Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/f26c51f587f4b9c4ca7c44e6ff791427fa40f26f.roa
File:                     f26c51f587f4b9c4ca7c44e6ff791427fa40f26f.roa (raw, json)
Hash identifier:          QJyULuhZzRxj30ePi/jRAG1wILrfXjol+sh5I7w/YYQ=
Subject key identifier:   6A:C7:54:6D:A1:F3:61:FB:B6:58:DC:A2:DD:72:FE:1B:43:D8:9D:B9
Certificate issuer:       /CN=c5ef86124a38f3fc46e85e51e01411db37fdb204
Certificate serial:       0D21EB
Authority key identifier: 86:56:69:72:80:4D:BD:ED:14:7F:F3:A0:38:C2:B6:95:AD:C2:C8:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5ef86124a38f3fc46e85e51e01411db37fdb204.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/f26c51f587f4b9c4ca7c44e6ff791427fa40f26f.roa
Signing time:             Tue 02 May 2023 21:09:05 +0000
ROA not before:           Mon 01 May 2023 21:09:05 +0000
ROA not after:            Fri 02 May 2025 21:09:05 +0000
asID:                     272086
IP address blocks:        189.85.42.0/23 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 860651 (0xd21eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5ef86124a38f3fc46e85e51e01411db37fdb204
        Validity
            Not Before: May  1 21:09:05 2023 GMT
            Not After : May  2 21:09:05 2025 GMT
        Subject: CN=f26c51f587f4b9c4ca7c44e6ff791427fa40f26f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:16:d9:f4:a0:b9:68:56:c5:2e:54:0a:55:b0:
                    d4:31:1c:b7:4c:61:a3:bd:54:2d:fe:49:80:6d:aa:
                    1f:02:f7:59:48:80:01:32:80:e1:5e:36:96:14:7c:
                    40:cb:d6:fa:a6:a6:48:7e:64:26:b4:be:71:30:29:
                    b9:47:35:ad:72:6d:1f:a5:52:ba:09:54:90:b9:10:
                    e1:5f:66:1a:bf:b6:81:b4:e7:52:03:60:a7:30:8c:
                    fe:5f:58:20:bd:6f:9f:10:b6:de:0d:f8:10:5e:a3:
                    bb:2e:51:c4:6b:34:29:8a:5b:1c:0b:60:9d:b6:9a:
                    19:60:ea:1c:3b:27:71:e5:42:96:39:7b:72:ba:35:
                    02:89:59:a0:da:f8:7f:2d:12:4a:cd:57:ac:a9:58:
                    75:77:76:69:0e:da:19:92:fd:97:d8:23:f4:51:7c:
                    6a:a8:04:64:6e:cc:cb:9a:10:2f:4d:97:e7:8b:4f:
                    1c:fc:ba:25:0f:2c:6f:7b:42:b8:41:f3:50:1c:f5:
                    dc:44:8e:f1:67:d7:97:f7:e9:a4:37:01:70:07:b1:
                    cd:84:6b:d9:a1:1b:db:e3:4e:1d:ee:87:58:62:59:
                    c2:05:61:4d:d4:cd:e2:79:c2:dc:20:a4:d1:a3:43:
                    a1:1d:4a:62:54:b5:8c:97:83:48:0d:f9:5e:d9:1e:
                    fb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C7:54:6D:A1:F3:61:FB:B6:58:DC:A2:DD:72:FE:1B:43:D8:9D:B9
            X509v3 Authority Key Identifier:
                keyid:86:56:69:72:80:4D:BD:ED:14:7F:F3:A0:38:C2:B6:95:AD:C2:C8:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5ef86124a38f3fc46e85e51e01411db37fdb204.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/f26c51f587f4b9c4ca7c44e6ff791427fa40f26f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/c5ef86124a38f3fc46e85e51e01411db37fdb204.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:b5:74:01:ab:91:30:bc:11:68:92:94:1b:5f:20:5f:aa:ab:
         57:c0:80:45:d5:83:5c:67:ea:e0:ed:7c:b6:29:e6:b6:57:e9:
         ce:be:d8:f7:cf:31:49:91:4c:69:5a:18:39:c2:51:bf:bf:e4:
         1f:67:89:d4:80:a5:96:e2:61:88:bf:1a:f9:92:d8:53:bd:c2:
         28:9a:6e:11:17:1c:43:cd:69:15:c2:68:ce:40:7e:59:82:2e:
         aa:db:03:4c:4c:3e:cd:50:9e:9a:a4:a1:e9:15:5d:e9:ef:46:
         21:01:ac:ad:e3:07:89:5e:e5:2d:97:33:44:68:80:47:4e:ae:
         10:04:9d:62:f8:5e:6d:fd:ca:19:fa:6b:d7:c3:8e:18:b3:ff:
         93:93:f2:dc:19:95:0c:71:13:11:a4:40:67:fe:c5:ab:04:7e:
         ba:92:e0:d1:62:33:6b:1e:b1:b1:24:03:5d:12:eb:20:02:3a:
         59:0b:bf:3e:2e:40:89:7e:9b:ca:69:99:11:66:f8:9c:4a:c7:
         0e:bc:be:82:d9:a7:c9:e3:85:b5:da:d0:21:4f:0b:f2:c4:b4:
         f2:dc:09:23:aa:a4:0e:ce:55:ad:0c:c7:ae:94:2d:f8:82:65:
         9b:d5:48:f7:ec:99:a7:7f:b8:93:4c:68:4e:ae:14:e9:3a:60:
         f1:8f:f0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:25 2023 by rpki-client on console-ams.rpki-client.org