Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/8490ae259831606e9a5fcee79659d8d382e7780a.roa
File:                     8490ae259831606e9a5fcee79659d8d382e7780a.roa (raw, json)
Hash identifier:          qy6DxOhZB5DMznEWk0LLFVY3xnx8Z3S/8HzvExt7lUk=
Subject key identifier:   66:E4:F4:0F:6A:E3:89:17:5D:C3:EB:08:24:75:0F:B6:F4:7F:C0:EB
Certificate issuer:       /CN=7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350
Certificate serial:       17218E
Authority key identifier: 5F:58:C6:83:CE:D5:C8:0E:0F:DF:DB:14:B9:1D:DC:AF:3C:E2:AB:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/8490ae259831606e9a5fcee79659d8d382e7780a.roa
Signing time:             Fri 18 Mar 2022 00:50:43 +0000
ROA not before:           Thu 17 Mar 2022 03:00:00 +0000
ROA not after:            Sun 17 Mar 2024 03:00:00 +0000
asID:                     262197
IP address blocks:        200.30.189.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 16 Mar 2024 08:30:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1515918 (0x17218e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350
        Validity
            Not Before: Mar 17 03:00:00 2022 GMT
            Not After : Mar 17 03:00:00 2024 GMT
        Subject: CN=8490ae259831606e9a5fcee79659d8d382e7780a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2d:15:62:92:c5:76:0e:75:ab:d7:c3:d7:5e:
                    2a:4a:4c:c8:00:f0:8d:30:08:45:9d:7b:ea:02:da:
                    19:9d:1e:84:0d:13:ab:e4:62:92:46:9e:32:aa:63:
                    2b:cc:06:cb:39:54:07:02:32:bb:b1:e5:8f:15:c6:
                    93:bc:eb:af:d1:8e:27:34:3b:06:39:d7:16:2a:76:
                    8c:03:2b:fa:95:a0:d7:f1:c8:aa:91:74:9e:f5:b3:
                    d0:70:22:a3:fc:d9:92:54:51:6e:26:73:4e:7a:22:
                    5f:47:b6:d4:44:4c:30:e5:48:89:cc:e5:19:28:9b:
                    3e:b1:c1:49:35:1e:0a:71:4c:52:37:a2:32:a4:48:
                    a1:5e:a5:61:d8:ab:a0:c3:a0:be:6c:35:ac:96:81:
                    b8:a4:01:a2:fe:5f:c0:61:55:ba:9b:80:7d:dd:62:
                    1e:38:56:29:12:ad:2d:29:64:5d:2b:24:50:6c:fb:
                    a4:7c:50:08:f4:84:87:bd:b7:38:a0:90:9a:34:98:
                    35:1e:08:7b:be:da:5a:7e:9c:8d:8b:38:23:1d:3b:
                    0f:60:5a:31:a4:9f:4e:90:0b:de:0c:a0:8a:0a:20:
                    be:89:4c:2a:02:75:0a:33:b6:1e:42:be:19:74:76:
                    f3:43:24:de:0d:b0:d7:ef:fe:e3:d6:65:95:74:77:
                    7c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E4:F4:0F:6A:E3:89:17:5D:C3:EB:08:24:75:0F:B6:F4:7F:C0:EB
            X509v3 Authority Key Identifier:
                keyid:5F:58:C6:83:CE:D5:C8:0E:0F:DF:DB:14:B9:1D:DC:AF:3C:E2:AB:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/8490ae259831606e9a5fcee79659d8d382e7780a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:c9:0e:54:cf:37:e3:b1:7a:9a:6a:57:4c:2b:34:d9:b4:9d:
         98:65:0e:cd:68:8a:f9:0f:b2:cb:78:19:95:b0:ee:c5:21:ff:
         40:97:74:43:47:16:c7:c2:00:91:e9:a0:9d:79:d9:71:f5:bd:
         c5:67:66:48:5d:a0:c0:71:10:88:c6:4c:ea:81:a3:c3:70:63:
         1f:66:76:0a:d3:37:e6:8d:52:68:b2:20:28:28:f3:fb:cb:38:
         89:13:f8:98:51:aa:50:05:a7:51:8a:b4:0a:ad:5f:c8:c7:4e:
         2d:f5:1a:64:4b:cc:e6:4c:b4:9e:9a:5d:2b:6e:64:cc:e4:62:
         9b:42:fb:5f:07:ec:fb:8c:14:1c:cc:17:50:ba:02:ec:53:13:
         bd:65:2d:10:c2:1f:b5:eb:77:36:fe:c8:3f:bc:a4:b1:7a:1f:
         25:82:42:39:68:e3:8c:81:62:4c:e4:56:b2:96:8c:e2:c0:6c:
         8c:d8:98:72:08:a7:c0:c3:59:d6:e9:0a:35:be:60:49:fe:67:
         26:a1:a6:1a:9d:1a:d8:89:8a:1a:19:9a:1f:ba:14:40:30:30:
         04:1d:56:23:bf:ae:8e:54:8a:1d:a4:94:c8:6d:37:14:89:3e:
         5c:cd:62:db:01:03:ca:a5:9e:3b:0a:21:e9:f3:db:f4:4b:08:
         51:da:66:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 16 17:16:15 2024 by rpki-client on console-ams.rpki-client.org