Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/178ec5a4-656f-4674-b158-c6767f091921/832e3cd8d86f981488dd670158d8eadad5365def.roa
File:                     832e3cd8d86f981488dd670158d8eadad5365def.roa (raw, json)
Hash identifier:          nmzIHOECNtZfhPokZuHxJpNTwpmfpRvfNLdY4ldw75w=
Subject key identifier:   8D:6B:6F:DD:25:C4:1D:A6:F6:64:14:44:39:C5:36:EA:4C:7B:2C:88
Certificate issuer:       /CN=6f01319158b481143f9879918e0466aa4e1e5377
Certificate serial:       082E55
Authority key identifier: C9:EF:20:70:94:03:0B:DE:C7:31:82:3C:FA:31:45:BF:17:FB:C2:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6f01319158b481143f9879918e0466aa4e1e5377.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/178ec5a4-656f-4674-b158-c6767f091921/832e3cd8d86f981488dd670158d8eadad5365def.roa
Signing time:             Thu 07 Mar 2024 15:19:17 +0000
ROA not before:           Thu 07 Mar 2024 15:19:17 +0000
ROA not after:            Sat 07 Mar 2026 15:19:17 +0000
asID:                     270008
IP address blocks:        200.23.140.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 07 Mar 2024 20:10:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 536149 (0x82e55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f01319158b481143f9879918e0466aa4e1e5377
        Validity
            Not Before: Mar  7 15:19:17 2024 GMT
            Not After : Mar  7 15:19:17 2026 GMT
        Subject: CN=832e3cd8d86f981488dd670158d8eadad5365def
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2d:b3:5d:a0:e3:ee:30:b9:bb:e9:40:a2:35:
                    a1:8c:ba:19:84:aa:7e:98:39:b4:77:b3:48:9d:e8:
                    35:5e:50:f5:51:28:97:cb:ee:b5:ab:9f:5e:e4:5b:
                    46:04:29:3c:dd:8b:43:b6:f1:4e:5b:4b:fb:4f:e4:
                    29:f4:09:8d:f1:ff:9b:8b:b3:31:b4:d8:e5:49:50:
                    24:ff:f5:c2:a6:9f:87:6e:f1:87:c4:65:66:70:07:
                    d6:be:0e:1e:4b:1a:3b:bf:2c:8e:d4:8f:13:53:02:
                    34:57:c2:51:a8:a0:da:c6:dc:ce:76:a9:ee:a5:f9:
                    25:30:ee:8a:9e:44:6d:41:f7:77:2b:12:2b:78:b2:
                    ad:dd:b9:48:32:56:70:93:c9:ee:70:df:ab:6e:b2:
                    2f:c0:0f:6b:61:a9:8c:4b:8b:2b:4a:ca:e5:05:6a:
                    09:71:16:f3:a2:7f:fd:af:65:a4:60:b8:9c:a2:63:
                    88:7e:22:74:bc:d1:51:09:dd:f4:ac:a7:c1:87:eb:
                    39:5e:4d:df:56:90:78:36:87:51:11:30:dd:cf:36:
                    5d:b6:b9:ec:02:10:c3:66:38:f5:28:76:91:d2:b2:
                    d3:71:a7:94:c2:a0:51:7e:9b:71:8b:44:07:a6:12:
                    87:fc:08:02:5e:c4:46:88:e2:f2:c5:f9:57:f0:f0:
                    2e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:6B:6F:DD:25:C4:1D:A6:F6:64:14:44:39:C5:36:EA:4C:7B:2C:88
            X509v3 Authority Key Identifier:
                keyid:C9:EF:20:70:94:03:0B:DE:C7:31:82:3C:FA:31:45:BF:17:FB:C2:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6f01319158b481143f9879918e0466aa4e1e5377.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/178ec5a4-656f-4674-b158-c6767f091921/832e3cd8d86f981488dd670158d8eadad5365def.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/178ec5a4-656f-4674-b158-c6767f091921/6f01319158b481143f9879918e0466aa4e1e5377.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.23.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:82:8b:43:5c:cd:67:fb:ee:1c:e0:14:a5:66:a6:28:75:aa:
         e1:8e:28:e0:d7:0b:e5:45:1b:01:01:b4:5b:42:bc:ca:fd:e8:
         7d:4e:77:0a:73:ea:40:10:f9:d1:56:3c:18:4c:2f:46:d7:72:
         99:c9:f4:5c:ed:47:2d:ea:12:5d:62:fd:a7:17:ab:4d:36:66:
         49:67:88:cd:e4:51:1a:b9:47:0d:14:30:43:27:2a:1f:0b:6e:
         12:2d:4d:12:dc:4f:f1:ba:3e:e7:f5:ac:85:ec:9a:33:b6:c9:
         91:2b:34:03:a8:83:34:f9:7b:92:5c:02:39:26:c7:80:a0:5a:
         a9:f4:d3:a2:eb:98:f7:98:c9:12:e8:99:89:f1:49:05:2a:ed:
         0d:bd:c4:dc:c2:a9:60:ee:43:7c:e3:e5:f4:83:06:fb:fc:fe:
         54:b2:0d:01:77:fb:6d:bb:64:a5:f5:56:42:e6:d3:72:b2:bc:
         43:c3:cb:36:56:20:11:eb:0a:5d:e8:7e:8c:e9:13:e3:c3:75:
         78:60:10:d8:ce:79:ff:4d:cc:18:59:4d:f1:3e:34:a8:40:55:
         37:22:50:f9:f2:9f:25:f3:42:55:60:03:ff:33:24:dc:34:c6:
         c3:d8:08:56:60:96:d5:8a:04:20:9e:3a:8e:04:ae:02:5a:f5:
         e3:e1:82:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 8 01:10:28 2024 by rpki-client on console-ams.rpki-client.org