Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/563fcf80-91b5-4da6-a3ea-7bb84a0e83ed/31e073fe373b81ec1c0c76555c5aa51097b87c6a.roa
File:                     31e073fe373b81ec1c0c76555c5aa51097b87c6a.roa (raw, json)
Hash identifier:          hTBVOFyDDgBJ2QjxQblUUsKP2KoaUBASAr53gnfqT5k=
Subject key identifier:   E3:21:29:B2:31:27:EA:3E:B3:C5:87:AD:3B:A0:72:08:54:27:9E:12
Certificate issuer:       /CN=30d20bef67088f83626615a8accfbafffad06334
Certificate serial:       07C9D8
Authority key identifier: 93:34:E0:2D:E2:00:5A:1A:43:BC:FF:4D:2E:E0:88:0E:23:B1:E1:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30d20bef67088f83626615a8accfbafffad06334.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/563fcf80-91b5-4da6-a3ea-7bb84a0e83ed/31e073fe373b81ec1c0c76555c5aa51097b87c6a.roa
Signing time:             Wed 14 Sep 2022 23:13:29 +0000
ROA not before:           Fri 05 Aug 2022 22:56:17 +0000
ROA not after:            Mon 05 Aug 2024 22:56:17 +0000
asID:                     7087
IP address blocks:        200.52.154.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 510424 (0x7c9d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30d20bef67088f83626615a8accfbafffad06334
        Validity
            Not Before: Aug  5 22:56:17 2022 GMT
            Not After : Aug  5 22:56:17 2024 GMT
        Subject: CN=31e073fe373b81ec1c0c76555c5aa51097b87c6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d8:13:d9:14:cc:0b:ed:5d:e2:a8:37:f0:66:
                    0c:aa:a7:31:b2:b9:65:26:4d:10:ba:00:b8:3c:e6:
                    e4:e4:6e:0d:3b:54:ec:a6:41:7e:f9:fd:d3:09:bd:
                    6c:5b:40:1a:ae:90:fc:ab:ee:b0:a3:d3:ed:31:f2:
                    a4:79:bb:a1:03:4b:e7:86:40:8c:93:4b:da:32:70:
                    dc:19:d5:2c:09:40:9a:44:b0:05:9d:0e:22:70:68:
                    21:f0:91:36:85:a2:e9:2e:12:0d:43:5c:dc:6c:57:
                    de:00:f0:18:53:a1:80:29:f1:2e:8b:b7:bc:e3:8c:
                    2c:4a:1d:51:c3:16:0f:39:80:3b:a3:37:79:18:0d:
                    00:ed:12:39:27:90:35:ce:2d:8d:50:d1:56:8b:b3:
                    4a:16:7f:26:fd:d2:4d:dc:45:42:c8:5b:24:cc:c3:
                    b2:8a:d3:c5:6f:04:cb:71:5f:fd:46:1b:21:ac:b1:
                    99:bf:e2:eb:bd:3e:1a:11:e0:73:a3:af:a7:a4:a9:
                    fc:96:7e:2f:c4:bc:75:64:9d:e9:4c:42:c5:1f:9e:
                    ae:cc:c4:ff:8f:d6:0b:b1:da:c4:e6:9f:31:19:bc:
                    d2:b1:b1:06:0f:2b:ec:c9:32:2c:f6:1a:77:22:8d:
                    60:10:47:f1:b2:3c:e9:71:80:f3:b5:f4:89:35:16:
                    4e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:21:29:B2:31:27:EA:3E:B3:C5:87:AD:3B:A0:72:08:54:27:9E:12
            X509v3 Authority Key Identifier:
                keyid:93:34:E0:2D:E2:00:5A:1A:43:BC:FF:4D:2E:E0:88:0E:23:B1:E1:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30d20bef67088f83626615a8accfbafffad06334.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/563fcf80-91b5-4da6-a3ea-7bb84a0e83ed/31e073fe373b81ec1c0c76555c5aa51097b87c6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/563fcf80-91b5-4da6-a3ea-7bb84a0e83ed/30d20bef67088f83626615a8accfbafffad06334.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:be:dd:c8:22:65:b3:b3:87:7e:78:1f:df:72:5e:83:8e:1e:
         85:32:a4:7a:fc:35:d8:df:e2:d3:99:bd:84:97:7e:f6:dd:65:
         b7:75:21:4c:a0:55:ee:53:9d:e8:cf:85:70:78:87:41:60:43:
         5f:77:d7:5f:28:af:2e:76:68:8f:47:dc:38:15:db:66:28:42:
         0b:03:da:54:24:97:0c:2f:7f:d4:fc:c8:78:45:cb:1a:b8:c2:
         72:54:2a:c0:ab:66:6b:45:88:94:72:17:64:2f:59:74:9b:de:
         6c:21:fc:e7:dd:4d:70:d7:e2:ea:5c:fe:20:cc:f3:a7:a3:53:
         db:58:f6:70:eb:5b:85:07:11:9b:91:62:f0:5a:dd:5c:30:12:
         b7:71:80:24:eb:cd:37:6f:cb:93:c6:10:cf:ad:11:88:48:ce:
         db:30:71:f7:b9:2c:bf:3d:6e:b6:44:64:cb:ce:2e:9b:26:85:
         95:d2:00:25:ed:9b:f8:bc:1e:6a:5c:bc:83:d0:f3:5f:f0:c0:
         77:14:50:18:83:6a:9f:5b:8b:67:e7:ee:c6:8d:0a:35:4f:7f:
         98:08:0d:a5:08:f3:23:b3:59:9d:96:f5:62:c8:a2:c0:15:5f:
         5b:6c:08:fd:b3:ee:70:fa:cf:77:8c:2f:6f:e5:f4:ec:c6:b9:
         83:ae:2e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:34 2023 by rpki-client on console-ams.rpki-client.org