Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43ed8522-cc48-4ba0-adff-36a799af3a49/995efab5d84c0c55c9451a7cb2d4c4b7f7967d83.roa
File:                     995efab5d84c0c55c9451a7cb2d4c4b7f7967d83.roa (raw, json)
Hash identifier:          Eu/3IzWH2cwAcsAc4USmVXNOIPcghnkBMV2r3Xrp3ag=
Subject key identifier:   FA:B5:B5:8F:5C:AC:AA:1A:01:58:C7:06:3D:6D:D5:A5:D6:EE:29:15
Certificate issuer:       /CN=70c277a3f87d710be660d9c03e8a104a4ea1e4a5
Certificate serial:       0D6FE8
Authority key identifier: CC:5D:DA:E3:E8:3A:84:9C:6D:DF:87:5F:62:B2:F8:2F:6E:EE:7D:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70c277a3f87d710be660d9c03e8a104a4ea1e4a5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43ed8522-cc48-4ba0-adff-36a799af3a49/995efab5d84c0c55c9451a7cb2d4c4b7f7967d83.roa
Signing time:             Wed 24 Mar 2021 22:50:40 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     14754
IP address blocks:        179.5.0.0/16 maxlen: 20
                          190.62.0.0/16 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 880616 (0xd6fe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70c277a3f87d710be660d9c03e8a104a4ea1e4a5
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=995efab5d84c0c55c9451a7cb2d4c4b7f7967d83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c0:e8:1e:22:40:9b:78:d0:f7:34:2a:a5:9b:
                    9e:a8:ca:56:68:8a:dd:f8:b9:e1:57:d6:3a:cb:09:
                    d5:b4:fc:40:f4:55:22:ce:8a:50:de:8b:c6:8f:1f:
                    0b:4c:73:a3:94:af:c6:ca:8f:b0:60:1c:e5:49:b1:
                    e1:ef:a5:ca:9a:be:8e:9e:af:e5:6a:40:10:6b:ca:
                    fe:49:f6:93:d1:46:a7:49:60:34:a6:08:73:7f:a1:
                    6c:d6:b8:d6:66:8a:e2:ba:cc:38:1a:44:fd:91:fe:
                    c7:c4:24:26:f1:24:d5:83:dd:52:aa:e6:11:a0:a7:
                    5e:7f:15:a1:23:24:e6:5a:18:55:c6:fa:73:9b:c7:
                    a6:65:65:21:79:a5:b7:ed:e9:9d:2a:b0:88:1c:bf:
                    e4:1b:62:4d:22:cb:0d:a8:89:ba:2c:80:57:f0:ac:
                    43:67:56:59:b6:9d:7e:de:5a:10:4f:be:49:9d:03:
                    87:61:db:cd:6d:a7:f6:26:35:1a:b1:ad:de:22:55:
                    e0:dc:c0:aa:fd:20:1d:51:08:b2:6f:36:08:a7:2a:
                    dd:b2:33:2c:dc:27:ff:d5:21:17:29:e4:7c:44:e5:
                    8b:89:77:7d:e3:80:ea:2a:82:a0:1d:a7:7d:e0:b7:
                    66:9c:a5:65:bd:a9:06:b1:55:be:46:14:74:c8:38:
                    5f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B5:B5:8F:5C:AC:AA:1A:01:58:C7:06:3D:6D:D5:A5:D6:EE:29:15
            X509v3 Authority Key Identifier:
                keyid:CC:5D:DA:E3:E8:3A:84:9C:6D:DF:87:5F:62:B2:F8:2F:6E:EE:7D:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70c277a3f87d710be660d9c03e8a104a4ea1e4a5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43ed8522-cc48-4ba0-adff-36a799af3a49/995efab5d84c0c55c9451a7cb2d4c4b7f7967d83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43ed8522-cc48-4ba0-adff-36a799af3a49/70c277a3f87d710be660d9c03e8a104a4ea1e4a5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.5.0.0/16
                  190.62.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4f:6a:10:55:9a:10:45:31:5d:e4:74:dd:94:a6:b9:f2:fe:84:
         f0:d0:94:41:56:fc:9e:6e:9a:06:4c:85:6e:8b:a8:28:12:f8:
         22:6f:1a:bf:80:03:ec:62:69:ac:06:4a:e8:3b:9d:a7:66:fa:
         e2:3b:1c:e1:a1:c7:64:de:e0:00:52:07:b9:20:a5:9a:e9:4b:
         d0:d8:85:6a:2b:9a:d3:be:88:a5:a8:60:92:71:5a:28:0c:51:
         5b:3f:62:3d:e5:2b:52:f7:d5:2b:a2:89:c8:71:e5:80:df:38:
         ee:19:bc:47:5d:00:ef:e5:b1:32:bc:ff:60:d0:fb:13:2d:ec:
         50:3d:8a:6e:2a:68:24:54:58:a5:45:9f:51:f5:cc:76:0e:e6:
         5e:2c:37:ba:7d:d0:68:d5:f9:b8:7b:59:63:80:ed:05:c3:63:
         69:43:56:61:0b:e9:94:8f:9e:79:40:70:b6:d3:e3:31:9f:2f:
         e3:c7:87:39:1f:95:5b:1b:84:b4:a0:fc:19:3b:fe:20:04:0a:
         25:0a:03:df:8c:2f:0d:76:14:46:6a:51:47:5b:b5:e2:b5:99:
         f0:2d:18:a5:5f:f3:67:21:cc:b2:0a:fb:32:a5:c1:b3:bd:b5:
         00:16:5d:6b:01:be:d6:09:5a:ca:7c:3b:9c:1e:73:64:7d:85:
         06:c9:92:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:30 2023 by rpki-client on console-ams.rpki-client.org