Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1b525202-f539-403f-a71f-f0c4f0c705d0/c94f833a53b4bc05c938a9c162ced963e7217dda.roa
File:                     c94f833a53b4bc05c938a9c162ced963e7217dda.roa (raw, json)
Hash identifier:          USGKp46eiExeweJXceeLrE5gAqheRIJBtngru2+naV4=
Subject key identifier:   80:0C:96:B1:2E:11:9F:85:86:73:68:58:54:1A:F0:DA:58:28:81:AF
Certificate issuer:       /CN=cbf5b73a30367a9832e6ddcde4f3c6d8196f3ea2
Certificate serial:       EF61
Authority key identifier: 03:E0:4B:3C:C9:6F:9F:70:7C:B5:4B:05:0B:CB:A4:19:5D:DD:BE:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbf5b73a30367a9832e6ddcde4f3c6d8196f3ea2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1b525202-f539-403f-a71f-f0c4f0c705d0/c94f833a53b4bc05c938a9c162ced963e7217dda.roa
Signing time:             Mon 05 Apr 2021 14:40:42 +0000
ROA not before:           Mon 05 Apr 2021 03:00:00 +0000
ROA not after:            Wed 05 Apr 2023 03:00:00 +0000
asID:                     16509
IP address blocks:        179.0.17.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61281 (0xef61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbf5b73a30367a9832e6ddcde4f3c6d8196f3ea2
        Validity
            Not Before: Apr  5 03:00:00 2021 GMT
            Not After : Apr  5 03:00:00 2023 GMT
        Subject: CN=c94f833a53b4bc05c938a9c162ced963e7217dda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ab:81:af:37:d1:41:33:a3:41:5d:d5:6b:53:
                    c1:69:48:e8:40:3e:cc:54:c7:9d:0e:63:7c:8b:0e:
                    ad:fe:eb:80:31:dc:fb:4f:28:75:b9:bb:a5:d2:b8:
                    be:0d:96:63:c3:3a:82:6e:15:4c:77:c0:1f:0f:d1:
                    63:86:c4:41:6a:80:eb:a9:c0:c6:bc:1a:c8:74:52:
                    31:65:c7:44:b2:57:22:51:20:51:e2:8c:fb:ce:0a:
                    b5:02:9d:f6:de:d3:00:ce:6c:92:bd:01:d3:32:54:
                    14:09:24:04:36:a5:fb:c5:64:ad:5c:46:61:ac:2f:
                    6c:15:9d:a0:39:70:fe:89:fd:d5:3d:ce:3b:ad:80:
                    bb:86:ea:72:a4:e8:36:3a:96:93:a1:1d:a9:24:de:
                    45:ed:51:a5:e9:85:e8:81:ae:c5:b2:9f:04:a0:1f:
                    2c:fc:12:b9:b1:7a:6b:3f:89:39:c9:90:63:ab:10:
                    7c:4c:22:05:0c:75:e1:2b:d2:f1:c6:ff:e3:ad:9e:
                    95:ab:6d:b1:db:72:03:4b:49:38:10:18:ec:ce:74:
                    ae:0f:c1:57:19:2f:d8:a7:01:c2:8f:2e:6a:3b:ac:
                    6d:bd:b0:d9:d5:67:8b:9e:fc:38:e9:b4:1d:9d:f3:
                    ea:c5:4b:16:a4:20:03:fd:e6:b0:e7:7f:09:ce:41:
                    74:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:0C:96:B1:2E:11:9F:85:86:73:68:58:54:1A:F0:DA:58:28:81:AF
            X509v3 Authority Key Identifier:
                keyid:03:E0:4B:3C:C9:6F:9F:70:7C:B5:4B:05:0B:CB:A4:19:5D:DD:BE:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbf5b73a30367a9832e6ddcde4f3c6d8196f3ea2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1b525202-f539-403f-a71f-f0c4f0c705d0/c94f833a53b4bc05c938a9c162ced963e7217dda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1b525202-f539-403f-a71f-f0c4f0c705d0/cbf5b73a30367a9832e6ddcde4f3c6d8196f3ea2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:64:16:20:98:17:43:55:b6:07:b0:2a:e6:60:74:39:11:2f:
         5f:9d:55:2d:9b:66:57:36:46:6a:59:d9:5d:77:4d:1f:e1:47:
         3b:92:9c:c5:54:6b:a7:65:ae:86:a1:52:e3:4f:40:b8:06:d1:
         4d:fa:30:09:38:67:14:37:9f:2e:d5:04:cb:a9:7e:39:35:d5:
         92:6c:13:e4:3a:e9:15:9d:15:4f:be:87:f3:f4:3a:47:e4:c1:
         25:05:d7:3f:26:10:f2:45:17:75:59:c6:7a:52:67:28:8a:37:
         15:3c:b7:45:dd:9f:e8:5f:ca:4d:14:da:ae:bb:fe:78:ae:d5:
         60:14:4d:7c:fc:de:ad:3e:2c:97:29:89:6f:f6:f6:70:fc:e6:
         41:2b:4c:54:55:67:05:0f:45:03:20:c7:65:8f:69:f3:33:25:
         35:45:06:bb:f2:bd:f2:96:13:62:5a:d4:48:2a:80:77:00:78:
         e7:3e:d0:80:bb:93:99:24:ba:39:29:a8:68:82:dc:e7:0d:6a:
         d8:2d:a4:29:47:d7:40:b4:d9:81:06:e7:41:1e:57:3a:6e:ce:
         9b:4d:b5:7c:d0:27:5e:3c:46:aa:2c:3d:40:8b:db:33:8c:ce:
         a8:43:77:da:86:16:00:2b:da:b4:83:c7:9c:d1:63:7c:2a:fa:
         22:6d:27:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:25 2023 by rpki-client on console-ams.rpki-client.org