Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43e404e5-f491-43dd-a73d-f380ff206019/a8ac10463f720b8efb1c5a643e53d9987ed58fab.roa
File:                     a8ac10463f720b8efb1c5a643e53d9987ed58fab.roa (raw, json)
Hash identifier:          PNY+hma1z3Z8doHYCev8oJEi+lT2dTbRCKH3gD2xwN8=
Subject key identifier:   D8:78:B4:4D:37:43:D8:4C:5D:D7:F5:FD:FF:97:76:2A:FC:85:AE:E1
Certificate issuer:       /CN=08e8921a29ec1eae940cc6e9659da39a16312ca2
Certificate serial:       243715
Authority key identifier: 4F:4F:96:00:9E:1A:8C:D7:B2:8D:94:D3:96:FF:27:51:66:A7:C0:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08e8921a29ec1eae940cc6e9659da39a16312ca2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43e404e5-f491-43dd-a73d-f380ff206019/a8ac10463f720b8efb1c5a643e53d9987ed58fab.roa
Signing time:             Fri 01 Sep 2023 11:21:28 +0000
ROA not before:           Thu 31 Aug 2023 11:21:28 +0000
ROA not after:            Mon 01 Sep 2025 11:21:28 +0000
asID:                     209588
IP address blocks:        179.60.147.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2373397 (0x243715)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08e8921a29ec1eae940cc6e9659da39a16312ca2
        Validity
            Not Before: Aug 31 11:21:28 2023 GMT
            Not After : Sep  1 11:21:28 2025 GMT
        Subject: CN=a8ac10463f720b8efb1c5a643e53d9987ed58fab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1f:06:ef:5e:44:b2:8c:4c:da:f7:76:db:c9:
                    1c:cd:29:ce:48:dd:a8:42:b2:00:b0:8a:a3:29:b5:
                    ed:04:0d:01:ee:39:83:0b:76:b9:bc:d4:f8:0d:1d:
                    c5:50:0f:06:67:20:9e:0d:ee:8c:04:f9:32:72:d3:
                    5b:8b:3b:a6:20:16:5c:e0:d8:f1:a2:65:3e:c8:d7:
                    dc:d8:5c:9e:c5:44:5a:7d:c7:e3:27:89:7d:05:fd:
                    56:71:47:f7:1c:2c:a0:d1:4a:ab:0a:22:10:86:12:
                    bb:58:ca:1d:48:fe:81:e0:1f:f4:1a:c4:7e:64:54:
                    5c:93:f2:dd:a4:cd:b0:95:54:01:a2:03:a6:cf:b4:
                    55:b2:2f:1d:81:b3:bc:cb:11:2b:8a:fc:ca:c9:8c:
                    cb:d2:c6:8a:b2:1a:84:98:7c:19:47:f9:05:5f:c2:
                    89:44:91:a9:89:e7:f7:c6:d0:11:0c:ef:ca:80:f5:
                    a8:6a:99:2c:95:8e:55:0d:74:ed:71:84:c8:23:4e:
                    64:69:ed:47:16:d2:e0:c0:0e:f2:85:26:cf:71:b3:
                    02:18:68:f6:f0:0d:d2:36:b2:ca:8a:94:b8:af:2b:
                    ff:22:c3:f6:13:2c:fd:ae:5d:ad:68:36:57:de:39:
                    63:d7:74:35:b7:07:86:12:c4:4a:4e:48:ec:28:40:
                    81:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:78:B4:4D:37:43:D8:4C:5D:D7:F5:FD:FF:97:76:2A:FC:85:AE:E1
            X509v3 Authority Key Identifier:
                keyid:4F:4F:96:00:9E:1A:8C:D7:B2:8D:94:D3:96:FF:27:51:66:A7:C0:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08e8921a29ec1eae940cc6e9659da39a16312ca2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43e404e5-f491-43dd-a73d-f380ff206019/a8ac10463f720b8efb1c5a643e53d9987ed58fab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43e404e5-f491-43dd-a73d-f380ff206019/08e8921a29ec1eae940cc6e9659da39a16312ca2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:cb:64:30:02:e7:20:13:4d:b6:e2:41:f4:d3:a9:c9:cf:a1:
         b6:03:93:6b:93:28:75:3a:6b:e3:0d:0b:87:04:9f:53:e6:43:
         37:6d:d2:15:72:62:be:e9:ad:47:1b:39:bc:ee:7e:8f:02:cd:
         49:17:a0:0e:8e:d6:b2:ee:e9:a3:4e:4d:a3:8c:13:70:29:f9:
         f4:60:39:40:14:4b:7f:d2:b0:61:dc:d6:11:05:74:72:b7:65:
         7a:37:88:04:f1:30:20:a0:4f:70:3a:ed:12:c1:89:6e:de:bd:
         86:b3:0c:c0:a1:84:d3:9c:8f:e1:c0:f4:43:16:af:91:dd:11:
         b0:f0:da:f4:72:00:14:8a:65:7e:14:35:b5:8e:a5:e6:d4:40:
         4c:f6:48:a8:ea:c9:21:82:c3:94:fe:5f:a0:f5:47:50:f1:fc:
         3e:34:68:ba:02:9f:33:40:3c:78:43:82:09:13:75:ee:c0:0b:
         4e:c7:e7:e7:ae:28:91:3f:0f:05:a9:ff:1c:5c:bb:8a:e5:ac:
         9a:48:75:84:9d:5f:33:0c:45:29:02:96:55:e6:1c:8a:11:e4:
         b9:1e:ee:fc:31:d6:c7:14:17:47:28:f1:3a:93:d3:47:b3:9a:
         19:a6:ec:6e:2c:21:9a:78:48:93:76:7c:52:21:5b:51:40:e0:
         88:17:ae:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 6 20:37:02 2023 by rpki-client on console-fra.rpki-client.org