Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2e0ae095-a808-4843-b659-a12a4faf15d0/f08a70b57a691e160eb59b1aaab86d288ba14861.roa
File:                     f08a70b57a691e160eb59b1aaab86d288ba14861.roa (raw, json)
Hash identifier:          uSvpYowMVQf7nfbTf7Zt7k27I50aEvB+8MKAUZCcm+4=
Subject key identifier:   82:F6:2F:B1:6F:A5:35:27:16:43:23:2A:63:9A:A2:D5:AB:E2:5D:59
Certificate issuer:       /CN=346499a0d70b33b00e436c219a652ef2db03ca4c
Certificate serial:       0E37B1
Authority key identifier: CC:08:8B:DE:ED:44:CF:D1:B7:12:CD:70:8F:32:5A:A0:CE:70:3A:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/346499a0d70b33b00e436c219a652ef2db03ca4c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2e0ae095-a808-4843-b659-a12a4faf15d0/f08a70b57a691e160eb59b1aaab86d288ba14861.roa
Signing time:             Sun 02 May 2021 13:34:31 +0000
ROA not before:           Sun 02 May 2021 03:00:00 +0000
ROA not after:            Tue 02 May 2023 03:00:00 +0000
asID:                     271804
IP address blocks:        138.36.24.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 931761 (0xe37b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=346499a0d70b33b00e436c219a652ef2db03ca4c
        Validity
            Not Before: May  2 03:00:00 2021 GMT
            Not After : May  2 03:00:00 2023 GMT
        Subject: CN=f08a70b57a691e160eb59b1aaab86d288ba14861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2e:4a:ac:dd:1d:28:30:80:84:9a:60:3e:4a:
                    04:7c:65:f9:40:53:1e:f9:4b:db:3d:56:e7:76:0b:
                    30:f0:e5:0e:50:03:d2:09:34:fa:d2:09:79:58:03:
                    42:28:9f:88:b7:b0:fa:91:13:0a:ec:6e:18:29:24:
                    ca:fa:b3:22:6d:95:25:5f:4d:37:93:e6:b5:3c:f1:
                    10:d0:33:e8:6f:67:2c:ac:8a:1e:1e:b5:61:82:51:
                    79:dc:d6:34:a2:12:f0:e7:1d:5e:25:ea:fc:0f:be:
                    38:e6:c4:89:e3:62:ee:7a:dc:d5:72:4c:33:ef:89:
                    b7:61:40:c5:59:fa:6a:c4:83:f1:cc:06:2f:6e:12:
                    a4:f1:95:e9:1c:42:74:86:35:f4:3d:b8:0d:c1:f0:
                    2e:ee:ec:4f:50:ff:17:0a:38:9f:4d:5a:ce:f0:47:
                    60:61:c2:aa:d6:65:35:69:93:00:5d:b7:06:8a:ef:
                    df:e9:35:33:5b:25:c4:85:ee:84:4c:8b:76:38:a3:
                    12:3f:5c:d5:ee:f8:fe:5d:7b:0a:76:2a:a6:26:2c:
                    5d:7a:53:aa:01:77:ec:37:d4:21:15:3e:be:32:80:
                    87:48:2d:d6:d4:66:6a:8c:6d:ff:2b:06:8c:d2:58:
                    72:7c:9a:17:9d:ab:6c:c7:9c:7e:ff:45:b6:a9:ee:
                    fe:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F6:2F:B1:6F:A5:35:27:16:43:23:2A:63:9A:A2:D5:AB:E2:5D:59
            X509v3 Authority Key Identifier:
                keyid:CC:08:8B:DE:ED:44:CF:D1:B7:12:CD:70:8F:32:5A:A0:CE:70:3A:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/346499a0d70b33b00e436c219a652ef2db03ca4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2e0ae095-a808-4843-b659-a12a4faf15d0/f08a70b57a691e160eb59b1aaab86d288ba14861.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2e0ae095-a808-4843-b659-a12a4faf15d0/346499a0d70b33b00e436c219a652ef2db03ca4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:00:88:ee:36:c2:22:d5:14:68:93:63:12:f2:dd:f5:06:42:
         2e:a9:c2:69:ae:4b:8f:8f:07:c6:a7:18:ef:2a:c0:27:2a:ac:
         9f:4f:93:e8:67:b3:2a:29:9c:7f:fb:ae:66:55:8a:53:8d:03:
         6d:e8:af:71:b1:0f:33:df:fa:52:0d:8c:8f:4b:32:89:49:0c:
         1b:3d:24:fd:37:ae:61:8e:03:3c:18:ad:31:25:9d:7f:19:75:
         14:2a:96:ee:ba:d7:55:9f:1b:df:54:77:49:92:b4:3c:3c:32:
         65:9e:b6:41:5b:18:99:a3:a2:92:c7:06:1e:d8:3a:1d:0e:0f:
         4c:6d:47:f2:65:7c:0c:24:94:2c:d5:b1:7e:45:cb:9b:0b:14:
         b0:bc:cc:81:1e:34:e9:91:8e:6b:2e:94:f3:ae:29:90:e0:64:
         f1:1e:90:8f:5a:37:dd:bb:3f:a8:37:42:d0:98:36:9b:ae:cd:
         4b:bd:8e:a2:6d:5b:59:44:ab:3d:7c:18:eb:02:a9:81:cc:e8:
         64:7f:76:c1:55:4f:38:d1:50:88:16:4e:91:a8:98:22:13:0b:
         84:12:b5:4b:54:96:ba:10:88:f6:b7:63:c5:90:5f:e6:04:2d:
         b4:bb:c3:6c:f1:7d:42:88:54:fd:d6:5a:c3:28:3a:6d:01:f5:
         a2:0d:bb:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:29 2023 by rpki-client on console-ams.rpki-client.org