Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/250bdbec-1e2e-4e8b-93fd-e23e8cfe8531/40ea98f71163752c7ffd9aee7337493ffa8c2756.roa
File:                     40ea98f71163752c7ffd9aee7337493ffa8c2756.roa (raw, json)
Hash identifier:          u4WruBnNN1QyImG+Z/mT4S1rZdqxAH0+P5RiQL0DB7w=
Subject key identifier:   47:01:84:BD:54:2F:34:0D:B2:84:0C:B5:B3:85:67:10:09:42:BD:51
Certificate issuer:       /CN=5cc9dbf17ab87f53456274667413bf07a4f85fc9
Certificate serial:       0D5B42
Authority key identifier: 20:4F:BB:94:06:56:BA:86:D7:92:22:24:CD:DB:19:79:44:C0:B2:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5cc9dbf17ab87f53456274667413bf07a4f85fc9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/250bdbec-1e2e-4e8b-93fd-e23e8cfe8531/40ea98f71163752c7ffd9aee7337493ffa8c2756.roa
Signing time:             Wed 24 Mar 2021 14:31:03 +0000
ROA not before:           Wed 24 Mar 2021 14:31:03 +0000
ROA not after:            Tue 24 Mar 2026 14:31:03 +0000
asID:                     263244
IP address blocks:        131.72.132.0/22 maxlen: 22
                          138.99.184.0/22 maxlen: 22
                          170.247.140.0/22 maxlen: 22
                          186.0.180.0/22 maxlen: 22
                          190.106.32.0/21 maxlen: 21
                          2800:cb0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 875330 (0xd5b42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cc9dbf17ab87f53456274667413bf07a4f85fc9
        Validity
            Not Before: Mar 24 14:31:03 2021 GMT
            Not After : Mar 24 14:31:03 2026 GMT
        Subject: CN=40ea98f71163752c7ffd9aee7337493ffa8c2756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:54:e1:b6:b9:6c:83:a2:e0:bf:da:37:5f:1e:
                    32:66:b0:ac:a0:c7:83:41:cc:fd:86:dc:c8:79:35:
                    46:58:f2:18:a3:8d:26:d1:26:9b:35:94:36:d9:3f:
                    43:a0:8d:59:0c:15:0d:c7:a9:ab:6e:ec:8c:bb:62:
                    8b:50:34:ef:49:e2:9d:f3:0e:fc:31:d4:a2:18:2a:
                    e7:15:74:c3:8a:95:ad:86:44:9e:55:38:e7:94:53:
                    a2:f9:91:34:fd:a8:d0:7c:e6:3e:ef:0c:5c:71:dc:
                    26:14:ac:98:2b:2a:2e:e9:ad:75:fa:ff:d2:27:d1:
                    6b:4e:7a:bb:46:a8:f7:a9:9a:32:45:a4:36:f5:09:
                    89:c3:2d:20:42:15:6b:56:17:6b:d1:0b:ee:2f:ee:
                    f1:8f:95:21:b8:63:d6:ba:fe:8e:af:fe:f3:4d:de:
                    04:bf:b1:4d:d3:bd:0c:58:7c:bc:58:1a:7e:85:79:
                    73:14:0a:da:55:8c:d9:b3:4a:47:35:9d:bd:08:72:
                    d3:ca:fd:90:df:07:92:d1:a9:7e:a7:3c:e5:d6:f3:
                    8c:e1:0a:42:36:4d:06:9a:c1:24:c0:33:00:25:33:
                    4f:eb:8d:38:80:ab:19:24:6c:7f:37:a2:6f:c0:0b:
                    94:f5:d6:2d:ae:50:40:5f:4f:1d:2f:fd:de:1e:34:
                    58:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:01:84:BD:54:2F:34:0D:B2:84:0C:B5:B3:85:67:10:09:42:BD:51
            X509v3 Authority Key Identifier:
                keyid:20:4F:BB:94:06:56:BA:86:D7:92:22:24:CD:DB:19:79:44:C0:B2:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5cc9dbf17ab87f53456274667413bf07a4f85fc9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/250bdbec-1e2e-4e8b-93fd-e23e8cfe8531/40ea98f71163752c7ffd9aee7337493ffa8c2756.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/250bdbec-1e2e-4e8b-93fd-e23e8cfe8531/5cc9dbf17ab87f53456274667413bf07a4f85fc9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.132.0/22
                  138.99.184.0/22
                  170.247.140.0/22
                  186.0.180.0/22
                  190.106.32.0/21
                IPv6:
                  2800:cb0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c5:6e:da:fb:79:60:cf:f9:44:f2:64:23:74:06:f2:5a:fb:0d:
         15:22:ba:f4:c1:de:84:ca:7d:68:b3:cb:63:16:34:86:3c:78:
         ed:2d:b8:a2:d9:74:6d:9c:70:d3:87:f7:df:5d:50:79:7f:be:
         22:a3:d7:f8:ca:17:12:1b:b4:1c:f5:bc:78:fb:9a:46:ef:f1:
         89:17:e5:20:35:14:3a:b4:ef:9e:43:e6:90:40:a1:a8:a2:2e:
         d9:5b:00:49:2a:87:82:ba:3c:31:52:48:f2:01:e0:d2:a0:77:
         1c:45:5c:9d:ad:18:12:87:a2:72:81:33:81:64:00:e5:94:bb:
         49:36:45:0f:c8:b0:92:4e:81:bd:2e:be:82:87:c4:f0:8d:e3:
         2f:a7:25:69:77:c4:a3:1f:5e:ce:45:fb:c7:a5:17:11:aa:bd:
         74:e2:c0:c9:c7:52:b1:96:fb:38:01:af:29:d2:38:d5:90:09:
         79:30:78:cf:e9:fe:1d:ae:8c:71:c6:3b:1b:85:9a:23:2c:31:
         d1:96:69:37:e5:73:7f:0f:f8:34:d5:35:8b:c5:4c:11:c1:d9:
         8c:15:5a:96:71:41:54:f4:5b:68:07:9b:eb:7f:75:a8:f8:71:
         36:43:56:10:37:88:0a:8d:4e:f2:e4:13:d3:45:90:19:c8:1e:
         e2:03:43:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:12 2023 by rpki-client on console-fra.rpki-client.org