Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/a1484c6feef468a45ed74f942bf9e903e968dcb0.roa
File:                     a1484c6feef468a45ed74f942bf9e903e968dcb0.roa (raw, json)
Hash identifier:          m9Fw1+G2CUjS6eixNUF3cKVjTirhnv94TOtTZpSf3Nk=
Subject key identifier:   48:1D:EA:57:99:45:1D:82:9B:C1:EC:7F:58:61:96:3F:53:64:E3:95
Certificate issuer:       /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial:       0E2E98
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/a1484c6feef468a45ed74f942bf9e903e968dcb0.roa
Signing time:             Wed 24 Mar 2021 14:45:11 +0000
ROA not before:           Wed 24 Mar 2021 14:45:09 +0000
ROA not after:            Tue 24 Mar 2026 14:45:09 +0000
asID:                     27783
IP address blocks:        200.46.236.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 929432 (0xe2e98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
        Validity
            Not Before: Mar 24 14:45:09 2021 GMT
            Not After : Mar 24 14:45:09 2026 GMT
        Subject: CN=a1484c6feef468a45ed74f942bf9e903e968dcb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:40:73:f4:e5:55:5c:84:6f:18:d1:df:15:c9:
                    38:39:19:03:cc:e9:86:40:10:65:50:c0:17:05:0f:
                    af:e9:e6:9b:5e:c5:d9:11:d2:36:bb:83:59:83:c5:
                    9f:4f:b9:a0:c0:06:98:46:4e:df:47:ee:ed:b1:e6:
                    07:b6:c5:56:78:3a:ba:1a:82:3b:a7:72:55:cc:60:
                    03:73:75:37:2e:c6:b4:92:97:b6:8d:a1:69:e6:1e:
                    d4:35:53:2b:2c:6c:80:65:0c:9b:b5:0c:7d:1f:05:
                    dd:f3:61:75:c2:82:15:13:6e:fa:73:da:09:78:37:
                    16:ea:5c:03:81:27:e0:65:5a:67:81:e4:73:06:f0:
                    5c:24:1e:8f:12:d7:df:d6:62:57:cd:6d:70:d5:56:
                    8e:81:6e:c6:af:ac:5f:bc:26:bd:97:4d:4d:2b:04:
                    69:8c:c1:03:39:c7:1f:8b:85:13:88:c1:d9:9b:c3:
                    07:c9:61:95:bb:29:45:5a:a0:9d:07:f0:71:22:68:
                    be:a1:2a:bc:db:5d:0d:b8:75:a7:37:c2:6f:2b:cc:
                    be:c5:f5:ba:7e:12:01:96:90:21:fb:e1:72:e1:4e:
                    17:ea:c7:d4:fe:20:af:40:73:80:1a:22:54:dc:fb:
                    99:c8:53:29:e5:1f:54:3e:ad:0d:b2:b1:d0:00:48:
                    03:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1D:EA:57:99:45:1D:82:9B:C1:EC:7F:58:61:96:3F:53:64:E3:95
            X509v3 Authority Key Identifier:
                keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/a1484c6feef468a45ed74f942bf9e903e968dcb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.46.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:d5:3d:c3:b5:2c:de:06:bd:80:1f:f1:c3:22:35:f5:03:7b:
         6a:55:95:e6:92:e7:88:12:d5:9e:18:9b:63:e0:46:f5:df:ad:
         33:fe:d0:b5:b0:b6:5f:f2:d8:f2:ab:6d:9c:da:1d:29:14:ee:
         45:28:f4:92:b1:cd:7d:02:f3:54:9d:ee:31:6a:48:75:26:73:
         8a:93:04:ae:0d:58:71:e3:91:1d:e1:56:c3:e4:52:cb:1f:84:
         c8:e8:35:ef:e4:be:03:15:7f:54:d6:86:8a:0b:d7:8d:d2:2f:
         e4:ef:80:cb:a9:93:31:6d:d6:dc:11:1c:f3:bb:8f:38:d7:a8:
         89:16:3d:98:5c:bc:d2:f6:4b:a2:06:e2:fa:98:e5:49:0b:81:
         b2:57:7a:f1:d3:22:75:84:c1:03:1b:e4:1c:98:23:e9:d1:48:
         e4:19:48:1d:ef:fb:2f:92:7c:20:e3:18:6a:5d:08:50:e5:e6:
         5a:be:66:e3:4f:c2:d8:5b:ec:f4:13:a5:c5:43:25:68:fb:00:
         66:6b:0c:18:0d:d8:a5:50:fc:6f:86:ae:b5:b6:f6:d4:00:8a:
         05:f9:37:fa:ca:a5:1c:aa:db:86:79:23:60:34:08:b6:a0:47:
         97:d0:9a:8c:43:77:14:34:76:6e:15:44:2c:f3:1d:aa:93:db:
         7b:0a:93:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:10 2023 by rpki-client on console-fra.rpki-client.org