Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/30fff70266de74686860e9413d2a08382e034cf0.roa
File:                     30fff70266de74686860e9413d2a08382e034cf0.roa (raw, json)
Hash identifier:          i0uIvm3ehLIJjaIz+FALRXPyPnSzIiTgh1VLxq4wN44=
Subject key identifier:   BE:FD:2A:51:C1:28:B5:57:E8:15:0C:FA:F3:93:D3:2D:AA:72:A4:A8
Certificate issuer:       /CN=aae8cbe9904f103232c002483204f9f2ae04d026
Certificate serial:       111404
Authority key identifier: 9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/30fff70266de74686860e9413d2a08382e034cf0.roa
Signing time:             Fri 13 Aug 2021 15:00:22 +0000
ROA not before:           Fri 13 Aug 2021 15:00:21 +0000
ROA not after:            Thu 13 Aug 2026 15:00:21 +0000
asID:                     263238
IP address blocks:        190.9.179.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1119236 (0x111404)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae8cbe9904f103232c002483204f9f2ae04d026
        Validity
            Not Before: Aug 13 15:00:21 2021 GMT
            Not After : Aug 13 15:00:21 2026 GMT
        Subject: CN=30fff70266de74686860e9413d2a08382e034cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bb:ca:37:b6:15:c6:e9:9f:33:bc:41:6b:6e:
                    6d:39:3f:0b:ed:28:e3:84:42:1e:3f:f2:1d:f5:51:
                    af:77:e1:8d:d0:ed:7e:e3:82:17:6e:bb:58:e0:ae:
                    93:a1:e8:1b:5e:09:6d:14:de:76:89:89:0f:46:5a:
                    85:23:09:78:80:ad:60:9a:9d:9b:ba:c7:d3:02:d5:
                    6f:00:e3:87:cc:76:27:8e:15:c3:7a:d8:b8:8c:ce:
                    86:65:ff:ff:3e:aa:dc:3c:50:4d:36:67:eb:99:07:
                    af:be:88:e7:87:50:ad:2e:32:89:0f:2a:3c:82:fc:
                    4a:e8:ae:fc:8d:6b:ea:6a:0b:92:b2:ee:b3:34:7b:
                    fe:8c:84:68:a2:23:bd:00:ff:9e:5d:aa:bf:45:d5:
                    9f:5a:00:4d:54:0b:09:c1:84:98:ce:44:0d:fa:7a:
                    bd:77:a5:5a:67:a1:43:d2:f9:a6:b5:9e:0f:5b:8b:
                    5d:7e:d0:f9:03:17:f6:59:44:79:d1:13:2a:32:9b:
                    ca:95:53:44:44:e4:05:bc:85:6c:00:f7:34:9c:73:
                    83:4f:47:47:97:7f:bb:25:e4:4e:25:60:ad:8c:78:
                    9f:5b:19:7e:bd:c5:95:40:d4:fe:6b:ba:ad:16:fc:
                    4e:f5:71:af:00:66:59:8a:0d:5f:ff:68:67:b2:89:
                    a9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:FD:2A:51:C1:28:B5:57:E8:15:0C:FA:F3:93:D3:2D:AA:72:A4:A8
            X509v3 Authority Key Identifier:
                keyid:9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/30fff70266de74686860e9413d2a08382e034cf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/aae8cbe9904f103232c002483204f9f2ae04d026.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:47:77:96:91:9c:04:54:41:33:8c:f1:7d:18:09:1c:44:fa:
         ad:4e:4e:33:54:c3:2b:d6:19:b1:c8:df:c5:53:e3:22:11:3d:
         7a:c6:12:aa:0a:d0:9c:10:ae:c7:3d:35:10:a8:35:80:d0:2a:
         50:34:12:2b:85:c7:a8:01:4c:56:c0:ab:31:8e:53:38:ad:72:
         9c:3d:c7:ad:0e:aa:d6:e8:64:a3:3d:86:a7:0c:ef:23:5c:fe:
         a8:35:c8:f4:36:1d:67:74:66:26:e7:e1:fa:cd:b7:e8:bd:3c:
         8e:fe:ff:3c:e0:5b:f4:d8:c3:b5:76:bc:69:b4:a8:66:08:6a:
         69:90:55:8c:c6:69:31:84:26:d6:1e:56:36:9d:2f:11:c3:92:
         c4:44:4d:c2:b5:ad:94:04:24:ec:92:31:04:f6:a1:a0:55:59:
         d8:af:33:f3:eb:3e:ef:2b:1a:9e:ca:9e:a1:f6:50:ea:3b:3e:
         a6:de:4c:f1:a7:c7:29:52:4b:58:93:8b:38:59:24:b4:51:64:
         05:b4:68:dc:d7:80:b5:0b:a0:61:25:5d:80:cd:04:41:97:e1:
         32:39:fc:c9:05:e7:d6:42:fc:c7:62:ef:88:74:a6:03:55:33:
         cc:b4:e4:3c:e0:5e:56:f8:38:2c:dc:8d:51:c1:63:23:46:09:
         dd:5e:f3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:18 2023 by rpki-client on console-fra.rpki-client.org