Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/2103acf3fea943df47281783891dac001cb34cfb.roa
File:                     2103acf3fea943df47281783891dac001cb34cfb.roa (raw, json)
Hash identifier:          58ecaT5/2Lpw6lf75zLdFhURXUMS32/GhDYSx/ZSx7A=
Subject key identifier:   86:F0:B2:1D:2B:7F:28:0B:D2:15:A8:93:93:BE:72:58:D6:C0:B1:B5
Certificate issuer:       /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial:       0E46BE
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/2103acf3fea943df47281783891dac001cb34cfb.roa
Signing time:             Wed 24 Mar 2021 14:45:11 +0000
ROA not before:           Wed 24 Mar 2021 14:45:09 +0000
ROA not after:            Tue 24 Mar 2026 14:45:09 +0000
asID:                     28112
IP address blocks:        200.46.12.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 935614 (0xe46be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
        Validity
            Not Before: Mar 24 14:45:09 2021 GMT
            Not After : Mar 24 14:45:09 2026 GMT
        Subject: CN=2103acf3fea943df47281783891dac001cb34cfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d5:a0:31:0f:d8:95:a4:c4:a6:16:fc:dd:4f:
                    db:9a:25:54:d7:3b:ac:a8:c8:d6:0b:52:8d:2c:7f:
                    29:2a:02:b4:cf:90:07:be:a5:7a:7c:63:e8:27:fb:
                    5a:f5:83:ce:e6:d7:f5:60:ed:94:0b:27:78:c9:60:
                    00:25:61:f5:af:b4:87:c6:65:81:f1:72:33:5d:8b:
                    5f:ff:88:bf:72:ec:5d:f3:0e:0c:cd:99:66:6e:b6:
                    6a:c9:18:e8:ca:63:95:d7:6e:58:0a:ed:84:44:97:
                    9c:de:fa:d2:0d:36:4f:1e:63:4f:76:d6:7a:14:4c:
                    da:f8:4d:cc:96:98:74:e2:df:ff:b9:05:e0:10:53:
                    b9:23:23:5a:c8:74:3a:0b:79:d7:a5:31:6c:2f:18:
                    07:bf:27:b4:39:2c:e5:08:0b:47:82:16:62:be:35:
                    d6:07:63:ee:5b:de:c2:1f:99:8f:81:2f:70:d3:f7:
                    cb:3b:20:55:23:c0:ec:2a:25:60:42:d7:cc:fb:ec:
                    5f:2d:f0:e4:6f:a6:81:fe:eb:fd:9e:7c:b4:2c:69:
                    f9:90:e8:46:dc:80:68:99:91:8f:ec:06:77:c4:15:
                    9e:2e:34:26:09:1b:57:86:d2:01:1b:27:15:72:e2:
                    bd:37:b8:61:c4:3c:c1:6f:c9:da:4e:bf:a1:be:25:
                    47:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F0:B2:1D:2B:7F:28:0B:D2:15:A8:93:93:BE:72:58:D6:C0:B1:B5
            X509v3 Authority Key Identifier:
                keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/2103acf3fea943df47281783891dac001cb34cfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.46.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:3c:9f:2c:c6:21:39:af:12:e0:08:b7:25:4b:e9:6e:8e:82:
         9c:d9:ba:76:b6:e3:64:e7:95:82:2a:cb:0f:a3:49:08:40:87:
         c8:b6:8a:ba:0d:75:0e:06:38:c2:2f:06:f5:e1:75:03:93:e2:
         8e:a8:d7:4d:7c:b6:00:fe:2f:ef:8a:c6:78:9a:f2:be:8d:d4:
         49:ed:16:67:e6:18:73:4b:41:d5:98:a2:06:8a:83:7f:52:39:
         dc:94:3f:cf:2c:dd:42:7b:50:17:3e:2e:b5:dd:31:13:33:5e:
         18:73:62:33:fb:b9:7c:ed:4d:2d:f7:40:81:13:ab:1e:b4:34:
         9a:19:a6:7e:62:c4:1f:f9:85:f7:2d:f3:51:49:8f:81:f1:b8:
         51:2c:c9:b5:66:57:be:66:76:75:16:26:5c:af:3c:7d:55:4c:
         0d:aa:5c:97:5f:4a:35:bc:1b:39:2d:bb:1a:1f:58:0f:f1:c1:
         25:71:2e:87:04:47:7e:44:3f:e7:9c:39:a0:71:6b:2e:3a:10:
         dd:a2:77:48:8a:f0:49:d7:ea:0b:d4:46:20:5c:9f:e2:fb:60:
         d7:64:8b:98:02:d8:45:ea:12:07:85:5a:e7:e8:84:1a:59:7f:
         c9:38:76:01:58:50:67:b8:2a:8f:ef:35:05:0d:e8:18:c0:48:
         97:c6:ab:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:10 2023 by rpki-client on console-fra.rpki-client.org