Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/e622493cb95b883ce358130780433f920d4543b3.roa
File:                     e622493cb95b883ce358130780433f920d4543b3.roa (raw, json)
Hash identifier:          q/TTjn4Y8D2v+kk0jEQ3Jo6judb1eVs3Y5I3YJZPjws=
Subject key identifier:   DC:AC:D4:6E:04:F8:56:D4:B5:2F:94:92:2E:98:CC:DC:6E:82:4D:18
Certificate issuer:       /CN=7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350
Certificate serial:       0E1504
Authority key identifier: 5F:58:C6:83:CE:D5:C8:0E:0F:DF:DB:14:B9:1D:DC:AF:3C:E2:AB:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/e622493cb95b883ce358130780433f920d4543b3.roa
Signing time:             Wed 24 Mar 2021 14:42:05 +0000
ROA not before:           Wed 24 Mar 2021 14:42:05 +0000
ROA not after:            Tue 24 Mar 2026 14:42:05 +0000
asID:                     17086
IP address blocks:        200.30.134.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 922884 (0xe1504)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350
        Validity
            Not Before: Mar 24 14:42:05 2021 GMT
            Not After : Mar 24 14:42:05 2026 GMT
        Subject: CN=e622493cb95b883ce358130780433f920d4543b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d9:13:12:c5:ad:5a:8c:23:8f:b7:64:7a:55:
                    20:cc:93:c6:e5:8f:26:88:65:28:f6:95:77:93:1d:
                    18:ed:81:72:7e:fc:a3:d8:a0:e9:c6:3f:b2:64:68:
                    fc:d3:6f:1b:f8:d4:45:c9:0e:d4:39:ee:fc:97:f7:
                    72:22:79:c4:f0:ba:f3:45:8d:dc:41:90:2b:37:7f:
                    ae:a0:1b:f7:aa:c3:9f:5e:67:c7:c5:75:ce:d7:7c:
                    59:35:82:c6:c8:70:25:80:7a:8c:b1:83:5c:7d:09:
                    b7:b1:22:e8:49:78:7b:b7:97:1a:9a:7c:39:e0:ad:
                    7d:34:fd:83:a7:ab:75:ec:e3:cc:ec:57:6d:f6:86:
                    85:12:51:51:ae:88:db:68:72:12:dd:f3:44:d5:46:
                    b5:f3:28:fc:24:0d:19:44:81:cb:77:f1:ee:be:12:
                    94:72:b3:34:f8:ef:ad:35:f9:ec:2e:18:61:a1:fc:
                    75:3f:1f:9d:73:e6:eb:55:59:6f:e1:a5:f4:5c:f7:
                    0f:e9:87:65:bf:78:05:c3:b8:e0:d2:69:21:30:b0:
                    78:80:40:ad:89:68:e8:b5:32:5d:35:ad:32:76:31:
                    d0:cc:55:df:df:d7:fe:c0:d4:f7:f8:ef:2c:fe:c9:
                    b0:a8:9b:27:02:6a:dd:19:8a:01:0b:ce:dc:11:ad:
                    85:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:AC:D4:6E:04:F8:56:D4:B5:2F:94:92:2E:98:CC:DC:6E:82:4D:18
            X509v3 Authority Key Identifier:
                keyid:5F:58:C6:83:CE:D5:C8:0E:0F:DF:DB:14:B9:1D:DC:AF:3C:E2:AB:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/e622493cb95b883ce358130780433f920d4543b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:74:90:5e:a2:9a:ea:de:3c:a6:b2:5c:08:1e:2d:38:6f:86:
         60:ef:f5:00:73:f7:19:f3:56:8a:0f:5f:65:4d:2d:41:0c:77:
         2b:4d:9d:1f:8f:9d:5d:87:85:20:6b:1e:56:fc:b3:9a:d7:1f:
         5b:c7:85:03:10:df:ff:52:49:62:f2:34:a2:1b:0c:4a:64:bd:
         30:f9:05:e1:2c:35:2d:8d:17:ed:ef:ee:6f:ed:9e:29:8b:41:
         2f:0a:95:ae:16:9d:f0:4d:2f:d0:21:f3:38:9a:9b:8d:d7:e4:
         dd:70:ad:f8:4c:3a:90:1e:3a:65:2e:b2:89:5f:f6:dd:d3:a0:
         b4:94:fc:d4:42:d1:79:96:1b:2b:a0:e2:c8:20:15:7e:b6:50:
         96:25:55:e7:d6:4d:34:7f:6a:8c:76:77:68:c7:06:a6:e3:6f:
         01:d3:9a:f2:19:a0:48:70:68:b6:3e:ba:1b:96:49:69:17:5b:
         54:f5:3a:2d:7e:98:6f:ce:95:de:64:09:6d:d7:85:d8:ec:29:
         33:ef:6a:79:09:da:33:ec:67:9f:23:fa:8c:19:f4:80:1a:2e:
         9d:f4:56:59:05:05:b6:85:57:2b:e1:ad:cb:6d:92:ef:9b:4a:
         a6:fb:21:3e:65:18:bf:71:be:c5:bd:39:6c:a0:39:88:97:37:
         67:aa:49:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:10 2023 by rpki-client on console-fra.rpki-client.org