Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43ed8522-cc48-4ba0-adff-36a799af3a49/cf9136eedb080fde1cfbbbb7350371e4b6a0dd48.roa
File:                     cf9136eedb080fde1cfbbbb7350371e4b6a0dd48.roa (raw, json)
Hash identifier:          +zMzOFsfXY5GlHPUbiekoMytdVLfJyjNeDQU4edkfAs=
Subject key identifier:   00:EC:CD:D4:14:A9:D3:FB:A4:AB:31:44:57:18:F1:FF:57:D2:24:40
Certificate issuer:       /CN=70c277a3f87d710be660d9c03e8a104a4ea1e4a5
Certificate serial:       1FD712
Authority key identifier: CC:5D:DA:E3:E8:3A:84:9C:6D:DF:87:5F:62:B2:F8:2F:6E:EE:7D:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70c277a3f87d710be660d9c03e8a104a4ea1e4a5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43ed8522-cc48-4ba0-adff-36a799af3a49/cf9136eedb080fde1cfbbbb7350371e4b6a0dd48.roa
Signing time:             Fri 24 Mar 2023 08:31:00 +0000
ROA not before:           Thu 23 Mar 2023 08:31:00 +0000
ROA not after:            Sat 22 Mar 2025 08:31:00 +0000
asID:                     14754
IP address blocks:        179.5.0.0/16 maxlen: 20
                          190.62.0.0/16 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2086674 (0x1fd712)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70c277a3f87d710be660d9c03e8a104a4ea1e4a5
        Validity
            Not Before: Mar 23 08:31:00 2023 GMT
            Not After : Mar 22 08:31:00 2025 GMT
        Subject: CN=cf9136eedb080fde1cfbbbb7350371e4b6a0dd48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3a:b3:59:84:f9:77:72:f4:75:47:ac:33:29:
                    aa:13:63:4d:2f:8e:64:95:f1:a8:a1:02:74:76:5b:
                    76:13:7d:26:44:9b:52:0c:5c:a6:a5:e6:fc:dc:5b:
                    0c:e0:51:6b:2f:99:5f:b9:19:0d:d6:a8:cc:bd:f8:
                    ad:7d:20:14:76:bb:bc:8c:6a:53:0e:d0:ae:e4:cb:
                    65:1c:e6:cf:f8:fe:4e:e3:2b:89:32:ab:95:ff:24:
                    3b:0f:86:aa:4a:07:d9:c8:88:00:88:72:d0:70:aa:
                    33:ac:18:c1:c6:00:cf:cb:32:a1:84:f8:31:89:82:
                    07:e1:4d:db:78:73:75:56:eb:da:b9:8e:b0:dc:6c:
                    81:60:3f:6f:d6:a8:1a:b9:81:e0:e4:96:67:d0:a7:
                    fb:c8:36:aa:e4:49:93:89:f2:a5:2f:b6:4a:e7:3e:
                    51:ce:01:dc:23:17:b5:f1:0d:5e:00:e3:89:ae:6b:
                    b3:ee:05:09:07:c7:96:30:1f:19:73:6f:21:e9:59:
                    56:a0:62:24:36:89:54:cc:1f:ad:75:c8:7e:37:8a:
                    bc:9f:a1:c7:48:fb:64:3d:38:7c:36:19:15:54:32:
                    40:65:a0:ca:b1:57:f1:08:56:ea:a2:4e:59:e8:b0:
                    69:43:ae:e6:ab:db:42:f9:f7:83:c0:99:5c:0c:69:
                    3d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:EC:CD:D4:14:A9:D3:FB:A4:AB:31:44:57:18:F1:FF:57:D2:24:40
            X509v3 Authority Key Identifier:
                keyid:CC:5D:DA:E3:E8:3A:84:9C:6D:DF:87:5F:62:B2:F8:2F:6E:EE:7D:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70c277a3f87d710be660d9c03e8a104a4ea1e4a5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43ed8522-cc48-4ba0-adff-36a799af3a49/cf9136eedb080fde1cfbbbb7350371e4b6a0dd48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43ed8522-cc48-4ba0-adff-36a799af3a49/70c277a3f87d710be660d9c03e8a104a4ea1e4a5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.5.0.0/16
                  190.62.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         27:fe:3c:f8:cc:fa:b9:e3:f8:27:83:b0:e5:83:fb:97:a7:2b:
         a2:6b:b3:3e:cf:47:5c:04:8a:db:12:90:f8:ac:71:e4:66:06:
         7a:e8:1c:f7:df:8f:db:fa:39:5b:52:1d:cf:57:f1:16:44:6e:
         59:ab:25:37:0b:70:f9:73:83:32:78:17:19:77:eb:fe:f3:a2:
         be:14:fd:11:e3:78:06:d6:5c:26:99:6b:59:87:d4:8c:5b:c8:
         6f:70:a8:12:90:23:49:8f:57:40:ec:3b:77:fd:d9:95:72:64:
         4d:96:70:fb:81:cc:0f:c3:3c:36:df:a2:f8:28:7e:5e:b3:dc:
         55:7a:09:c5:e1:c3:58:6e:e5:dc:7f:5c:1f:fc:b7:17:5d:b9:
         2f:f4:f0:2d:3b:a7:c2:d8:81:f4:70:a5:fb:7e:aa:37:b8:0d:
         8e:89:6e:c5:db:28:b2:75:f4:28:fe:be:be:8f:3f:ce:24:30:
         b1:76:ea:81:b9:89:3d:39:b2:76:a3:71:3d:91:a3:ce:bb:c6:
         e4:cf:8e:55:47:f3:b1:94:f9:df:93:e3:63:80:80:c6:b3:56:
         07:07:a7:dc:fc:3d:a6:a8:17:d1:13:25:ff:1d:e4:63:a4:88:
         9b:a7:da:22:56:db:24:21:ae:5b:32:8f:82:c0:4a:75:27:6a:
         e7:cb:a4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 22 23:36:12 2023 by rpki-client on console-ams.rpki-client.org