Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27644c4f-083b-4264-a95f-89b13ee1dd66/ce95f25582b767e379297f472b6b83fd918d3ad9.roa
File:                     ce95f25582b767e379297f472b6b83fd918d3ad9.roa (raw, json)
Hash identifier:          XSjA9Hs14tna0//n77NdqQgr56sUv/Q3NtG9DCkzQjE=
Subject key identifier:   EE:66:47:11:57:A6:D8:47:38:C4:03:F2:FD:80:F2:62:BC:C2:98:35
Certificate issuer:       /CN=2ee860d7ae057539e895d1293eae7aad56d34c53
Certificate serial:       1AC28C
Authority key identifier: 46:38:C8:83:DB:1C:FA:4A:03:22:D2:2B:65:57:8B:1B:34:5D:7A:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ee860d7ae057539e895d1293eae7aad56d34c53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27644c4f-083b-4264-a95f-89b13ee1dd66/ce95f25582b767e379297f472b6b83fd918d3ad9.roa
Signing time:             Mon 12 Sep 2022 21:41:40 +0000
ROA not before:           Mon 12 Sep 2022 21:39:36 +0000
ROA not after:            Thu 12 Sep 2024 21:39:36 +0000
asID:                     265746
IP address blocks:        128.201.168.0/22 maxlen: 22
                          128.201.168.0/23 maxlen: 23
                          128.201.170.0/23 maxlen: 23
                          128.201.168.0/24 maxlen: 24
                          128.201.169.0/24 maxlen: 24
                          128.201.170.0/24 maxlen: 24
                          128.201.171.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1753740 (0x1ac28c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ee860d7ae057539e895d1293eae7aad56d34c53
        Validity
            Not Before: Sep 12 21:39:36 2022 GMT
            Not After : Sep 12 21:39:36 2024 GMT
        Subject: CN=ce95f25582b767e379297f472b6b83fd918d3ad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:fc:ab:37:c3:37:1b:ff:6e:61:16:39:1a:8e:
                    d5:cf:7c:7c:42:ff:30:07:8a:42:ab:fc:c4:94:60:
                    0e:df:fd:02:fa:38:a5:e4:fe:48:70:37:d1:2e:ba:
                    d0:93:5e:c3:41:ac:f1:45:b9:ce:6e:44:bb:d4:ed:
                    e2:70:4c:95:10:81:be:45:03:55:e3:2c:d3:e6:1c:
                    87:4a:ff:ce:33:58:f2:b6:89:8f:a2:06:93:ca:27:
                    b3:e2:fc:9d:42:83:6c:d1:85:47:c8:b0:e0:35:ac:
                    d4:a7:c8:eb:49:fd:3f:50:c8:d2:aa:ba:86:b3:5e:
                    bc:e6:be:b5:bc:f3:ad:40:71:4e:21:88:69:b0:48:
                    ac:8b:d8:a3:4d:e6:2e:de:00:cc:90:1c:32:3a:40:
                    af:48:e2:27:9e:85:87:6b:fa:0c:71:ae:8b:96:69:
                    78:09:72:7d:63:af:e0:49:90:b2:51:cc:40:35:f5:
                    23:75:d6:2f:ed:cb:67:06:14:f9:b3:28:d0:8b:57:
                    41:d4:54:3a:28:28:6b:49:5e:50:62:16:10:06:77:
                    01:6b:01:b5:15:64:f6:2f:93:62:59:f2:83:53:5d:
                    33:a6:ef:5b:9b:e1:38:62:1b:73:5a:5d:dd:5a:c8:
                    04:86:b8:e6:79:25:42:c3:97:d8:31:3e:c7:97:c9:
                    3b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:66:47:11:57:A6:D8:47:38:C4:03:F2:FD:80:F2:62:BC:C2:98:35
            X509v3 Authority Key Identifier:
                keyid:46:38:C8:83:DB:1C:FA:4A:03:22:D2:2B:65:57:8B:1B:34:5D:7A:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ee860d7ae057539e895d1293eae7aad56d34c53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27644c4f-083b-4264-a95f-89b13ee1dd66/ce95f25582b767e379297f472b6b83fd918d3ad9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27644c4f-083b-4264-a95f-89b13ee1dd66/2ee860d7ae057539e895d1293eae7aad56d34c53.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:ca:f2:9c:b4:9f:f0:f0:84:58:4b:d2:1b:1d:bf:6d:33:1c:
         72:7e:4a:d4:b0:4e:a0:2b:ad:db:c3:fc:60:7a:c1:07:f0:ba:
         7b:95:4b:9a:12:14:30:f0:34:e1:7f:6a:3e:c3:70:d0:f1:43:
         be:c7:d5:4c:43:2f:54:5c:bb:39:50:ad:c3:53:75:ae:ee:d9:
         b4:64:3e:83:cf:eb:4b:68:9d:e9:97:1c:1e:40:60:2e:6d:1a:
         c8:63:e0:88:0c:fc:a1:17:7f:7c:e3:92:2d:5c:46:a2:ab:99:
         ae:d5:ce:13:cc:b3:52:d4:28:13:35:1f:e6:df:70:ea:09:3f:
         20:2b:b3:33:00:d7:5c:ed:95:e2:da:03:70:1e:c9:2b:9d:11:
         0c:9f:bb:e5:c1:60:e3:72:0e:ba:42:d6:67:3b:7f:de:2a:1c:
         63:66:fd:71:5c:43:b1:63:ac:f7:63:13:93:9d:81:69:f1:10:
         d0:04:28:d8:a7:18:8c:75:93:20:8a:03:08:02:e7:89:ac:f9:
         b3:f9:64:c4:40:c5:01:cd:e9:8b:a5:34:e8:34:f6:44:5d:0f:
         65:19:b7:cf:24:7c:3f:4b:72:33:cf:94:95:a0:4f:c6:fe:f9:
         02:99:32:12:a5:6b:9d:41:a8:43:13:13:db:c9:bd:cf:8c:02:
         07:4e:bb:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:12 2023 by rpki-client on console-fra.rpki-client.org