Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2e0ae095-a808-4843-b659-a12a4faf15d0/0557effc77b470863ad0500a3e01cdb3a186883c.roa
File:                     0557effc77b470863ad0500a3e01cdb3a186883c.roa (raw, json)
Hash identifier:          Sk2FnBrWOEbj+DZzPEvRvDVlp+kgR4n8gGnIyoMR6ko=
Subject key identifier:   A5:16:40:7E:51:2D:7D:57:3D:A5:DC:4A:47:11:B7:39:68:A9:CB:24
Certificate issuer:       /CN=346499a0d70b33b00e436c219a652ef2db03ca4c
Certificate serial:       0E0F01
Authority key identifier: CC:08:8B:DE:ED:44:CF:D1:B7:12:CD:70:8F:32:5A:A0:CE:70:3A:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/346499a0d70b33b00e436c219a652ef2db03ca4c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2e0ae095-a808-4843-b659-a12a4faf15d0/0557effc77b470863ad0500a3e01cdb3a186883c.roa
Signing time:             Fri 30 Apr 2021 02:01:48 +0000
ROA not before:           Thu 29 Apr 2021 03:00:00 +0000
ROA not after:            Sat 29 Apr 2023 03:00:00 +0000
asID:                     271804
IP address blocks:        2803:f780::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 921345 (0xe0f01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=346499a0d70b33b00e436c219a652ef2db03ca4c
        Validity
            Not Before: Apr 29 03:00:00 2021 GMT
            Not After : Apr 29 03:00:00 2023 GMT
        Subject: CN=0557effc77b470863ad0500a3e01cdb3a186883c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a5:a5:1c:92:42:57:58:e2:ee:56:46:9f:66:
                    9d:23:44:c5:a5:0d:c4:a9:78:bd:30:53:47:dc:84:
                    26:e4:fb:6f:12:bd:5f:34:18:eb:41:82:0a:5f:c3:
                    14:dc:50:8d:58:e0:50:63:bf:57:e8:e2:24:68:58:
                    50:b2:be:ec:9f:16:5d:2f:b4:86:38:a8:31:78:29:
                    9d:cb:b8:2b:2a:0b:6c:79:67:af:d3:60:1d:fe:ae:
                    8f:67:79:0b:dd:70:3a:03:ae:1f:74:ab:81:ae:22:
                    c4:0a:e3:de:29:6b:9c:f7:e5:38:a0:49:5f:79:75:
                    c8:8f:d1:17:c5:59:46:df:3a:f7:7b:99:7a:52:7c:
                    59:da:3e:52:f1:23:c7:d7:2f:1b:49:ff:55:66:b7:
                    b1:f8:c7:5e:0a:55:31:f4:a8:f2:2d:a3:43:fe:7b:
                    7a:db:12:21:cb:10:60:4c:8a:e6:8b:18:28:70:78:
                    df:72:80:9f:2b:9a:37:7f:bc:64:14:d1:af:1c:e9:
                    17:c0:96:b7:fd:56:82:f1:56:1f:44:a5:b8:41:ee:
                    5d:5c:bc:2e:16:d4:ed:5c:b7:7c:6e:ca:3b:a1:61:
                    0c:26:95:f9:8a:15:9d:f3:25:41:b5:ce:0a:38:8a:
                    33:c4:a2:dd:7b:3a:56:61:c1:cb:ad:d5:77:79:83:
                    83:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:16:40:7E:51:2D:7D:57:3D:A5:DC:4A:47:11:B7:39:68:A9:CB:24
            X509v3 Authority Key Identifier:
                keyid:CC:08:8B:DE:ED:44:CF:D1:B7:12:CD:70:8F:32:5A:A0:CE:70:3A:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/346499a0d70b33b00e436c219a652ef2db03ca4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2e0ae095-a808-4843-b659-a12a4faf15d0/0557effc77b470863ad0500a3e01cdb3a186883c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2e0ae095-a808-4843-b659-a12a4faf15d0/346499a0d70b33b00e436c219a652ef2db03ca4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f780::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:88:55:22:24:4c:3b:bb:f0:da:b0:da:b5:38:61:07:79:2f:
         29:96:55:76:20:31:b1:fe:4f:d0:2c:3f:3b:a4:bc:29:37:60:
         8b:77:5c:f6:9b:8b:bf:85:09:e3:d1:16:12:9c:c2:c1:e1:0c:
         2e:d6:97:aa:af:df:c9:d7:bc:a1:43:aa:7e:1a:fa:21:71:32:
         20:c4:7b:81:36:ef:8b:b8:40:32:da:94:6b:37:14:92:16:6f:
         fb:e2:df:c2:b0:f7:3e:de:1c:15:60:b2:7e:df:2b:d8:30:94:
         ab:b9:5f:3b:0e:c6:9c:58:81:82:9c:3b:91:44:02:1d:48:e3:
         12:69:12:e0:a2:14:ce:52:c4:15:78:36:b7:31:5e:d1:3d:0d:
         a4:02:75:75:58:e1:7e:60:43:3b:97:84:ea:3f:84:d4:7c:92:
         5d:7b:e2:01:9b:59:8f:59:73:a1:f3:96:ba:f6:d9:62:b6:1a:
         f6:42:7d:e3:0d:d3:e8:7c:ad:8e:d6:f7:ff:2f:f0:5a:1e:cc:
         f0:f0:78:dc:46:d7:89:84:41:61:48:4b:35:78:38:24:d9:7e:
         f2:8b:c5:ef:37:3c:01:d3:d8:16:92:f4:09:48:82:cc:24:92:
         6f:45:b0:b3:b9:e9:23:fe:24:b1:b1:b8:09:b7:1e:bf:a9:7c:
         60:74:ea:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:13 2023 by rpki-client on console-fra.rpki-client.org