Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/722e555f77c8fab9a651cd49c1b10e44932aadbd.roa
File:                     722e555f77c8fab9a651cd49c1b10e44932aadbd.roa (raw, json)
Hash identifier:          cbwf0xxCykmt2rGpQ5vhEZ9QRrX5LcX6+EhxmgMPexg=
Subject key identifier:   83:62:91:93:68:D7:A1:F8:C3:A8:6F:75:62:4F:C1:50:27:44:F5:A8
Certificate issuer:       /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial:       0E36F2
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/722e555f77c8fab9a651cd49c1b10e44932aadbd.roa
Signing time:             Wed 24 Mar 2021 14:45:11 +0000
ROA not before:           Wed 24 Mar 2021 14:45:09 +0000
ROA not after:            Tue 24 Mar 2026 14:45:09 +0000
asID:                     23360
IP address blocks:        200.46.36.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 931570 (0xe36f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
        Validity
            Not Before: Mar 24 14:45:09 2021 GMT
            Not After : Mar 24 14:45:09 2026 GMT
        Subject: CN=722e555f77c8fab9a651cd49c1b10e44932aadbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f5:d1:21:f6:e7:8b:f0:b1:37:08:32:83:b1:
                    97:56:3d:d2:fe:d8:c6:08:e5:18:86:9d:62:ef:27:
                    7d:8c:3a:30:1d:bf:c5:b6:19:9e:e1:33:95:9d:00:
                    c4:23:4d:90:01:34:ec:39:6c:fc:12:62:fe:bf:1e:
                    27:80:e3:f7:3c:10:53:71:82:3f:fe:c9:cc:44:e7:
                    7d:8f:7c:26:49:b0:d5:da:d0:e3:27:84:2a:e4:61:
                    37:5a:29:e8:17:7f:05:58:a1:6e:84:4e:9b:2f:4d:
                    bb:14:4a:6a:b0:36:f7:36:1d:75:b1:39:d6:4e:63:
                    47:17:f2:46:7f:7d:05:11:98:91:cb:bf:4f:72:aa:
                    1c:c4:2d:63:29:1a:79:11:7e:9e:d4:b3:94:15:67:
                    db:24:92:50:00:34:fc:0f:dd:7f:19:67:53:9a:ab:
                    42:64:6b:3c:c4:1d:6b:f2:f2:68:48:1a:44:1f:a7:
                    e6:ff:82:cd:4f:f0:71:25:a0:74:c2:76:20:5c:01:
                    fe:25:7b:25:d2:87:97:82:ea:8d:64:06:53:8e:a1:
                    15:6d:19:a9:6d:d6:d5:e4:b2:5f:72:f0:7f:10:02:
                    b5:20:79:c8:0a:0b:91:a8:d3:84:f9:2b:7c:c7:d5:
                    0a:b1:83:fb:ba:7c:fb:e0:bc:ed:bb:15:89:fb:7c:
                    82:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:62:91:93:68:D7:A1:F8:C3:A8:6F:75:62:4F:C1:50:27:44:F5:A8
            X509v3 Authority Key Identifier:
                keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/722e555f77c8fab9a651cd49c1b10e44932aadbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.46.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:61:b1:5a:c5:4e:c5:0e:9b:ec:f2:d8:17:7e:54:00:d6:4d:
         b8:55:89:b3:99:40:94:4a:54:b4:25:5c:ef:03:7f:3f:82:3e:
         ae:e3:2f:a4:d0:4a:3e:a7:c3:6e:52:88:ad:6b:d0:56:40:b2:
         5c:22:73:d8:a8:32:c9:61:ba:f7:9f:f7:eb:01:05:f3:61:5c:
         ed:26:4e:7b:6b:cf:cd:f6:e5:39:92:00:05:75:43:f4:07:a6:
         03:63:44:81:db:15:03:ce:f1:7e:56:31:81:2b:60:a1:3e:88:
         b6:ad:b2:74:d2:ae:11:ff:03:55:b9:5b:61:e9:e8:4d:1b:c3:
         1a:0c:a9:9d:ec:88:86:e1:77:1d:93:13:99:9d:ea:86:a2:71:
         f5:56:f4:b9:d6:bb:fa:2a:f2:68:eb:dd:f6:33:82:fb:26:ee:
         8f:bd:22:09:c4:4a:5e:73:81:b2:5c:7d:56:2d:5c:7a:da:51:
         4a:c1:5d:3e:73:94:32:54:0b:2b:72:f5:ae:a2:52:a7:ab:20:
         22:ed:4b:62:84:e1:7f:7b:63:7d:18:36:ed:42:8b:d7:60:8c:
         e9:7b:f2:57:42:2f:29:bf:1d:05:e4:89:cf:ef:71:8b:da:b8:
         bb:2d:e3:84:5c:0e:dd:14:85:32:b0:95:ee:cb:26:28:ef:44:
         1c:38:f5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:25 2023 by rpki-client on console-ams.rpki-client.org