Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43e404e5-f491-43dd-a73d-f380ff206019/baea8840fc99c8a24f6eb0b289a0faaeba1d79be.roa
File:                     baea8840fc99c8a24f6eb0b289a0faaeba1d79be.roa (raw, json)
Hash identifier:          alsmz8BhnA1EMpwyCYaeGu9f5+mIm5xUSJU7nLZyOfg=
Subject key identifier:   56:AD:CC:F2:8B:C8:66:1F:B2:69:E9:CF:F6:ED:0C:33:7C:CA:83:BA
Certificate issuer:       /CN=08e8921a29ec1eae940cc6e9659da39a16312ca2
Certificate serial:       164225
Authority key identifier: 4F:4F:96:00:9E:1A:8C:D7:B2:8D:94:D3:96:FF:27:51:66:A7:C0:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08e8921a29ec1eae940cc6e9659da39a16312ca2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43e404e5-f491-43dd-a73d-f380ff206019/baea8840fc99c8a24f6eb0b289a0faaeba1d79be.roa
Signing time:             Fri 04 Mar 2022 09:16:09 +0000
ROA not before:           Tue 15 Feb 2022 03:00:00 +0000
ROA not after:            Tue 08 Apr 2025 03:00:00 +0000
asID:                     209588
IP address blocks:        179.60.147.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1458725 (0x164225)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08e8921a29ec1eae940cc6e9659da39a16312ca2
        Validity
            Not Before: Feb 15 03:00:00 2022 GMT
            Not After : Apr  8 03:00:00 2025 GMT
        Subject: CN=baea8840fc99c8a24f6eb0b289a0faaeba1d79be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7f:35:b0:cc:56:30:8c:43:4e:83:05:ed:73:
                    23:7b:6c:97:40:cd:24:63:d6:17:fb:73:4d:5d:3a:
                    18:6b:63:1a:fe:bb:8a:56:47:4f:3f:59:78:4b:59:
                    89:76:f5:ef:86:26:ac:a8:12:60:7c:f1:ba:1e:49:
                    f0:85:bd:80:c4:1b:d2:00:80:95:62:e0:7a:1c:4a:
                    17:dc:1e:29:1a:33:6d:df:06:d3:ff:49:ee:29:1e:
                    92:d3:c3:d7:c1:6b:10:c0:8f:86:41:5b:22:87:29:
                    25:e4:71:dd:77:e4:ea:f3:07:b9:e6:77:8f:70:b6:
                    fb:4b:c9:9d:43:b4:fb:af:5d:4e:24:6b:eb:bc:ca:
                    c3:03:ef:55:2b:34:8d:50:02:26:0c:1d:80:ef:0d:
                    4e:ac:e1:61:2b:17:cf:31:bb:c0:bc:4e:94:06:fa:
                    b8:94:42:06:c4:6e:8a:d5:87:ab:57:fe:c8:c1:b4:
                    e1:07:c5:a9:75:9a:bf:4e:77:fb:f5:1e:6f:05:7c:
                    3b:82:0f:99:24:00:c8:be:ff:f5:d2:ba:8a:cc:a1:
                    01:4a:57:63:53:c2:e9:68:32:b1:ed:c7:d8:1c:62:
                    60:48:d3:33:93:95:37:cf:26:28:af:06:44:ad:a1:
                    52:6e:fa:e7:e9:ef:5d:46:88:8a:81:7d:af:27:29:
                    ca:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:AD:CC:F2:8B:C8:66:1F:B2:69:E9:CF:F6:ED:0C:33:7C:CA:83:BA
            X509v3 Authority Key Identifier:
                keyid:4F:4F:96:00:9E:1A:8C:D7:B2:8D:94:D3:96:FF:27:51:66:A7:C0:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08e8921a29ec1eae940cc6e9659da39a16312ca2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43e404e5-f491-43dd-a73d-f380ff206019/baea8840fc99c8a24f6eb0b289a0faaeba1d79be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43e404e5-f491-43dd-a73d-f380ff206019/08e8921a29ec1eae940cc6e9659da39a16312ca2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:e3:eb:2a:16:84:48:26:3f:9f:a9:68:6a:ca:17:2f:1f:1e:
         4d:be:16:3a:36:26:51:f2:ca:0f:10:dd:69:bd:c9:5c:85:df:
         2e:66:db:e7:6f:fd:49:e5:24:c6:90:01:07:49:eb:43:87:68:
         01:06:ee:3e:d9:2c:a1:57:eb:10:e8:b1:45:0c:d5:c2:8a:ff:
         5a:05:3e:bc:cd:c5:36:18:34:0a:58:59:2f:11:a9:60:c1:a7:
         93:1e:85:28:d2:eb:e8:e6:6b:da:8d:8f:16:95:0e:10:af:d5:
         43:d7:70:b8:d9:5a:2f:c7:02:08:4b:3a:fd:e9:6f:58:c3:ee:
         3d:9b:2a:db:98:59:e8:8b:50:0e:29:4f:6a:75:55:73:58:81:
         53:1b:b7:f4:4e:c0:b6:b8:8b:75:13:d5:ed:ae:61:d8:be:5a:
         33:30:5e:9f:f7:67:6f:7a:57:b4:85:20:97:55:24:68:9f:0c:
         21:47:f1:63:7d:99:2c:b7:6f:cd:31:a4:1d:1e:b0:23:37:35:
         d7:ed:ba:df:9d:0e:95:30:73:f3:47:7b:ad:5f:1d:f2:cc:b3:
         cc:3f:df:2b:86:8d:2b:21:a0:4d:2c:a1:ac:bf:46:01:34:bb:
         44:9d:ad:5a:86:cb:cb:8b:43:77:71:37:44:cc:5e:82:2d:68:
         03:5b:91:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 12:11:05 2023 by rpki-client on console-ams.rpki-client.org