Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/b151af306fc3d3aca2b1c21d68f1ea753d5aae66.roa
File:                     b151af306fc3d3aca2b1c21d68f1ea753d5aae66.roa (raw, json)
Hash identifier:          +5+Y+xTUMRj042zRMZaIcYWCStxvxmEL8MKYdXe5Oso=
Subject key identifier:   B5:78:21:FA:01:B4:4D:01:90:BE:B5:8C:B8:1E:7C:7F:62:B4:EA:23
Certificate issuer:       /CN=aae8cbe9904f103232c002483204f9f2ae04d026
Certificate serial:       1116E5
Authority key identifier: 9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/b151af306fc3d3aca2b1c21d68f1ea753d5aae66.roa
Signing time:             Fri 13 Aug 2021 15:00:23 +0000
ROA not before:           Fri 13 Aug 2021 15:00:21 +0000
ROA not after:            Thu 13 Aug 2026 15:00:21 +0000
asID:                     28041
IP address blocks:        200.125.141.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1119973 (0x1116e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae8cbe9904f103232c002483204f9f2ae04d026
        Validity
            Not Before: Aug 13 15:00:21 2021 GMT
            Not After : Aug 13 15:00:21 2026 GMT
        Subject: CN=b151af306fc3d3aca2b1c21d68f1ea753d5aae66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:18:63:e2:d5:2a:7f:16:f5:ee:df:c9:29:9c:
                    72:33:49:43:80:85:ba:23:d7:b2:88:14:89:74:92:
                    8d:9c:c3:fb:f6:f6:d6:4a:cb:a7:7e:4e:da:55:e0:
                    59:36:ca:4e:7f:9f:75:6c:96:b3:f7:93:2c:9f:47:
                    6b:07:ae:de:34:b5:b3:cf:1c:04:c5:23:b1:5b:6c:
                    9e:3c:bc:f6:aa:47:90:c5:91:fe:d7:f2:00:6a:ec:
                    00:99:45:a4:04:dd:fb:92:e3:34:4a:f7:75:1c:a3:
                    7c:98:d9:c6:40:e6:70:1a:f3:29:b6:88:74:5c:ec:
                    1a:a0:6e:f8:54:5b:0b:86:38:86:08:d1:92:c3:66:
                    02:02:20:53:a5:f3:74:98:aa:af:5f:23:2d:02:42:
                    68:0d:ad:9f:1b:b6:ff:d9:79:66:a2:73:95:ba:36:
                    b2:47:0a:37:70:ba:e6:eb:cb:34:b6:9d:d0:44:e3:
                    c0:51:12:f5:74:70:39:09:8c:34:54:69:8c:99:22:
                    b7:40:b3:39:ac:36:d1:77:bc:8a:62:e6:af:f1:72:
                    94:8f:ea:22:5d:66:fd:77:58:b0:d1:e9:0a:23:2c:
                    b6:29:11:df:9d:f0:66:ae:04:0a:10:94:40:33:9b:
                    9e:8d:0a:35:0a:20:79:63:cd:6c:f9:cb:ce:f6:c6:
                    2a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:78:21:FA:01:B4:4D:01:90:BE:B5:8C:B8:1E:7C:7F:62:B4:EA:23
            X509v3 Authority Key Identifier:
                keyid:9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/b151af306fc3d3aca2b1c21d68f1ea753d5aae66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/aae8cbe9904f103232c002483204f9f2ae04d026.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:85:0b:44:af:e7:04:4a:c2:ac:7e:ba:42:fc:4e:34:46:ae:
         68:8f:da:e3:23:3a:78:64:33:df:a5:65:68:52:40:ed:66:29:
         ba:ee:e0:f9:ab:86:3e:72:48:3b:bb:54:0a:12:a7:b7:3a:bf:
         8a:26:f5:f1:db:7c:b2:65:92:6c:ee:21:b2:f7:79:3d:97:90:
         2e:5e:21:30:ba:f5:50:c7:dc:eb:2b:12:4e:c0:7d:8f:18:23:
         f3:8b:8a:04:56:d7:60:bc:ea:a3:72:40:cc:09:8f:af:54:55:
         3d:31:d5:ee:8a:83:34:b9:58:0e:30:84:bd:6c:83:c7:60:ac:
         31:bd:50:b2:6a:70:71:e1:9e:7e:9a:c7:be:68:a1:2f:80:e1:
         f1:ab:8a:d2:13:e5:bf:27:54:8a:7c:5b:88:24:1a:2d:07:20:
         03:b1:d1:5a:5c:8b:21:14:55:a2:a9:22:fd:78:cb:6f:05:4c:
         74:09:3d:f4:b2:44:8c:d8:0c:0d:23:a0:a9:21:d0:23:4b:e7:
         79:bf:59:fa:32:a4:9e:b8:4a:22:95:7b:64:98:27:ea:6b:55:
         7a:f0:bb:1e:5f:77:41:da:31:02:ea:b1:a6:0e:b3:99:51:45:
         26:04:8e:25:80:20:0d:04:11:2f:94:66:a6:04:d6:6e:a3:54:
         f7:4b:a5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:18 2023 by rpki-client on console-fra.rpki-client.org