Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/4ebc19ca32fa004f4e608c35a7c042a6534805a9.roa
File:                     4ebc19ca32fa004f4e608c35a7c042a6534805a9.roa (raw, json)
Hash identifier:          A2aaCCoW+03oRst2SaHf0HFnLsn3i9XYHmlKXZ9QKvk=
Subject key identifier:   B5:C9:06:00:3A:91:56:AF:D1:6D:1F:FD:6C:E0:0D:DB:8A:FC:52:EC
Certificate issuer:       /CN=acba41ca66eb0e77192d2d22221e4fb662988a5d
Certificate serial:       089A
Authority key identifier: FB:8E:62:CE:DE:35:6D:C8:F4:D6:5D:57:65:1A:A2:F7:7C:D1:31:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acba41ca66eb0e77192d2d22221e4fb662988a5d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/4ebc19ca32fa004f4e608c35a7c042a6534805a9.roa
Signing time:             Thu 11 Nov 2021 04:01:21 +0000
ROA not before:           Thu 11 Nov 2021 03:00:00 +0000
ROA not after:            Sat 11 Nov 2023 03:00:00 +0000
asID:                     27986
IP address blocks:        164.77.56.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2202 (0x89a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acba41ca66eb0e77192d2d22221e4fb662988a5d
        Validity
            Not Before: Nov 11 03:00:00 2021 GMT
            Not After : Nov 11 03:00:00 2023 GMT
        Subject: CN=4ebc19ca32fa004f4e608c35a7c042a6534805a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5f:b4:af:b4:2a:af:4b:29:48:4e:41:00:ae:
                    7c:63:28:8b:78:de:8b:ad:88:4f:35:75:da:29:a4:
                    d0:b3:21:c2:18:a0:39:af:8a:c6:e9:b4:94:51:a8:
                    94:ee:c1:db:57:5f:8d:da:ea:31:45:41:f4:fd:34:
                    24:9e:3b:be:60:1d:c6:9f:c8:4e:85:fb:50:a9:38:
                    80:3f:55:b1:75:23:a8:3f:32:e5:b2:34:4e:a3:d7:
                    cd:35:73:79:be:3d:e9:1e:db:b4:2e:b0:a6:bc:2c:
                    36:90:ac:d2:18:04:c7:d5:26:a1:7d:9d:72:ed:f4:
                    db:d3:fb:dc:9b:bf:e1:b9:db:2f:28:7c:c2:09:49:
                    ec:4c:cc:4f:77:bb:2f:ab:35:50:00:1f:57:6c:8c:
                    e8:27:72:b2:78:5c:b4:5a:da:73:6d:e6:30:4d:58:
                    80:82:f2:90:73:06:6b:77:ee:ac:cd:6c:ac:8d:73:
                    6a:8c:87:51:5b:af:97:68:f7:dc:1b:1b:ea:6b:50:
                    2f:1b:b1:09:f7:30:88:7f:8d:6e:f0:0b:c8:07:4a:
                    0d:f2:ca:f8:2c:82:60:45:4e:e0:f9:dc:79:67:5d:
                    ba:64:2e:08:13:75:32:ef:2b:1c:fc:67:2d:f1:44:
                    db:6d:6f:e6:83:d9:28:42:f5:39:65:bf:4e:3d:a7:
                    19:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C9:06:00:3A:91:56:AF:D1:6D:1F:FD:6C:E0:0D:DB:8A:FC:52:EC
            X509v3 Authority Key Identifier:
                keyid:FB:8E:62:CE:DE:35:6D:C8:F4:D6:5D:57:65:1A:A2:F7:7C:D1:31:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acba41ca66eb0e77192d2d22221e4fb662988a5d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/4ebc19ca32fa004f4e608c35a7c042a6534805a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/acba41ca66eb0e77192d2d22221e4fb662988a5d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.77.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:be:51:da:cf:22:05:aa:b2:09:00:0b:e7:9b:ec:5a:13:d0:
         97:c4:6e:55:1d:5a:4c:8e:83:98:95:48:85:34:d6:01:6f:bf:
         d2:3b:7c:80:ba:b1:8c:1b:ad:6a:1e:2f:6a:73:1b:a6:a1:76:
         cc:8f:11:42:df:5a:af:d0:d6:99:78:4e:57:f8:02:ec:e9:cc:
         88:44:11:15:31:ba:d9:e4:eb:05:df:1b:9a:16:83:9f:43:bb:
         4b:18:98:8e:30:26:ef:db:a1:8d:be:39:68:94:7d:50:9d:11:
         14:a7:24:69:76:70:1e:75:11:66:cd:28:6a:72:da:55:c5:da:
         b1:3a:72:d6:ec:d1:a4:d0:0b:e4:a8:b6:76:8e:6c:d8:3f:07:
         a1:72:1d:02:a4:8d:3f:ab:7a:56:7a:6a:57:62:5a:83:79:10:
         c9:53:87:75:81:41:6b:c4:94:8c:cd:11:a1:cd:d1:7c:59:5a:
         ed:f5:9e:5c:79:e2:3d:66:04:70:74:ad:11:f1:4e:1e:56:0f:
         4c:88:9c:0f:0b:0b:64:7e:d1:6b:72:5a:51:25:99:ea:86:d3:
         94:96:80:f4:f3:0d:0e:c3:61:35:8a:06:6c:aa:4c:dc:f1:60:
         32:e8:c9:af:84:43:8d:26:c0:d1:d7:3d:b4:b1:32:a1:9c:4a:
         48:29:79:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:31 2023 by rpki-client on console-ams.rpki-client.org