Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1992c93c-15c7-4ad4-aedf-0b2c92dee12f/0680d9e07f85a0836a7d9cb65782dbd9ed5f38ec.roa
File:                     0680d9e07f85a0836a7d9cb65782dbd9ed5f38ec.roa (raw, json)
Hash identifier:          A+tenCPiUItKkOWraruJaW3/eMEox34DgjPdU5o0xEY=
Subject key identifier:   2E:C2:9D:BA:39:9D:2B:A1:31:1F:EE:04:07:9E:68:40:D2:43:D4:0C
Certificate issuer:       /CN=81e576eb875ef79c3d8f08ea0fa9a6fec82696ef
Certificate serial:       0D7154
Authority key identifier: AA:DF:88:7C:B8:65:CD:BC:FC:4D:9D:03:B6:85:C8:B3:21:3D:7E:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/81e576eb875ef79c3d8f08ea0fa9a6fec82696ef.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1992c93c-15c7-4ad4-aedf-0b2c92dee12f/0680d9e07f85a0836a7d9cb65782dbd9ed5f38ec.roa
Signing time:             Wed 24 Mar 2021 14:46:03 +0000
ROA not before:           Wed 24 Mar 2021 14:46:02 +0000
ROA not after:            Tue 24 Mar 2026 14:46:02 +0000
asID:                     263185
IP address blocks:        179.43.80.0/21 maxlen: 24
                          179.43.88.0/23 maxlen: 24
                          179.43.90.0/24 maxlen: 24
                          2803:2480::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 880980 (0xd7154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81e576eb875ef79c3d8f08ea0fa9a6fec82696ef
        Validity
            Not Before: Mar 24 14:46:02 2021 GMT
            Not After : Mar 24 14:46:02 2026 GMT
        Subject: CN=0680d9e07f85a0836a7d9cb65782dbd9ed5f38ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4f:97:22:0f:74:c6:09:2f:f8:54:be:82:d1:
                    f8:57:7a:fe:6f:09:15:99:79:bd:d8:fe:a0:63:ff:
                    9b:1e:4d:fc:a2:8e:c1:97:7c:80:79:07:d9:4f:92:
                    b2:44:d2:83:38:29:99:56:ee:f8:07:25:1a:5e:cf:
                    4a:ab:e0:0b:e9:21:4f:36:4e:b9:8c:3f:20:fa:bf:
                    4e:d4:4a:96:77:39:e7:bb:2b:60:04:86:1c:5e:c8:
                    9d:3c:5a:3a:72:00:26:6b:4f:44:26:e7:d7:c9:e8:
                    5e:70:46:22:9b:43:6f:46:18:8d:b3:eb:23:84:db:
                    29:13:88:61:82:d4:d3:2b:ae:3a:5a:eb:e1:ad:09:
                    7d:85:38:b5:e2:e8:98:d0:5b:b3:4d:50:b9:13:38:
                    ce:86:4a:73:13:a8:31:74:02:0e:81:a3:ee:b8:95:
                    28:87:38:cb:05:e1:f4:7c:e1:33:82:15:e4:46:e8:
                    cc:76:78:86:63:fe:58:a2:f6:d3:6f:04:11:a6:63:
                    c8:77:03:1e:45:f0:f6:d9:22:89:1d:07:43:fe:bc:
                    96:6f:59:5b:ea:c3:a2:35:e1:69:82:66:89:95:92:
                    06:62:23:3a:41:92:be:fa:0f:b4:a6:8b:52:8c:3b:
                    31:1a:16:28:c9:4c:21:95:98:44:13:26:ea:b7:ef:
                    e4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C2:9D:BA:39:9D:2B:A1:31:1F:EE:04:07:9E:68:40:D2:43:D4:0C
            X509v3 Authority Key Identifier:
                keyid:AA:DF:88:7C:B8:65:CD:BC:FC:4D:9D:03:B6:85:C8:B3:21:3D:7E:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/81e576eb875ef79c3d8f08ea0fa9a6fec82696ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1992c93c-15c7-4ad4-aedf-0b2c92dee12f/0680d9e07f85a0836a7d9cb65782dbd9ed5f38ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1992c93c-15c7-4ad4-aedf-0b2c92dee12f/81e576eb875ef79c3d8f08ea0fa9a6fec82696ef.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.80.0-179.43.90.255
                IPv6:
                  2803:2480::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:a8:db:56:94:db:8b:94:0f:ce:b5:0a:33:a8:19:fa:5a:45:
         ff:94:2e:86:57:b5:4e:65:46:80:c4:c6:13:82:97:b5:ab:ae:
         f6:9b:72:7a:f1:e8:f6:cb:34:13:35:95:d0:02:9e:4e:29:60:
         7a:41:01:2f:43:46:7b:54:6f:7d:85:67:d5:fd:94:05:cb:fb:
         0f:5b:43:6d:87:83:f5:b2:2f:71:e2:31:d3:4d:8e:43:b6:c6:
         bf:14:cc:c7:53:f9:eb:56:dd:d9:f4:b1:f4:db:0f:c3:2f:15:
         9d:d1:b2:4a:54:b3:9c:e7:d5:06:60:b7:70:0d:65:a5:19:78:
         a5:0f:33:50:c2:23:4f:29:7b:dc:ed:16:8e:bd:4e:eb:a1:c4:
         45:ba:8e:57:55:8f:5e:23:c6:98:2c:5c:28:73:1f:8a:50:e1:
         ab:78:af:90:3e:d1:9d:7b:b6:1b:44:39:f2:4e:9f:c2:86:48:
         bd:92:d2:c7:c8:58:6e:52:f4:d7:a8:9e:bd:e2:bc:2a:dd:dd:
         b0:de:d8:fe:5b:83:ae:a2:8a:d4:5a:b8:72:e8:b5:c5:4f:af:
         a0:76:c6:f7:06:44:70:76:25:c0:c3:9a:d2:42:b2:85:a8:24:
         55:4c:88:01:65:36:3b:b2:3e:4b:26:79:6a:a9:bb:97:0b:3b:
         0e:0d:b4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 31 21:24:47 2023 by rpki-client on console-ams.rpki-client.org