Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1fcfc705-39d6-4d2a-ab93-c90096c31428/2bcd2a47ddb05a806bf432f37774ab9a773eabbc.roa
File:                     2bcd2a47ddb05a806bf432f37774ab9a773eabbc.roa (raw, json)
Hash identifier:          HpDIFRq5SiFaV/xWc0jDFZtuZcjc0GB/HZ7+5sC/qvU=
Subject key identifier:   CB:03:C1:2B:10:D0:26:34:35:0B:74:EA:42:66:54:19:9D:57:4F:F5
Certificate issuer:       /CN=f5c9ef8b3e36215bb356f1cf3228b9d79b6859f9
Certificate serial:       0D9F1D
Authority key identifier: E9:20:97:1B:3A:40:85:02:0A:2A:1E:C3:BC:FE:97:4E:1D:AF:34:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f5c9ef8b3e36215bb356f1cf3228b9d79b6859f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1fcfc705-39d6-4d2a-ab93-c90096c31428/2bcd2a47ddb05a806bf432f37774ab9a773eabbc.roa
Signing time:             Wed 24 Mar 2021 14:31:19 +0000
ROA not before:           Wed 24 Mar 2021 14:31:19 +0000
ROA not after:            Tue 24 Mar 2026 14:31:19 +0000
asID:                     265750
IP address blocks:        170.150.62.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 892701 (0xd9f1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5c9ef8b3e36215bb356f1cf3228b9d79b6859f9
        Validity
            Not Before: Mar 24 14:31:19 2021 GMT
            Not After : Mar 24 14:31:19 2026 GMT
        Subject: CN=2bcd2a47ddb05a806bf432f37774ab9a773eabbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4a:22:5d:33:54:b0:d7:4d:51:28:69:56:dd:
                    6f:65:8b:c4:99:e1:fc:a8:6d:2e:e1:36:ba:ec:8c:
                    44:c9:13:ab:28:28:58:e9:fc:9b:7c:68:ae:79:24:
                    68:75:83:e8:bf:fb:e2:7c:33:5d:95:c4:2e:3b:5f:
                    8a:b1:c0:c3:18:ae:41:d1:02:51:73:34:52:b5:42:
                    ff:19:df:bd:e2:36:5c:44:16:6b:cb:cd:96:0b:c3:
                    91:72:a4:17:77:2c:86:db:be:b7:ce:78:04:70:1e:
                    0f:f9:b9:29:d8:2b:21:4a:37:16:15:89:fe:25:d1:
                    41:10:c1:b2:37:0d:c6:d6:58:1f:ed:a7:f9:83:f7:
                    42:6d:51:22:cd:ec:44:06:02:6f:41:45:46:c8:b4:
                    13:73:10:3e:02:20:e5:08:d5:16:e6:93:17:36:9d:
                    b9:1a:39:d1:5c:1d:45:97:46:47:d8:aa:ab:53:d8:
                    9e:5a:1a:17:e0:ef:5f:2c:c8:06:67:41:43:04:74:
                    08:38:0a:9c:b0:cb:c4:ae:c6:87:86:ef:1b:07:ea:
                    1a:20:94:fb:ba:e8:96:17:0c:5e:f1:7b:ba:0a:59:
                    ff:b2:08:ec:fd:94:83:5a:4a:1e:8a:9e:23:d5:76:
                    ae:7d:db:bc:87:35:83:e0:42:c5:12:0f:2a:47:fb:
                    7e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:03:C1:2B:10:D0:26:34:35:0B:74:EA:42:66:54:19:9D:57:4F:F5
            X509v3 Authority Key Identifier:
                keyid:E9:20:97:1B:3A:40:85:02:0A:2A:1E:C3:BC:FE:97:4E:1D:AF:34:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f5c9ef8b3e36215bb356f1cf3228b9d79b6859f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1fcfc705-39d6-4d2a-ab93-c90096c31428/2bcd2a47ddb05a806bf432f37774ab9a773eabbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1fcfc705-39d6-4d2a-ab93-c90096c31428/f5c9ef8b3e36215bb356f1cf3228b9d79b6859f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:f5:55:33:a6:b6:68:a0:66:c7:9c:16:98:28:d4:3a:85:8c:
         d6:1d:42:cf:9d:26:71:80:59:19:b2:6f:d8:23:09:31:78:81:
         c1:71:4e:40:da:a6:b5:eb:91:a5:20:93:b7:a5:58:4d:65:0e:
         e2:37:93:d1:d0:47:48:54:50:b2:ab:4a:1a:08:72:c7:44:00:
         76:c6:c5:08:60:e4:d6:17:2d:76:f2:8b:77:eb:48:36:65:85:
         5f:a8:dc:1c:11:cc:d6:84:b7:8f:d3:78:98:de:7b:69:ff:1e:
         f2:fb:ef:d2:2a:53:92:cf:f6:73:4c:e9:b0:84:22:18:f7:14:
         4a:d5:5d:da:36:5f:1b:d4:bc:ae:99:86:41:3f:f8:6e:0b:5e:
         01:ca:55:4a:f3:f1:af:8c:9d:a6:62:da:59:94:6c:31:84:ca:
         ac:ca:0d:5c:c6:f4:9f:ae:dc:f6:35:62:7d:38:f0:30:5c:a8:
         e6:72:15:02:19:6c:08:2d:54:13:8d:a3:a1:98:5a:b1:50:83:
         ca:da:16:3a:5d:07:b1:b5:e1:04:79:07:bc:3c:57:74:73:0f:
         4c:8d:f4:6e:d3:ed:4b:98:b6:5a:f6:d3:24:88:f7:28:89:99:
         6f:00:57:a9:1d:6f:e9:b5:a8:f0:95:54:77:1b:99:6f:8c:93:
         2b:41:f2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:12 2023 by rpki-client on console-fra.rpki-client.org