Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/717c5b8731af9b4360b22a04fbbf2de6d6db35fc.roa
File:                     717c5b8731af9b4360b22a04fbbf2de6d6db35fc.roa (raw, json)
Hash identifier:          30M+6TKFcSlYkYzy6CclTd41RLqVI2nJvM4cSmUEdWw=
Subject key identifier:   A8:18:09:25:D5:AB:B3:31:ED:29:A9:C3:DD:0D:C5:EC:3F:E2:F0:79
Certificate issuer:       /CN=6ff75e9cde86b5c490d171a8993267e23270787a
Certificate serial:       0B572D
Authority key identifier: 95:A6:67:0F:79:8D:EC:6E:34:2F:A0:19:BF:9B:D8:87:BA:A0:E2:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ff75e9cde86b5c490d171a8993267e23270787a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/717c5b8731af9b4360b22a04fbbf2de6d6db35fc.roa
Signing time:             Wed 06 Jul 2022 21:11:14 +0000
ROA not before:           Wed 06 Jul 2022 03:00:00 +0000
ROA not after:            Fri 30 Mar 2029 03:00:00 +0000
asID:                     14593
IP address blocks:        2803:9810::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 743213 (0xb572d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ff75e9cde86b5c490d171a8993267e23270787a
        Validity
            Not Before: Jul  6 03:00:00 2022 GMT
            Not After : Mar 30 03:00:00 2029 GMT
        Subject: CN=717c5b8731af9b4360b22a04fbbf2de6d6db35fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d4:a8:cf:65:bf:2b:cc:7e:eb:f6:7d:64:18:
                    84:8e:59:af:d9:44:1d:5a:9b:b1:39:c7:7a:ab:70:
                    28:b5:7f:09:21:52:3a:21:0f:b2:9b:b2:24:4a:e7:
                    e8:b1:93:ae:9b:cb:4d:cc:14:17:7f:a6:be:39:bb:
                    4c:3a:37:c9:16:aa:71:8e:70:28:dd:13:6d:13:6c:
                    cb:c0:07:13:6f:79:96:08:3d:86:e7:ff:40:c1:fb:
                    ee:9f:28:14:0d:e6:50:3f:cd:cb:7c:0e:b0:32:9f:
                    74:9f:7a:0d:42:19:93:4c:5f:13:df:4f:7d:f5:00:
                    61:34:19:02:7d:32:d2:b0:9a:e5:6f:e9:08:f3:fa:
                    0d:13:86:f8:8a:c3:e7:b1:32:ec:00:6e:85:3c:75:
                    34:db:3a:83:91:18:5a:03:a8:b7:b3:b8:ca:87:13:
                    49:ad:33:92:cc:2c:49:2c:64:14:c4:d9:38:50:cd:
                    9f:c5:4c:af:4d:3e:eb:32:38:c0:55:b1:91:f3:4c:
                    09:d6:9e:73:58:40:c6:71:f8:7d:68:ad:c0:92:77:
                    92:2a:2b:39:92:46:88:35:16:ef:d1:ae:02:a9:51:
                    ba:cf:8e:75:27:2c:8d:99:3a:31:60:ef:a4:ad:ac:
                    2b:31:1f:34:dc:23:f6:0c:fb:3d:f4:06:1a:7a:80:
                    4a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:18:09:25:D5:AB:B3:31:ED:29:A9:C3:DD:0D:C5:EC:3F:E2:F0:79
            X509v3 Authority Key Identifier:
                keyid:95:A6:67:0F:79:8D:EC:6E:34:2F:A0:19:BF:9B:D8:87:BA:A0:E2:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ff75e9cde86b5c490d171a8993267e23270787a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/717c5b8731af9b4360b22a04fbbf2de6d6db35fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/6ff75e9cde86b5c490d171a8993267e23270787a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9810::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:22:ba:74:da:c7:20:9f:c7:c7:51:78:9b:9f:81:c7:4b:45:
         68:c8:42:7b:21:b4:76:29:88:dc:ad:62:f8:cb:d4:c2:4e:32:
         97:f3:76:cf:3f:2e:ad:09:83:17:b5:a5:ca:b1:e9:05:b3:d8:
         59:d0:27:85:5c:c1:e4:b4:a5:90:e7:fe:4c:1e:5d:f2:3e:21:
         56:c4:94:6c:4f:01:94:40:f1:07:48:67:05:1f:34:69:5c:e1:
         34:72:e1:06:ca:e8:c0:84:a3:11:f0:f0:28:63:03:55:5d:79:
         dc:5f:a1:09:fa:7f:1c:76:19:e2:54:17:08:42:64:2e:65:7f:
         34:11:6c:6b:ea:34:e8:34:45:12:5a:e0:0c:8b:62:d7:a8:d9:
         dd:43:d2:f5:02:ac:70:87:57:a8:5e:5b:f6:d3:f1:be:80:b9:
         6e:90:a6:03:eb:9a:36:3f:5a:cc:66:47:74:60:a3:15:94:a4:
         41:a5:87:8e:7f:fe:7d:c3:5b:5b:4e:a1:e7:79:99:ac:cc:e2:
         ab:55:42:cd:64:6b:eb:80:80:70:ac:33:a6:ea:82:04:13:17:
         d9:2b:b3:82:e1:26:2b:58:f1:87:15:27:bb:7e:9d:63:de:f7:
         9f:26:67:ae:19:a3:43:1d:06:9d:c6:e1:32:51:a6:5e:0c:7b:
         6b:6b:fb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:13 2023 by rpki-client on console-fra.rpki-client.org