Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1b525202-f539-403f-a71f-f0c4f0c705d0/0fb90dc21f6a90ed5621c9d6c6aa63749060e2b8.roa
File:                     0fb90dc21f6a90ed5621c9d6c6aa63749060e2b8.roa (raw, json)
Hash identifier:          nd4tY1wtsLfoPRwFSc/+efRPS9vq2Dd2VqL1xinnBmA=
Subject key identifier:   56:98:9A:FC:5B:F9:1B:59:D0:0C:EC:E6:67:BE:20:16:34:77:E4:95
Certificate issuer:       /CN=cbf5b73a30367a9832e6ddcde4f3c6d8196f3ea2
Certificate serial:       F24A
Authority key identifier: 03:E0:4B:3C:C9:6F:9F:70:7C:B5:4B:05:0B:CB:A4:19:5D:DD:BE:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbf5b73a30367a9832e6ddcde4f3c6d8196f3ea2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1b525202-f539-403f-a71f-f0c4f0c705d0/0fb90dc21f6a90ed5621c9d6c6aa63749060e2b8.roa
Signing time:             Mon 05 Apr 2021 14:41:05 +0000
ROA not before:           Mon 05 Apr 2021 03:00:00 +0000
ROA not after:            Wed 05 Apr 2023 03:00:00 +0000
asID:                     14618
IP address blocks:        179.0.17.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62026 (0xf24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbf5b73a30367a9832e6ddcde4f3c6d8196f3ea2
        Validity
            Not Before: Apr  5 03:00:00 2021 GMT
            Not After : Apr  5 03:00:00 2023 GMT
        Subject: CN=0fb90dc21f6a90ed5621c9d6c6aa63749060e2b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:86:37:e6:2f:81:c4:4b:7d:b2:28:a6:2f:5a:
                    ee:13:93:82:4f:e8:b7:3b:ce:42:5b:c1:f3:de:a9:
                    b9:d5:9d:9f:a5:b6:c8:c9:db:b4:6a:77:08:c2:c1:
                    12:8d:d6:af:84:65:73:be:cb:57:d7:16:e6:cd:d5:
                    9b:2e:ec:d4:71:04:9e:f5:a3:2a:9b:0a:a3:b0:dd:
                    7f:32:3f:b2:c1:03:30:6a:e9:fc:4d:24:3d:f0:d2:
                    59:fe:07:83:a2:1c:e0:b4:f6:b1:57:aa:fe:4a:cd:
                    cc:f2:9f:0f:c6:86:ed:5e:88:9f:56:34:ea:e9:aa:
                    75:39:ca:23:52:ba:75:8c:81:61:bc:a8:45:bd:6d:
                    2a:9d:22:c2:0f:61:30:25:69:ae:5c:c3:c3:07:dc:
                    1a:e5:49:95:42:04:99:69:a7:e4:18:6d:02:f2:23:
                    c5:1b:28:7a:db:10:66:96:0f:17:a3:b4:49:c7:81:
                    1a:0a:86:d6:9e:c0:7d:03:53:46:7c:43:3f:94:00:
                    1b:65:ed:56:d4:da:18:7c:46:93:7b:42:e7:47:ed:
                    f2:03:20:83:41:a8:99:5b:05:b0:37:c8:2f:7e:0d:
                    a7:d8:9f:54:05:65:dd:39:6d:47:54:9a:e3:7a:f0:
                    81:d1:e8:79:2a:d7:9b:cf:ff:fc:06:66:74:ae:d9:
                    3b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:98:9A:FC:5B:F9:1B:59:D0:0C:EC:E6:67:BE:20:16:34:77:E4:95
            X509v3 Authority Key Identifier:
                keyid:03:E0:4B:3C:C9:6F:9F:70:7C:B5:4B:05:0B:CB:A4:19:5D:DD:BE:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbf5b73a30367a9832e6ddcde4f3c6d8196f3ea2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1b525202-f539-403f-a71f-f0c4f0c705d0/0fb90dc21f6a90ed5621c9d6c6aa63749060e2b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1b525202-f539-403f-a71f-f0c4f0c705d0/cbf5b73a30367a9832e6ddcde4f3c6d8196f3ea2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:99:93:1f:7a:84:5d:30:68:02:80:59:b3:32:35:ea:b4:a9:
         5e:6a:92:93:6f:85:5d:5f:e6:6d:08:ec:33:0c:9a:4b:02:26:
         55:e2:b3:df:81:9e:41:59:8e:0c:52:48:06:40:fa:90:49:91:
         54:24:12:4a:5f:e9:cc:a7:d8:db:36:5e:5f:6f:7f:9f:07:ad:
         49:61:42:b5:40:e4:73:17:7e:31:09:71:09:04:c3:f7:3a:0a:
         51:01:65:a9:c4:4a:55:f2:63:e9:78:0d:73:25:f2:06:1b:49:
         2e:ba:f3:dd:66:e8:c3:b9:de:81:2d:ec:2c:40:35:14:f2:67:
         3c:cc:33:40:6f:5f:9d:f1:62:37:34:38:df:ef:7d:bf:ef:32:
         85:0f:76:b9:75:67:e3:66:24:d4:e8:4c:e2:f4:6e:28:32:15:
         e8:78:5a:83:03:e4:01:56:ee:92:39:95:0d:a0:51:4f:e8:2a:
         28:22:0f:35:c2:a1:b2:23:02:c5:cd:ea:dc:47:0d:ae:54:be:
         40:9c:81:a9:67:dc:9f:d8:44:21:e1:2c:32:f7:ed:70:c7:be:
         77:46:ab:9c:8b:fe:c1:0f:e0:4d:79:b0:f0:db:9a:43:bb:fb:
         9a:c3:d6:70:ea:24:4e:0a:82:a5:b2:db:9a:16:90:29:4c:79:
         f3:e2:46:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:10 2023 by rpki-client on console-fra.rpki-client.org