Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44c81a2b-263b-40a0-932c-eb40c385ff0c/2725621c59d8a89ac4f219813b414ddffd798b14.roa
File:                     2725621c59d8a89ac4f219813b414ddffd798b14.roa (raw, json)
Hash identifier:          LWsktwGnU4KDX+tV+Sq3ooeWJDkVIKHqIEL2lO1mgTM=
Subject key identifier:   32:1E:73:8B:D6:5F:10:ED:C7:43:73:CA:0F:91:48:C3:53:30:5B:4F
Certificate issuer:       /CN=b8e7dd8c13e1c2ca15405d536134602a3fdfd429
Certificate serial:       6ED3
Authority key identifier: F4:A3:8A:B0:0B:BD:14:53:97:C6:DB:6F:D7:41:19:42:17:54:EA:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8e7dd8c13e1c2ca15405d536134602a3fdfd429.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44c81a2b-263b-40a0-932c-eb40c385ff0c/2725621c59d8a89ac4f219813b414ddffd798b14.roa
Signing time:             Fri 28 May 2021 16:20:42 +0000
ROA not before:           Fri 28 May 2021 03:00:00 +0000
ROA not after:            Sun 28 May 2023 03:00:00 +0000
asID:                     271773
IP address blocks:        2803:f7e0::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28371 (0x6ed3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8e7dd8c13e1c2ca15405d536134602a3fdfd429
        Validity
            Not Before: May 28 03:00:00 2021 GMT
            Not After : May 28 03:00:00 2023 GMT
        Subject: CN=2725621c59d8a89ac4f219813b414ddffd798b14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0e:25:c1:34:4a:eb:52:c4:90:bb:91:bc:e5:
                    df:89:1d:65:dd:66:38:bf:20:b6:2c:84:c7:c0:1a:
                    0d:a4:bc:8a:00:c2:d2:a4:26:01:a8:1b:e8:05:c2:
                    04:9d:4f:b5:a5:14:90:53:61:e4:1d:27:b2:a4:e0:
                    83:76:83:3b:e6:5e:7e:f5:54:ca:73:85:da:84:ab:
                    db:0a:1e:63:35:3a:56:f2:d8:c0:27:7b:2f:2e:43:
                    90:75:88:b3:78:80:bf:ef:cc:1d:7e:d6:30:56:eb:
                    1a:ad:05:da:47:8b:fb:b7:c6:99:02:d5:a0:dc:0c:
                    3c:d2:17:8c:a0:23:26:39:e7:80:e2:c7:11:42:ef:
                    33:40:6c:b7:f6:38:36:dd:c4:60:12:32:3f:51:7a:
                    a8:c7:f9:b6:d4:72:96:ec:b4:d5:51:ed:f8:7c:8a:
                    71:68:fc:f5:47:26:f1:3a:dd:ec:89:6d:e8:0f:5b:
                    14:4d:27:a3:61:a4:7f:85:86:0a:39:8a:29:f0:ae:
                    af:69:c0:92:12:ec:19:8d:d5:09:6a:30:5f:24:b7:
                    fb:db:9d:8a:0e:c6:3c:b2:cb:48:68:96:fb:86:11:
                    f4:ee:fd:8f:10:e1:0d:3e:45:15:f7:be:dc:f8:b8:
                    5f:a6:bb:62:fb:7f:88:f6:46:59:c9:c7:a0:c2:7c:
                    d6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:1E:73:8B:D6:5F:10:ED:C7:43:73:CA:0F:91:48:C3:53:30:5B:4F
            X509v3 Authority Key Identifier:
                keyid:F4:A3:8A:B0:0B:BD:14:53:97:C6:DB:6F:D7:41:19:42:17:54:EA:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8e7dd8c13e1c2ca15405d536134602a3fdfd429.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44c81a2b-263b-40a0-932c-eb40c385ff0c/2725621c59d8a89ac4f219813b414ddffd798b14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44c81a2b-263b-40a0-932c-eb40c385ff0c/b8e7dd8c13e1c2ca15405d536134602a3fdfd429.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f7e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:4c:6e:41:55:fe:8d:6c:9e:3a:cb:89:f5:6b:7a:0b:21:69:
         17:d3:52:6e:7e:75:14:12:c4:4d:e7:9a:c0:c4:b8:a1:f7:51:
         4e:0f:39:bc:41:e0:61:db:81:1c:1b:7e:01:83:f7:04:33:5b:
         97:3e:16:31:93:66:e4:6e:4f:ae:7b:9a:09:5e:f4:de:9c:ae:
         1d:a6:66:4f:db:cd:f6:33:07:fc:d7:6c:73:ee:4a:28:09:4b:
         7b:f1:1b:fe:57:0c:ae:b7:8f:82:53:7f:6f:a8:92:26:dd:ff:
         3b:c5:0a:96:6a:d1:ed:e7:28:03:cb:67:cf:b8:0f:1e:9b:dd:
         4b:4a:7e:79:e5:10:39:30:70:23:3d:4f:9d:56:f0:64:c4:01:
         a1:57:24:31:38:2c:04:4c:bb:3d:31:6a:ee:07:3a:b1:f4:2d:
         47:74:77:94:50:14:7c:43:4a:d0:b5:30:b9:e3:de:6b:a6:2c:
         27:89:df:ca:10:68:5d:b2:18:5b:c0:9b:84:79:98:b5:70:ab:
         3c:b9:e4:1a:5c:cc:51:d8:5c:ae:dd:c8:3a:fc:fd:13:f2:6c:
         97:e6:3b:ca:75:63:62:ca:9c:d8:2a:8e:70:17:72:da:66:9e:
         47:65:31:d0:15:74:ad:46:0d:52:7a:7d:30:77:11:1c:22:ee:
         e4:36:23:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:15 2023 by rpki-client on console-fra.rpki-client.org