Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/2634523c9735b469c3671a39a65090fefd75dcb7.roa
File:                     2634523c9735b469c3671a39a65090fefd75dcb7.roa (raw, json)
Hash identifier:          e2JAzGhW62ZeCw3/V/8UuZQKOK94BWpANgMf0BJ3Hh8=
Subject key identifier:   F6:94:5F:6B:CF:D1:FA:BC:42:EB:56:2E:A2:B5:59:DB:62:02:28:C9
Certificate issuer:       /CN=ce64e257eae04ee26d8eb339f148791b31cc0875
Certificate serial:       1B8493
Authority key identifier: 67:C6:3B:A4:47:A2:35:D2:28:1C:33:3E:9A:83:87:25:17:A4:B1:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce64e257eae04ee26d8eb339f148791b31cc0875.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/2634523c9735b469c3671a39a65090fefd75dcb7.roa
Signing time:             Wed 19 Oct 2022 20:42:06 +0000
ROA not before:           Tue 18 Oct 2022 20:40:06 +0000
ROA not after:            Sat 19 Oct 2024 20:40:06 +0000
asID:                     271936
IP address blocks:        66.231.68.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1803411 (0x1b8493)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce64e257eae04ee26d8eb339f148791b31cc0875
        Validity
            Not Before: Oct 18 20:40:06 2022 GMT
            Not After : Oct 19 20:40:06 2024 GMT
        Subject: CN=2634523c9735b469c3671a39a65090fefd75dcb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:49:2e:80:be:4e:4f:09:96:45:78:54:c2:c7:
                    b3:52:0b:c6:26:cf:9e:e4:85:cf:4a:ff:f9:90:22:
                    b8:36:be:97:da:5e:3b:d3:b0:d5:98:3a:00:9d:db:
                    7d:da:a2:85:eb:e7:1c:39:e6:cc:a8:c3:37:c5:67:
                    0b:6d:89:a6:84:d4:a4:7e:bf:53:d8:06:9b:cf:81:
                    70:44:8a:41:67:e1:19:78:e4:30:91:e2:aa:36:fb:
                    75:05:23:f1:bd:ee:f7:3c:a7:c0:7a:d8:a6:87:68:
                    1d:72:8d:2f:f7:b1:c9:d3:91:a2:d7:20:26:41:17:
                    28:a1:62:dd:85:d2:87:1b:99:38:3c:68:b2:2a:dd:
                    4e:56:af:48:5d:ab:dd:ee:6b:9a:b0:2d:78:ee:5c:
                    97:58:0c:6a:be:33:90:1b:0a:97:e1:af:55:57:88:
                    7d:40:1d:4c:66:74:b9:6b:13:44:9f:eb:16:ea:08:
                    0e:0d:3c:b6:e1:ab:f6:75:37:47:57:6c:8b:bf:98:
                    d1:1b:09:89:de:15:16:94:2e:87:60:cc:b3:ce:7c:
                    47:66:ad:b1:ac:c2:04:1a:40:6f:4b:22:8c:90:4d:
                    6f:9e:5d:ed:a3:7f:47:2a:a0:5e:62:7e:77:fe:73:
                    3c:6f:46:5f:c8:c4:17:88:2f:98:c0:e9:59:58:5e:
                    84:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:94:5F:6B:CF:D1:FA:BC:42:EB:56:2E:A2:B5:59:DB:62:02:28:C9
            X509v3 Authority Key Identifier:
                keyid:67:C6:3B:A4:47:A2:35:D2:28:1C:33:3E:9A:83:87:25:17:A4:B1:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce64e257eae04ee26d8eb339f148791b31cc0875.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/2634523c9735b469c3671a39a65090fefd75dcb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25b637c6-cdcf-423d-8c0c-cd615ab98a24/ce64e257eae04ee26d8eb339f148791b31cc0875.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:9f:2d:80:d5:77:32:09:6b:14:09:ff:c6:da:0f:85:7e:bf:
         9c:00:a2:2f:23:18:60:c7:b8:3d:54:2a:72:7c:2c:36:70:1d:
         bb:c3:2b:b3:1e:65:b3:2e:a0:ba:4a:96:6a:d8:2e:35:bd:69:
         72:11:b3:5e:38:74:08:65:25:d8:34:ee:d8:c6:e2:80:97:a1:
         a1:d7:71:b9:89:87:32:63:39:68:86:6f:25:83:10:84:a2:1d:
         2f:d3:37:59:6c:ba:1c:ae:9a:a0:fd:da:11:d8:20:27:3d:5d:
         c9:2f:7f:4f:fc:28:38:f9:37:79:9b:36:76:94:a0:07:9a:39:
         98:b3:c2:03:b8:66:a0:aa:0f:2c:5f:d5:bf:c3:4b:2c:bd:7a:
         81:5a:21:97:ab:54:11:26:4a:29:12:b8:c9:5d:f8:f6:60:00:
         ae:dc:44:b2:b4:c5:ff:5a:47:da:3d:65:cc:33:0a:78:24:f4:
         fc:a1:b9:9a:1d:cf:90:fd:39:0b:3d:2f:df:43:53:c9:c8:20:
         0f:ab:8f:41:4d:63:ba:ba:21:44:06:1d:01:b2:f9:61:b6:df:
         c0:d6:0f:eb:db:d3:ed:a0:8c:63:2b:6b:0b:cb:3e:a2:32:da:
         0a:a4:f6:31:b3:1d:16:78:ae:ed:32:60:d3:0d:0b:4b:39:e4:
         67:23:ee:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:28 2023 by rpki-client on console-ams.rpki-client.org