Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/444443eb-6c16-46de-b287-55b9da4d5b05/9bae7b74b6a4753659c5e8da51d2e00c09cb971c.roa
File:                     9bae7b74b6a4753659c5e8da51d2e00c09cb971c.roa (raw, json)
Hash identifier:          /eBhQvVAANJilbrrLSUR62T0JF/6tuNX+w0mZ49JJzE=
Subject key identifier:   20:30:42:7B:BD:FB:FE:3B:4B:00:84:84:47:64:E8:5F:F7:A0:63:E8
Certificate issuer:       /CN=dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d
Certificate serial:       237910
Authority key identifier: 93:3C:4B:4E:5F:37:14:1F:7D:61:E9:D1:7A:FD:7C:A4:EE:E2:25:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/444443eb-6c16-46de-b287-55b9da4d5b05/9bae7b74b6a4753659c5e8da51d2e00c09cb971c.roa
Signing time:             Fri 25 Aug 2023 08:30:01 +0000
ROA not before:           Thu 24 Aug 2023 08:30:01 +0000
ROA not after:            Sat 23 Aug 2025 08:30:01 +0000
asID:                     271882
IP address blocks:        170.244.208.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2324752 (0x237910)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d
        Validity
            Not Before: Aug 24 08:30:01 2023 GMT
            Not After : Aug 23 08:30:01 2025 GMT
        Subject: CN=9bae7b74b6a4753659c5e8da51d2e00c09cb971c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:db:8a:9b:6d:b0:5f:c3:25:43:8d:ab:49:21:
                    b1:e9:1f:61:7a:57:da:35:28:40:05:ff:5d:22:4e:
                    b3:3b:db:5a:2e:d7:a3:33:67:6b:b9:12:5c:75:f8:
                    66:c8:c3:97:70:ab:ab:a8:93:a1:97:ea:1e:9b:3a:
                    1c:1f:98:70:47:d8:b6:8c:a2:ee:14:f1:56:c5:20:
                    5e:d3:97:d2:a6:5a:1c:77:88:9d:bb:c2:ee:49:9c:
                    11:be:6b:5d:8d:75:70:3d:2d:b1:1f:d9:7b:b9:c7:
                    75:1d:ca:a3:c9:af:52:4a:e5:1b:7f:75:e5:84:3c:
                    2c:0c:fb:b8:28:69:2c:a2:f1:dc:2c:8d:a4:cf:0f:
                    da:f2:b6:00:91:54:93:25:d3:a5:91:37:c7:bf:74:
                    ed:58:dc:11:29:64:d7:db:9f:d4:c2:6f:96:9d:67:
                    f6:be:e5:85:05:ea:a9:f0:d5:da:f5:a0:b2:7a:cb:
                    42:b1:bb:7a:07:99:25:2b:a5:a7:d6:2e:23:e1:ef:
                    89:e1:c7:a3:84:65:6b:05:b1:8c:59:cc:88:e4:4c:
                    bd:4d:e7:73:73:89:9a:72:b9:e8:a0:7f:77:82:f8:
                    27:92:69:fa:fd:64:c2:71:70:b9:c8:14:2b:ef:f6:
                    a9:27:c5:d1:11:42:4b:1f:5c:70:f6:85:ed:b1:e2:
                    8a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:30:42:7B:BD:FB:FE:3B:4B:00:84:84:47:64:E8:5F:F7:A0:63:E8
            X509v3 Authority Key Identifier:
                keyid:93:3C:4B:4E:5F:37:14:1F:7D:61:E9:D1:7A:FD:7C:A4:EE:E2:25:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/444443eb-6c16-46de-b287-55b9da4d5b05/9bae7b74b6a4753659c5e8da51d2e00c09cb971c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/444443eb-6c16-46de-b287-55b9da4d5b05/dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:99:fd:a2:2f:8a:6e:ec:c6:9c:e1:9d:ba:73:85:51:01:ca:
         e2:3d:2d:cb:37:48:01:2b:85:d4:2d:83:07:fa:23:9e:18:50:
         4c:33:4b:81:73:8c:15:6a:5f:70:3f:c0:8c:ce:db:35:b3:56:
         04:fe:b8:04:3e:dd:a7:db:9f:d3:47:6e:3f:2b:98:3c:a5:d3:
         7f:4d:89:44:49:37:b7:bd:c4:d2:c0:26:1d:1a:e3:a1:97:40:
         86:68:fa:f9:1a:d0:6a:a3:e9:72:0a:c1:75:3f:36:dd:47:8f:
         4c:e8:78:06:75:2f:da:f6:b8:f8:9a:cb:74:d5:c1:5f:59:e9:
         f9:9e:14:a3:68:24:c6:04:6d:28:93:de:a8:04:c0:89:d8:29:
         e7:4a:b6:88:57:bb:c7:b7:4c:e4:c0:63:ab:3a:a8:41:37:4e:
         f4:ed:aa:44:d8:01:be:ff:59:24:ce:12:3e:4b:4f:b5:3f:1f:
         57:c6:c3:06:63:85:52:9a:c9:05:35:f6:93:f8:ce:6d:a6:2c:
         7c:61:a7:b4:63:ed:c4:61:c2:2d:5b:10:c2:53:d6:b9:4e:de:
         75:36:0b:74:22:b6:47:0c:ec:47:6e:28:fe:32:34:ae:91:33:
         bb:fb:46:d8:6f:75:d9:5f:01:8d:54:45:11:de:ee:72:ee:58:
         89:f9:db:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 28 19:46:06 2023 by rpki-client on console-ams.rpki-client.org