Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/b023d11120042df2a180e5ea25f2cabcc5ba53b3.roa
File:                     b023d11120042df2a180e5ea25f2cabcc5ba53b3.roa (raw, json)
Hash identifier:          zsGw0aCLKuuNToji25ELImnNi1hcF84y6hAhRxAeEM0=
Subject key identifier:   DB:DB:52:3B:36:25:85:14:7E:0C:23:6F:DD:A0:1E:93:9D:50:00:19
Certificate issuer:       /CN=53fe257dcf8bca4ea5c613680400a9cf495caccb
Certificate serial:       1F8F34
Authority key identifier: C8:65:04:76:5F:5B:06:AB:B5:EC:85:2C:4C:F1:85:76:5A:88:98:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53fe257dcf8bca4ea5c613680400a9cf495caccb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/b023d11120042df2a180e5ea25f2cabcc5ba53b3.roa
Signing time:             Wed 12 Apr 2023 16:35:27 +0000
ROA not before:           Tue 23 Mar 2021 14:45:34 +0000
ROA not after:            Tue 24 Mar 2026 14:45:34 +0000
asID:                     262168
IP address blocks:        179.49.64.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2068276 (0x1f8f34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53fe257dcf8bca4ea5c613680400a9cf495caccb
        Validity
            Not Before: Mar 23 14:45:34 2021 GMT
            Not After : Mar 24 14:45:34 2026 GMT
        Subject: CN=b023d11120042df2a180e5ea25f2cabcc5ba53b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:71:98:18:7c:3f:9f:8d:0d:bb:59:2d:60:0d:
                    95:34:e4:51:87:19:6f:df:4c:c8:4d:74:2f:b6:59:
                    06:b2:a7:c5:8a:bd:ae:ab:ae:c0:95:35:f2:93:88:
                    8d:25:ca:ce:37:83:4d:59:b8:17:9b:6a:19:bd:cb:
                    e3:e6:0c:2e:d2:da:00:22:1e:f3:4c:07:e6:f3:52:
                    78:54:3d:d7:3a:c1:a6:5d:47:b6:b8:ef:64:f4:a9:
                    9d:e3:78:fa:88:cc:24:08:7b:da:57:e2:97:a7:8e:
                    73:f6:32:f2:84:e6:7a:af:af:15:13:3e:fd:a7:c6:
                    fc:a1:aa:d9:74:c0:f6:30:af:2b:3d:29:43:68:11:
                    58:b3:3c:db:23:0f:ff:8f:46:2b:b2:e7:00:b1:71:
                    42:f4:6b:06:b6:40:72:cf:d8:47:e2:54:44:a0:1f:
                    ef:b2:da:15:8c:80:d8:8e:6e:e2:6d:14:dc:91:58:
                    52:f6:a1:7a:6f:d4:32:ec:01:47:b2:9b:01:8f:7d:
                    ac:82:8f:98:40:bc:f4:64:d3:91:cb:8e:d2:3d:4b:
                    70:aa:8d:c7:78:8c:a5:d4:49:ef:b2:d7:fd:95:98:
                    ac:8d:0c:27:72:50:ed:fe:91:60:94:bd:0e:18:b0:
                    8c:4f:16:14:b7:e0:a8:0a:ae:25:fd:11:ee:cb:56:
                    29:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:DB:52:3B:36:25:85:14:7E:0C:23:6F:DD:A0:1E:93:9D:50:00:19
            X509v3 Authority Key Identifier:
                keyid:C8:65:04:76:5F:5B:06:AB:B5:EC:85:2C:4C:F1:85:76:5A:88:98:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53fe257dcf8bca4ea5c613680400a9cf495caccb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/b023d11120042df2a180e5ea25f2cabcc5ba53b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/53fe257dcf8bca4ea5c613680400a9cf495caccb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:bd:6e:b3:1d:6a:3a:55:26:b5:4a:60:c3:92:20:da:66:ca:
         43:84:86:a4:02:1e:8f:ad:6b:c8:01:8d:26:00:2e:b0:fe:ca:
         42:33:68:08:c2:7a:b2:bd:a8:06:aa:db:8b:3a:1d:3d:e0:f8:
         84:d0:7c:ac:5d:92:9a:45:d5:2d:36:96:b3:e0:7a:20:58:8b:
         27:ec:53:5e:5d:b4:d8:29:a5:46:13:4e:98:c8:79:73:5b:a8:
         54:68:46:c8:53:d7:94:ca:30:1b:b6:a1:ed:dc:cb:50:20:9e:
         3f:96:b1:65:46:43:13:84:d0:f2:38:0e:f1:cc:26:57:5c:74:
         43:30:57:e6:ab:f1:fc:fe:8c:d9:cf:83:88:4d:64:80:fe:b3:
         67:28:bb:05:49:17:3e:0f:f6:8f:7d:66:49:da:70:5e:0d:bb:
         47:69:cc:7d:a2:95:22:10:fb:e6:ef:2a:e1:41:55:1c:8e:c8:
         34:0c:25:b2:d7:b6:00:31:9e:02:93:03:91:4f:ab:cb:b9:92:
         6e:4f:a5:6a:c8:77:a2:27:0f:54:1d:14:f4:e4:42:ca:40:b9:
         47:a3:a1:a7:bc:cc:cf:92:3b:d2:23:90:c4:bd:21:90:ab:3d:
         40:5f:17:09:9a:8f:f9:80:4b:41:0d:f9:65:f3:c5:8d:2a:a6:
         d9:8b:69:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:28 2023 by rpki-client on console-ams.rpki-client.org