Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/47312e08-143e-4a72-9eb1-18fce975b94a/3b88c998db4ee9eabba958627ba66b956c79a493.roa
File:                     3b88c998db4ee9eabba958627ba66b956c79a493.roa (raw, json)
Hash identifier:          MZCoj+F9m6bF6DBeBQ21MEKPXLofvlGMk1MdMfZ2aAw=
Subject key identifier:   34:B7:F3:E1:E5:BE:DB:99:A4:1D:75:CC:F3:06:F3:E4:6A:C8:67:11
Certificate issuer:       /CN=9fab8d5b820b6e41a09489268bb8098894f124db
Certificate serial:       066000
Authority key identifier: AB:74:EB:B2:43:51:65:2D:AC:F3:0D:68:F0:F7:F3:6F:40:20:38:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fab8d5b820b6e41a09489268bb8098894f124db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/47312e08-143e-4a72-9eb1-18fce975b94a/3b88c998db4ee9eabba958627ba66b956c79a493.roa
Signing time:             Tue 11 May 2021 18:08:24 +0000
ROA not before:           Tue 04 May 2021 03:00:00 +0000
ROA not after:            Thu 04 May 2023 03:00:00 +0000
asID:                     270092
IP address blocks:        179.49.200.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 417792 (0x66000)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fab8d5b820b6e41a09489268bb8098894f124db
        Validity
            Not Before: May  4 03:00:00 2021 GMT
            Not After : May  4 03:00:00 2023 GMT
        Subject: CN=3b88c998db4ee9eabba958627ba66b956c79a493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e6:12:c8:2e:4e:d0:f7:52:19:e5:d5:32:cb:
                    2d:99:9c:74:88:21:5e:cb:e6:75:92:fa:bb:12:3f:
                    c2:a9:cd:c2:1d:6d:9d:a7:95:7c:ab:84:18:32:e4:
                    78:34:15:7a:c6:df:d3:57:84:e4:49:db:89:6b:ca:
                    5e:2a:c8:3a:f6:23:50:8a:bf:24:0c:80:80:55:53:
                    ba:ac:75:60:06:1a:4c:97:63:5c:10:7a:c4:05:41:
                    1d:29:95:ae:f3:a0:24:e2:74:c6:03:0a:cb:c6:af:
                    52:b6:aa:16:87:97:7e:f2:7b:40:e1:26:bc:d4:85:
                    e6:cb:ab:96:8d:8d:31:bb:6b:df:6c:08:30:c2:ea:
                    45:20:c7:8e:b7:9f:1d:67:ca:e4:90:24:1e:95:12:
                    6a:cc:f1:13:50:4c:d6:73:36:49:3e:6d:f4:53:38:
                    bd:c0:65:cb:8d:0a:17:1e:ca:1d:eb:5d:3d:5d:74:
                    7f:a5:b1:0f:00:10:64:3c:e9:33:06:64:f3:27:96:
                    c1:82:fd:c2:ce:9f:62:df:7d:c6:58:1d:7c:39:87:
                    28:e7:7f:f7:85:e0:8d:9c:b4:2a:30:42:a6:e8:82:
                    49:d8:29:cc:8c:3c:a5:f9:b8:0a:54:0c:d2:fa:79:
                    26:04:ef:22:33:db:9e:81:8c:78:2e:62:24:77:6b:
                    4c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B7:F3:E1:E5:BE:DB:99:A4:1D:75:CC:F3:06:F3:E4:6A:C8:67:11
            X509v3 Authority Key Identifier:
                keyid:AB:74:EB:B2:43:51:65:2D:AC:F3:0D:68:F0:F7:F3:6F:40:20:38:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fab8d5b820b6e41a09489268bb8098894f124db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/47312e08-143e-4a72-9eb1-18fce975b94a/3b88c998db4ee9eabba958627ba66b956c79a493.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/47312e08-143e-4a72-9eb1-18fce975b94a/9fab8d5b820b6e41a09489268bb8098894f124db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:41:52:ed:50:85:8a:2e:f2:59:fa:df:4a:16:20:31:54:da:
         23:2a:8c:21:e9:b4:24:c2:d7:e3:60:4b:4b:8d:ce:79:00:50:
         56:63:c3:ed:cb:48:c7:22:81:07:7b:d0:51:49:5e:bf:3e:cd:
         f7:cd:ef:91:d5:8e:a6:2b:71:6a:a0:f5:8b:58:03:e5:aa:bf:
         fa:b5:35:00:97:71:1a:00:63:ea:f5:03:97:73:4f:60:e1:e0:
         92:48:98:ac:8f:3f:e4:b4:fa:cf:5c:29:9f:d4:ce:df:b1:68:
         58:01:20:07:d8:94:e5:61:0e:8d:84:69:bb:20:5d:66:97:ee:
         4f:de:a1:1a:b4:b3:ae:ed:c4:66:ec:6c:bc:b6:30:68:24:d3:
         2e:b0:7b:dc:88:89:80:8c:1c:4b:fb:24:b1:a9:10:b8:01:81:
         b5:11:90:76:92:d3:c0:42:c6:87:fb:4a:8f:5d:1d:88:02:4c:
         6d:89:b3:24:d0:01:d1:16:8c:3b:85:f6:f0:c2:e0:bf:60:35:
         26:5e:d6:a7:e5:09:52:af:be:74:ab:36:ac:d6:d0:5f:07:16:
         84:3f:65:fd:da:b8:73:e9:3b:00:ac:b8:71:2c:56:0e:ff:41:
         b8:85:00:a6:b4:95:44:41:c3:d5:85:a2:95:d2:c4:37:d5:1f:
         c7:32:cc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:31 2023 by rpki-client on console-ams.rpki-client.org