9a:22:15:ad:ac:44:
                    f9:7c:07:be:84:88:aa:f0:5e:b5:64:bc:46:4a:c1:
                    db:30:9c:dc:34:de:75:91:b7:d1:ca:60:44:45:5a:
                    65:61:3a:f2:44:1e:1a:bb:87:eb:61:21:b5:a2:eb:
                    18:6e:92:e6:8c:00:57:16:02:a5:07:6c:be:52:d2:
                    76:47:51:39:c2:66:ce:d4:be:41:84:51:7c:17:c3:
                    86:0d:c3:b3:34:1f:87:19:7a:f9:ae:2c:00:ec:a4:
                    c7:de:db:89:03:28:b2:36:c3:fb:07:fc:cb:77:5f:
                    e9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:99:72:0F:6A:DD:D3:AA:29:BD:EC:39:5F:2D:0A:87:9B:71:03:6A
            X509v3 Authority Key Identifier:
                keyid:25:62:D7:CD:09:64:F6:31:4C:A9:D6:01:5A:E4:A2:ED:F3:08:C8:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1bcfea8d0412e4c6eee276cfa4586b58320bdf8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/135632df-9761-412f-9c4f-0111d9aff3ad/e844ce1e17e6e84110b76e682d491aa4b4f6df10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/135632df-9761-412f-9c4f-0111d9aff3ad/1bcfea8d0412e4c6eee276cfa4586b58320bdf8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:d8:b4:80:a4:a3:f4:ca:aa:15:de:9a:12:40:04:23:64:ce:
         0e:c4:7e:5d:26:97:8d:e8:e8:ab:a5:2a:6f:56:6c:4a:da:60:
         f1:6d:b5:6f:46:59:b7:6d:f4:8b:f2:07:5a:a1:ac:f7:a3:0a:
         1b:56:73:41:47:9f:e2:b4:94:21:c7:73:04:4b:1a:e9:43:53:
         64:c5:ca:91:09:84:71:1f:85:eb:8c:74:5e:7e:ae:cb:dc:40:
         23:80:76:0a:5d:18:1f:20:21:93:c2:17:cb:95:75:4b:0e:25:
         d1:8d:e0:0e:9a:7c:ab:8b:a4:5b:ef:3b:a3:95:7a:80:59:81:
         50:c2:4d:4c:6d:6f:1d:ea:b0:fa:9d:71:70:fb:11:5d:b5:d1:
         d5:6b:65:76:39:e4:4e:5c:eb:31:8c:d9:ce:0c:d8:d5:2f:9d:
         3e:62:fa:0e:c8:6e:7c:37:a2:0d:ea:ac:4b:99:03:34:22:19:
         47:0e:f8:65:f8:e8:58:4b:ca:7d:82:8a:0a:9e:c0:2b:e3:35:
         ca:b9:c7:65:ee:92:9d:93:a9:4c:31:1f:2c:01:1c:91:55:31:
         a2:b7:48:dc:73:d8:b0:7b:96:8a:87:b6:f6:eb:02:40:71:23:
         23:2e:18:8c:10:a2:3b:40:e2:75:a5:cb:25:c8:41:5f:b3:af:
         76:59:b2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:24 2023 by rpki-client on console-ams.rpki-client.org