Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cb73da2-794f-46c0-8cd1-ea0cf0947f87/2fe3a3b30f4f63f9c278dd5263ea71d2051da03a.roa
File:                     2fe3a3b30f4f63f9c278dd5263ea71d2051da03a.roa (raw, json)
Hash identifier:          sjkhpjbcn4cv5gN88pckxgj332h+Lvqagcj/543MtfI=
Subject key identifier:   68:CC:5C:41:4F:DF:5C:B5:7A:5E:7D:EF:04:8E:26:B8:5A:47:08:27
Certificate issuer:       /CN=fa51358f08e5b961b8771fd9e9a858af6e1a4b4c
Certificate serial:       0331
Authority key identifier: 27:5D:8C:C6:B0:4B:F0:2A:37:A8:B9:45:1A:34:E9:6E:F2:9A:5D:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa51358f08e5b961b8771fd9e9a858af6e1a4b4c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cb73da2-794f-46c0-8cd1-ea0cf0947f87/2fe3a3b30f4f63f9c278dd5263ea71d2051da03a.roa
Signing time:             Thu 12 May 2022 18:40:35 +0000
ROA not before:           Thu 12 May 2022 03:00:00 +0000
ROA not after:            Sun 12 May 2024 03:00:00 +0000
asID:                     267858
IP address blocks:        170.244.168.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 817 (0x331)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa51358f08e5b961b8771fd9e9a858af6e1a4b4c
        Validity
            Not Before: May 12 03:00:00 2022 GMT
            Not After : May 12 03:00:00 2024 GMT
        Subject: CN=2fe3a3b30f4f63f9c278dd5263ea71d2051da03a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:26:ea:5f:3a:e9:bf:7d:fa:cf:be:e4:6f:8f:
                    70:76:c0:cc:21:3b:c9:a8:6a:a8:55:86:25:3e:f9:
                    e3:78:d4:73:c0:8a:ce:f2:b0:ce:76:90:26:2b:13:
                    0e:1c:63:c5:ed:69:48:50:f7:fa:20:85:38:ca:8f:
                    34:e6:cd:06:4a:7c:8f:ba:f0:a4:6b:c6:3e:49:c3:
                    71:87:dd:0b:d5:6b:41:54:01:68:2a:ce:d7:28:6b:
                    11:80:13:0e:eb:7e:24:05:32:e2:a2:83:c1:da:15:
                    4d:5f:37:09:67:79:f6:e0:3e:2c:cd:ef:4b:29:38:
                    18:da:85:eb:42:6e:71:07:e9:9e:05:af:8b:c5:fa:
                    51:39:1e:76:17:d7:71:0f:63:7e:27:0a:6f:d8:84:
                    2c:85:cd:37:f4:49:ee:61:a0:be:da:0e:64:53:3c:
                    82:45:e6:98:8a:8a:d1:21:76:92:49:7b:19:ce:a5:
                    88:f7:55:45:18:0d:13:4a:f7:a7:43:0b:e5:a2:88:
                    48:4c:be:7a:92:01:21:2d:9a:1d:9b:b0:c7:28:4f:
                    41:f0:cd:0e:fa:cc:1e:e7:88:48:1c:f0:22:31:ae:
                    72:61:d5:9d:33:ba:e0:88:f6:5a:1e:b9:71:dd:d8:
                    4d:78:21:bf:41:2c:94:fd:90:8b:34:a9:40:63:b5:
                    c0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:CC:5C:41:4F:DF:5C:B5:7A:5E:7D:EF:04:8E:26:B8:5A:47:08:27
            X509v3 Authority Key Identifier:
                keyid:27:5D:8C:C6:B0:4B:F0:2A:37:A8:B9:45:1A:34:E9:6E:F2:9A:5D:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa51358f08e5b961b8771fd9e9a858af6e1a4b4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cb73da2-794f-46c0-8cd1-ea0cf0947f87/2fe3a3b30f4f63f9c278dd5263ea71d2051da03a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cb73da2-794f-46c0-8cd1-ea0cf0947f87/fa51358f08e5b961b8771fd9e9a858af6e1a4b4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:3b:92:86:30:d3:d8:65:58:80:47:3d:0d:95:f0:ae:c8:1f:
         98:e1:3b:87:c4:c5:a5:52:9f:40:c9:89:09:f8:fb:f6:8a:51:
         fa:2e:17:bb:c1:8a:75:ca:eb:44:c7:d8:cd:26:77:a5:92:fe:
         ee:8c:b0:47:aa:17:f1:b1:9e:d9:18:cf:5e:ef:2d:d0:a0:b1:
         ec:92:17:a0:f8:67:fd:3a:c5:68:ed:37:26:17:a6:84:98:10:
         df:2a:e9:c9:f9:c0:51:8b:e1:5d:c1:f6:3c:1c:55:8d:6f:53:
         e4:e9:10:d8:f6:b9:c8:e3:3c:df:4e:b5:60:c3:71:f9:ba:1c:
         21:81:14:7c:3d:b9:fc:55:6f:eb:34:28:0c:35:18:ca:0e:2d:
         f2:39:a5:89:ce:2e:e3:79:2a:ca:95:d2:eb:66:7b:8c:23:97:
         af:03:e6:01:3a:4a:4b:51:e4:27:d6:6b:97:f5:2a:9b:fb:89:
         fc:c5:56:d1:8e:ba:f3:33:8b:1e:a5:c3:cf:f0:8a:98:b6:08:
         55:d3:d5:39:36:fe:67:f6:f1:d8:eb:24:cf:28:f5:60:3a:b1:
         2c:ea:ec:20:d0:0b:f9:25:d4:12:66:84:75:7f:c8:1b:15:4c:
         6f:6e:7c:74:ef:c8:87:32:34:fc:d8:c5:09:d7:77:43:f1:cd:
         e5:38:c4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:10 2023 by rpki-client on console-fra.rpki-client.org