Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/0f4eafb6323cb60839a6e59c14328472f3d3bf49.roa
File:                     0f4eafb6323cb60839a6e59c14328472f3d3bf49.roa (raw, json)
Hash identifier:          +VZzu/ps+lhmki8h3E19e1RVZu7/Y4MBpiQ1I8keKGY=
Subject key identifier:   AB:EF:66:20:2A:F3:2F:CD:BA:7A:4D:E1:E0:11:AD:53:F5:CA:04:67
Certificate issuer:       /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial:       0E1B4D
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/0f4eafb6323cb60839a6e59c14328472f3d3bf49.roa
Signing time:             Wed 24 Mar 2021 14:45:11 +0000
ROA not before:           Wed 24 Mar 2021 14:45:09 +0000
ROA not after:            Tue 24 Mar 2026 14:45:09 +0000
asID:                     28079
IP address blocks:        190.5.251.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 924493 (0xe1b4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
        Validity
            Not Before: Mar 24 14:45:09 2021 GMT
            Not After : Mar 24 14:45:09 2026 GMT
        Subject: CN=0f4eafb6323cb60839a6e59c14328472f3d3bf49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:10:03:e0:c6:45:dd:ab:36:ee:5b:21:0f:68:
                    ba:ba:9d:e4:2b:32:f5:ba:fb:72:92:60:63:2e:d1:
                    68:14:65:40:af:ae:1a:63:b0:57:5b:62:76:ea:1a:
                    1a:df:06:29:be:10:53:13:49:56:ab:08:39:95:d6:
                    07:bb:51:61:c8:cf:46:59:f8:5b:34:a0:46:e3:e0:
                    85:ec:ca:15:c9:7d:13:ef:ed:57:81:85:a5:a5:91:
                    42:4b:f7:16:47:f0:5f:97:f4:68:f9:83:cd:28:6c:
                    19:5b:bd:3a:ed:8c:51:f9:6b:f7:c8:99:f2:4f:2c:
                    2d:6d:d4:52:19:f5:29:3b:58:b7:71:ea:8c:d3:77:
                    62:1b:64:76:68:dc:03:94:b7:57:20:06:08:5b:d7:
                    ea:52:2c:9a:6d:7c:39:9f:d5:7e:71:32:1d:a4:d1:
                    8a:5c:3e:14:42:d0:23:04:88:59:2b:78:de:5e:fc:
                    e3:4c:85:75:e0:d9:3b:5a:eb:9b:6b:b7:71:9c:02:
                    ef:8f:bc:35:6a:de:df:cd:18:90:bf:8b:6e:1d:2c:
                    df:03:2f:e5:d5:f9:f0:94:7f:50:bc:27:9d:7d:73:
                    66:77:4c:43:5b:65:64:58:18:c8:70:aa:ee:51:b8:
                    83:c6:7d:83:c4:59:b3:ea:7f:ed:6e:d9:71:32:51:
                    82:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:EF:66:20:2A:F3:2F:CD:BA:7A:4D:E1:E0:11:AD:53:F5:CA:04:67
            X509v3 Authority Key Identifier:
                keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/0f4eafb6323cb60839a6e59c14328472f3d3bf49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:b6:34:ae:0f:72:97:cc:49:94:c0:0d:10:24:ef:a3:81:57:
         c7:eb:03:7e:3f:eb:b1:e8:cd:4a:69:11:d4:90:e8:f0:d6:b7:
         f4:82:c2:0e:07:32:4a:23:e0:02:e7:c7:5a:ee:af:66:fa:41:
         95:a6:9e:6d:e0:37:fc:7d:49:a5:4a:fb:29:82:07:0a:23:30:
         24:a8:8e:3a:78:fd:1f:58:5f:a9:39:b9:68:8f:1f:ed:fd:01:
         5e:37:64:17:46:c4:3b:a6:6a:26:bc:c1:d3:53:6e:2f:1a:69:
         27:08:b7:ad:69:19:bc:82:35:73:66:4a:ec:27:3b:14:1b:91:
         a6:52:1d:89:b4:22:6f:32:48:d1:2f:7b:4e:96:5f:d1:01:66:
         f6:d8:98:7c:ae:6d:19:13:ff:82:a5:23:a6:e5:92:ff:dd:01:
         24:ab:cd:68:3b:42:1e:33:b4:cc:69:78:2d:b4:c0:18:82:4a:
         5e:80:24:1a:ae:dd:c3:59:dd:f6:9d:d5:5e:80:2c:de:a9:44:
         f3:95:38:57:a4:f6:d2:9e:c1:e3:4f:3a:39:9d:8d:1f:d9:be:
         f5:06:d7:43:64:26:2a:e5:66:8c:eb:2f:ed:df:2a:4c:0c:2f:
         e8:7a:96:45:95:70:f1:0a:c9:3b:be:36:27:f2:3c:52:2e:e4:
         87:0f:a7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:25 2023 by rpki-client on console-ams.rpki-client.org