Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23a13d31-6056-4988-b40b-a96f576f870e/8f77cf9358cd019a5720200486b9d27c993f5b32.roa
File:                     8f77cf9358cd019a5720200486b9d27c993f5b32.roa (raw, json)
Hash identifier:          Sxzl83oaMstNJ9i1fnCLgJm/xl8PiM3cc0/SKhv1qd0=
Subject key identifier:   94:A3:49:A5:73:83:24:24:71:01:BF:98:28:BD:6A:28:4A:C8:C5:39
Certificate issuer:       /CN=6ad6db935edff4c1f2be54056c36a0c9320b83cb
Certificate serial:       060016
Authority key identifier: 1D:EE:72:03:4D:B4:85:4A:BC:28:94:F2:44:48:08:37:78:2A:07:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ad6db935edff4c1f2be54056c36a0c9320b83cb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23a13d31-6056-4988-b40b-a96f576f870e/8f77cf9358cd019a5720200486b9d27c993f5b32.roa
Signing time:             Wed 24 Mar 2021 14:36:17 +0000
ROA not before:           Wed 24 Mar 2021 14:36:17 +0000
ROA not after:            Tue 24 Mar 2026 14:36:17 +0000
asID:                     270075
IP address blocks:        200.10.28.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393238 (0x60016)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ad6db935edff4c1f2be54056c36a0c9320b83cb
        Validity
            Not Before: Mar 24 14:36:17 2021 GMT
            Not After : Mar 24 14:36:17 2026 GMT
        Subject: CN=8f77cf9358cd019a5720200486b9d27c993f5b32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f2:06:be:94:1d:28:0f:ea:84:92:d0:a9:02:
                    db:15:4b:2e:c4:15:56:89:65:62:a2:3d:f0:1b:94:
                    df:13:9c:b8:14:26:b0:22:13:ad:9f:55:8b:37:1d:
                    9e:e8:ab:77:2f:a1:13:2f:55:10:88:5b:ea:97:18:
                    33:06:38:b8:2f:3f:e6:7f:62:73:b0:f2:96:73:2c:
                    4a:78:6b:f5:82:7e:1f:74:92:3a:2f:ab:bc:ee:be:
                    17:24:6f:21:d0:0c:15:5d:a2:c1:23:02:92:a7:ca:
                    25:14:42:7b:5a:31:af:af:38:7b:c2:e9:6a:6a:7d:
                    60:1f:70:4e:51:60:b9:7e:82:37:e2:08:5f:be:71:
                    23:ae:63:86:7c:3e:9a:43:85:bd:ed:54:59:96:e6:
                    37:68:06:63:e6:ff:93:40:27:0b:fc:2a:97:69:05:
                    64:71:8c:55:f1:3c:77:0b:3d:76:74:e7:32:b6:ca:
                    8c:26:60:7a:f6:5a:26:f4:45:27:2f:6d:81:b5:b6:
                    bc:57:55:a6:f5:84:22:f9:b7:04:66:45:8d:04:b5:
                    18:d8:18:b6:1f:78:82:73:1e:bf:00:4d:cb:e8:60:
                    13:04:98:c5:d3:a3:16:c3:e5:ae:3d:bd:74:4c:f9:
                    4d:4c:14:91:3a:06:93:a4:f9:ea:cc:a7:24:42:a3:
                    05:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A3:49:A5:73:83:24:24:71:01:BF:98:28:BD:6A:28:4A:C8:C5:39
            X509v3 Authority Key Identifier:
                keyid:1D:EE:72:03:4D:B4:85:4A:BC:28:94:F2:44:48:08:37:78:2A:07:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ad6db935edff4c1f2be54056c36a0c9320b83cb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23a13d31-6056-4988-b40b-a96f576f870e/8f77cf9358cd019a5720200486b9d27c993f5b32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23a13d31-6056-4988-b40b-a96f576f870e/6ad6db935edff4c1f2be54056c36a0c9320b83cb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:6e:b7:28:19:be:27:a8:4a:75:03:09:88:1b:bb:34:8c:95:
         64:bc:cc:b3:b3:02:94:d8:c8:b8:da:24:b6:bd:aa:19:3e:3a:
         79:25:86:54:31:87:78:9a:a4:85:98:11:e9:fa:b8:3f:33:1f:
         3e:ac:0a:65:6a:d4:c1:2e:76:70:31:22:df:9f:35:7e:82:68:
         3c:c2:f4:c3:88:d6:88:e7:d2:66:56:77:d5:51:3d:a1:20:d2:
         7e:37:a1:c5:17:d8:1d:1f:7e:48:bd:9a:5d:c1:f7:83:d7:66:
         20:42:74:82:4c:a2:5e:45:c9:67:1e:0a:f9:d0:04:bf:d1:16:
         73:ce:14:be:a6:ae:11:40:fa:12:ba:39:d3:f7:28:06:cf:fc:
         6d:5a:9a:70:47:38:d3:7b:f2:b1:f8:e9:53:48:6e:3b:71:24:
         ac:41:fb:c0:6e:e4:26:fe:6d:6d:3a:69:e8:28:f4:5f:6d:1e:
         68:30:00:71:f5:0b:24:20:71:c1:2a:7f:d7:31:31:59:5b:b8:
         b2:4a:85:bc:f5:ab:e3:5c:2b:8f:f7:67:03:82:7a:d6:d5:55:
         2e:ee:54:a9:12:1d:73:5e:0f:7a:94:c7:76:79:8e:56:07:fb:
         d8:ad:ec:06:5d:cb:e3:66:ca:dd:d2:0f:30:48:44:5a:0f:21:
         a5:24:54:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:12 2023 by rpki-client on console-fra.rpki-client.org