Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1f39b4c3-9753-4ff1-928b-a871b7199d9a/c6e442eec3a138014a75f371886df1519a4acb17.roa
File:                     c6e442eec3a138014a75f371886df1519a4acb17.roa (raw, json)
Hash identifier:          akwXFq1QX4nYV0a9ePWCvURZkUDCaSvgw8CReOnnLNg=
Subject key identifier:   05:1A:C5:A1:57:8D:5F:1B:8B:0C:32:CD:47:56:94:5C:38:87:FD:26
Certificate issuer:       /CN=9335683e4b18488db2c2495f3084999892751bfe
Certificate serial:       140FBA
Authority key identifier: F6:70:84:93:7A:11:D9:A6:92:CE:36:2D:A7:8A:AE:3A:9A:4F:12:D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9335683e4b18488db2c2495f3084999892751bfe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1f39b4c3-9753-4ff1-928b-a871b7199d9a/c6e442eec3a138014a75f371886df1519a4acb17.roa
Signing time:             Mon 07 Mar 2022 00:57:21 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     263793
IP address blocks:        167.249.52.0/24 maxlen: 24
                          167.249.52.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1314746 (0x140fba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9335683e4b18488db2c2495f3084999892751bfe
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=c6e442eec3a138014a75f371886df1519a4acb17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b3:ab:1a:89:ee:a0:1e:4f:d1:9b:ff:c7:93:
                    78:19:dd:60:fa:aa:34:12:50:a3:3b:1b:4a:3f:0e:
                    58:32:98:28:6a:2b:61:1d:b9:7b:e7:86:ad:ec:e1:
                    2f:0e:92:94:17:ff:49:7d:c7:33:8d:3a:f7:7b:aa:
                    60:3e:39:39:56:38:67:ee:8a:73:25:90:2e:b4:65:
                    5e:ee:15:60:46:dd:58:c0:de:a6:c1:37:9c:a5:40:
                    49:78:0c:3f:a9:a4:87:67:e8:35:00:bb:b4:f2:a2:
                    c6:dc:1b:8f:f8:f0:9f:e8:1f:c4:b5:3b:4c:ab:c9:
                    84:ad:a2:27:bd:24:e9:d1:01:42:f1:78:81:16:d5:
                    3a:b7:14:76:eb:1f:32:03:de:a5:18:78:d5:c9:13:
                    fb:04:e8:2f:1d:df:88:50:73:09:00:c0:49:42:6a:
                    bb:21:b2:18:b4:e5:ec:ec:5a:12:9f:b0:14:60:9b:
                    7a:b3:a3:fe:b1:13:16:c0:ae:56:d6:23:ad:52:58:
                    b6:c8:46:1d:10:2f:17:39:55:00:33:89:4f:3d:42:
                    33:9f:d5:0e:4a:7c:87:17:9b:2a:17:3f:dd:20:7e:
                    17:5e:d5:cb:90:f8:f7:a0:05:0c:8a:19:97:65:98:
                    e8:c7:70:85:d3:bf:41:81:f2:89:99:08:6e:c6:eb:
                    8c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1A:C5:A1:57:8D:5F:1B:8B:0C:32:CD:47:56:94:5C:38:87:FD:26
            X509v3 Authority Key Identifier:
                keyid:F6:70:84:93:7A:11:D9:A6:92:CE:36:2D:A7:8A:AE:3A:9A:4F:12:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9335683e4b18488db2c2495f3084999892751bfe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1f39b4c3-9753-4ff1-928b-a871b7199d9a/c6e442eec3a138014a75f371886df1519a4acb17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1f39b4c3-9753-4ff1-928b-a871b7199d9a/9335683e4b18488db2c2495f3084999892751bfe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:36:70:e2:b4:d4:18:1e:7a:6f:42:c9:8c:69:94:75:c9:86:
         ea:b4:26:ed:e0:05:d2:e6:c8:7e:77:5e:b9:fc:4c:c3:6d:21:
         b8:f7:f1:ae:18:cf:b3:4c:df:16:86:ac:5a:20:b6:d8:b6:89:
         6f:f2:41:ee:5e:9a:f5:b9:58:06:87:57:0f:64:82:a1:80:32:
         d1:02:5b:8a:6c:d9:92:65:06:2d:ea:a8:55:9f:75:36:ef:0f:
         59:36:34:08:cd:84:c8:a5:62:60:71:e9:94:e2:4c:ea:28:08:
         2f:7c:17:5b:81:c3:4a:35:c1:84:14:0c:f8:01:c7:f8:ba:b9:
         c9:23:53:51:d8:9d:f4:76:d5:ed:bf:7f:99:09:c5:e4:58:60:
         c3:7b:ce:f7:53:04:16:e4:b0:7c:31:85:15:72:5c:6f:15:a2:
         77:d5:40:46:af:a1:19:12:d1:0e:9a:3f:1a:4c:b2:f7:98:d6:
         c8:ee:f3:1a:13:ec:09:da:bb:da:c5:a4:70:8e:34:b0:32:bf:
         f5:5a:10:11:23:59:0e:cc:3c:95:d3:7e:f1:fc:d3:fb:e7:b9:
         f5:49:41:f9:2b:e1:99:12:19:63:c7:ad:38:b5:92:26:5c:95:
         1f:be:7e:ae:dc:af:53:52:b2:3f:4c:30:07:0c:68:51:9d:69:
         04:d0:81:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org