Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1fcfc705-39d6-4d2a-ab93-c90096c31428/8bc0da457e1109735481b93579772b4b1e5c5492.roa
File:                     8bc0da457e1109735481b93579772b4b1e5c5492.roa (raw, json)
Hash identifier:          dE4buPpKU9HM+R+x3/ERwZya0w9px/J6mEtZyeZSqjg=
Subject key identifier:   C1:D0:77:C8:FE:2E:5D:38:04:F7:C9:21:DB:43:71:4A:34:05:1B:15
Certificate issuer:       /CN=f5c9ef8b3e36215bb356f1cf3228b9d79b6859f9
Certificate serial:       0DA58B
Authority key identifier: E9:20:97:1B:3A:40:85:02:0A:2A:1E:C3:BC:FE:97:4E:1D:AF:34:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f5c9ef8b3e36215bb356f1cf3228b9d79b6859f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1fcfc705-39d6-4d2a-ab93-c90096c31428/8bc0da457e1109735481b93579772b4b1e5c5492.roa
Signing time:             Wed 24 Mar 2021 14:31:19 +0000
ROA not before:           Wed 24 Mar 2021 14:31:19 +0000
ROA not after:            Tue 24 Mar 2026 14:31:19 +0000
asID:                     7049
IP address blocks:        170.150.63.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 894347 (0xda58b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5c9ef8b3e36215bb356f1cf3228b9d79b6859f9
        Validity
            Not Before: Mar 24 14:31:19 2021 GMT
            Not After : Mar 24 14:31:19 2026 GMT
        Subject: CN=8bc0da457e1109735481b93579772b4b1e5c5492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f7:82:41:72:ec:63:a4:13:fd:1a:ce:a2:14:
                    dc:cd:1e:87:45:46:37:24:17:f6:b1:84:2f:15:5c:
                    71:b3:38:85:59:72:3f:38:a9:2e:7c:42:ff:db:b0:
                    9a:87:2c:73:df:3a:f2:14:62:90:fa:a6:d4:27:0b:
                    9a:3e:83:f0:d2:fd:70:72:6f:cd:24:fb:34:1a:d6:
                    1d:83:2f:3a:d8:26:2e:38:6c:dd:69:d4:35:fa:f7:
                    03:8b:3e:fe:de:09:9c:00:32:93:f9:c2:5f:fa:09:
                    db:24:f6:f2:df:ee:b3:91:80:9f:25:bd:7a:d7:94:
                    55:94:36:1b:03:69:77:0b:49:bf:79:22:f6:dd:01:
                    da:cd:96:f8:0b:e3:8c:86:a0:63:c3:44:de:19:07:
                    f9:e0:36:f6:db:28:b2:93:12:48:c3:c7:37:15:e0:
                    1d:09:8b:74:a5:ae:61:ad:15:7f:28:a1:3f:91:0e:
                    c1:45:f2:1e:2a:37:36:b6:58:ab:35:4d:22:08:a6:
                    12:48:5a:a8:6e:96:bc:e5:10:c9:39:9e:d1:3b:b2:
                    a6:d9:29:44:23:f7:f7:db:7e:bf:99:dd:66:31:c5:
                    6b:0b:53:90:02:d1:0c:c2:79:6b:8e:6f:f3:43:76:
                    db:0b:3f:62:e0:8a:d9:94:7b:42:80:1b:c8:4e:4a:
                    53:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D0:77:C8:FE:2E:5D:38:04:F7:C9:21:DB:43:71:4A:34:05:1B:15
            X509v3 Authority Key Identifier:
                keyid:E9:20:97:1B:3A:40:85:02:0A:2A:1E:C3:BC:FE:97:4E:1D:AF:34:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f5c9ef8b3e36215bb356f1cf3228b9d79b6859f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1fcfc705-39d6-4d2a-ab93-c90096c31428/8bc0da457e1109735481b93579772b4b1e5c5492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1fcfc705-39d6-4d2a-ab93-c90096c31428/f5c9ef8b3e36215bb356f1cf3228b9d79b6859f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:5a:b3:e7:19:64:13:24:de:30:f2:c2:5d:49:f8:1b:10:5d:
         9c:55:d7:e2:d3:dd:5a:42:88:cf:4c:9e:df:b5:eb:f5:5a:44:
         16:bd:fe:76:86:a4:ee:83:0d:c1:28:7e:56:dd:2f:88:39:9c:
         72:e3:40:c6:2b:43:70:5a:16:00:5a:a4:33:29:10:ce:fe:0c:
         3a:94:bc:89:a9:8c:11:17:35:25:5d:7d:c8:a9:30:30:8e:03:
         bb:42:76:bb:95:c8:50:d5:c9:91:67:51:7d:34:55:86:45:8f:
         98:d9:dd:5f:42:f2:3c:f9:ef:e4:d7:f7:99:35:cb:3a:e0:a8:
         86:39:18:fc:99:23:59:26:6d:3a:5a:42:f8:89:76:cc:b2:f8:
         e4:f3:7d:67:14:7a:3f:2f:9d:91:f4:7b:41:26:3e:69:8f:3e:
         0f:9c:d5:fd:05:f1:e0:58:15:e6:38:40:e2:f1:2e:40:93:2d:
         18:79:54:38:36:5b:90:82:15:15:40:25:7a:e2:5c:bc:ca:06:
         75:2a:9a:27:96:26:40:1f:90:a4:7e:23:b4:99:13:99:10:5e:
         b4:da:88:3d:67:64:c0:40:9d:68:3d:e3:99:18:50:d1:da:35:
         02:1b:a2:1f:e8:ee:c7:6c:3d:eb:cc:53:03:78:0b:8f:8f:be:
         51:f2:21:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:12 2023 by rpki-client on console-fra.rpki-client.org