Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/27b5df3568a4d9fe8fc868c18ff9852729834e51.roa
File:                     27b5df3568a4d9fe8fc868c18ff9852729834e51.roa (raw, json)
Hash identifier:          9Keu+TO5e9/LyqO5gatqr3uVEJz5zjUCkcTRIq5jBo8=
Subject key identifier:   02:B2:D5:1B:24:18:EA:2F:C7:85:89:55:49:0F:42:27:CD:47:6F:D1
Certificate issuer:       /CN=6a875539d46b4f7b023fe742a5b4cf5fe47838f3
Certificate serial:       117FA4
Authority key identifier: 09:91:F7:01:7A:3C:82:12:AE:ED:7C:67:10:C9:C6:E7:F0:89:F9:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a875539d46b4f7b023fe742a5b4cf5fe47838f3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/27b5df3568a4d9fe8fc868c18ff9852729834e51.roa
Signing time:             Mon 02 Aug 2021 22:26:16 +0000
ROA not before:           Mon 02 Aug 2021 03:00:00 +0000
ROA not after:            Sun 02 Aug 2026 03:00:00 +0000
asID:                     61449
IP address blocks:        138.186.161.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1146788 (0x117fa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a875539d46b4f7b023fe742a5b4cf5fe47838f3
        Validity
            Not Before: Aug  2 03:00:00 2021 GMT
            Not After : Aug  2 03:00:00 2026 GMT
        Subject: CN=27b5df3568a4d9fe8fc868c18ff9852729834e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d9:02:51:22:18:ae:ff:15:06:e1:55:c0:90:
                    3b:fa:fb:80:dc:3a:a8:b1:06:f9:74:fb:01:11:75:
                    d4:3a:84:55:de:c8:2c:13:14:60:f3:98:94:c9:07:
                    7d:bf:fd:1c:b0:4e:f9:18:88:aa:f8:3b:f2:dc:5c:
                    58:4c:43:a5:a3:94:3b:4b:ef:3b:75:18:3c:79:b7:
                    0c:ce:59:0a:07:52:b4:dc:c8:a2:22:f5:dd:79:89:
                    79:6b:0e:7e:3e:f1:db:10:29:8b:fd:8d:2a:32:d1:
                    ac:1f:5d:9d:9b:ca:04:ee:04:68:23:8e:6a:b1:4e:
                    62:ce:d4:fe:3c:d3:8f:57:2d:31:41:af:06:ef:01:
                    a1:12:7f:ff:39:12:3c:86:0d:73:5c:d0:f7:c4:ce:
                    9c:ec:25:80:60:56:06:25:d4:64:05:63:05:8b:a0:
                    93:d6:24:6e:8c:3f:d3:ce:31:30:51:a9:ad:cc:58:
                    5f:5d:0b:9d:a5:02:73:c1:fb:02:27:53:92:36:f9:
                    4e:9d:a0:2f:a1:fc:96:bf:8b:6a:46:6c:0c:aa:37:
                    ac:45:df:50:97:08:19:f4:0a:96:96:cb:63:27:51:
                    da:f5:a4:27:93:97:3a:8e:fc:cf:33:36:46:e7:c0:
                    50:37:14:3d:43:c4:3c:46:cb:f4:76:20:c8:40:d3:
                    64:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B2:D5:1B:24:18:EA:2F:C7:85:89:55:49:0F:42:27:CD:47:6F:D1
            X509v3 Authority Key Identifier:
                keyid:09:91:F7:01:7A:3C:82:12:AE:ED:7C:67:10:C9:C6:E7:F0:89:F9:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a875539d46b4f7b023fe742a5b4cf5fe47838f3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/27b5df3568a4d9fe8fc868c18ff9852729834e51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/6a875539d46b4f7b023fe742a5b4cf5fe47838f3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:5b:85:5c:5e:41:80:f1:ad:b7:39:40:66:4a:75:49:9f:be:
         bb:c8:09:da:59:5c:2b:59:70:33:ca:ad:cb:33:32:13:b8:76:
         ca:7f:d8:2b:a6:f1:ed:a1:65:f0:8e:1d:4f:3f:80:b7:e8:9a:
         71:c9:16:9f:6e:9b:65:1f:05:1f:e0:9d:30:54:cb:00:ba:fb:
         08:0b:94:cf:71:52:5f:5c:c0:36:9b:ea:9e:1e:e2:be:88:6b:
         61:e0:e2:ba:60:d6:50:6f:d0:b3:b5:89:91:cf:a4:08:b0:1a:
         be:7a:d6:d1:ce:c0:33:ed:25:d3:76:cf:ad:a2:a5:22:31:75:
         c9:91:c5:27:41:d4:8e:8f:a4:11:ca:d1:b9:0a:ac:ec:31:20:
         c9:fe:4a:17:04:36:b3:81:bd:03:d1:dd:08:f7:be:a7:79:b8:
         ae:dd:9f:b0:e2:9c:4b:86:27:67:84:17:8d:5e:f4:64:9c:09:
         10:4b:56:89:77:05:85:e7:5d:c0:e7:aa:31:21:a1:75:4c:73:
         fa:65:f8:0b:a0:3c:80:4d:d9:c4:6e:2a:66:d1:8d:69:47:d1:
         86:8c:72:ff:1b:6a:be:65:08:06:ec:2a:01:a8:08:ef:9e:e5:
         0f:00:39:4e:bf:b1:1d:33:05:eb:95:79:af:0d:d0:d4:b2:33:
         81:4e:f2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org