Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/651c63b7-e13e-43bf-b010-265cb1f0b182/1de7f42453a1db4a186d9845463c3b1a829dd71d.roa
File:                     1de7f42453a1db4a186d9845463c3b1a829dd71d.roa (raw, json)
Hash identifier:          n8zQiZTOKszXhuHuWly7pNjnX9zdjbi6z6EL51QltkE=
Subject key identifier:   CF:FB:C3:3D:FB:7A:C8:BB:2D:92:94:A2:7C:41:D3:BA:CD:08:11:87
Certificate issuer:       /CN=2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82
Certificate serial:       0D15B5
Authority key identifier: 92:B6:4A:50:EF:06:00:D0:23:FF:00:07:AC:5F:C0:FD:73:E1:A9:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/651c63b7-e13e-43bf-b010-265cb1f0b182/1de7f42453a1db4a186d9845463c3b1a829dd71d.roa
Signing time:             Mon 09 May 2022 22:31:12 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     264668
IP address blocks:        179.63.20.0/22 maxlen: 31

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 857525 (0xd15b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=1de7f42453a1db4a186d9845463c3b1a829dd71d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:32:b7:ca:39:a7:ec:5b:cf:e4:e9:41:87:b5:
                    af:84:b8:4f:d5:de:82:3c:47:c9:55:94:fe:95:f7:
                    d2:bc:f9:0c:9b:55:07:1a:2e:e9:73:38:af:5d:b1:
                    4c:17:c6:b6:81:b7:10:f0:d5:50:f6:56:65:82:10:
                    3d:53:eb:03:e7:25:31:50:16:72:ab:aa:67:ab:e2:
                    a8:81:09:28:5a:bd:1b:b0:b7:62:71:24:7e:0f:0f:
                    2d:dd:5c:1e:81:89:ab:ec:09:2e:e8:3c:2c:28:ce:
                    a6:ef:0e:39:e8:9b:03:0d:9f:bf:14:3e:a5:f9:a9:
                    d8:40:c7:c0:cf:fc:fe:61:e4:46:ef:a0:07:2b:6d:
                    0e:72:01:3f:7f:d9:9b:12:d4:9c:1c:5e:da:2b:95:
                    a9:89:43:96:c6:80:30:76:ba:95:88:cb:2a:eb:a9:
                    0f:26:03:79:8b:f4:98:4d:ad:1b:74:2a:87:5d:03:
                    98:27:4f:8c:2d:e1:96:d4:cd:21:d9:ae:23:77:47:
                    0a:cb:2a:ef:12:95:8d:63:d5:22:ae:71:cd:fd:13:
                    29:55:4d:a8:43:89:fa:63:66:e1:ef:27:19:24:72:
                    66:22:7a:4b:72:d8:83:14:83:19:e2:2e:2b:6b:8d:
                    82:41:d2:96:ee:a7:a2:17:6a:95:4f:39:7d:11:d0:
                    cd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:FB:C3:3D:FB:7A:C8:BB:2D:92:94:A2:7C:41:D3:BA:CD:08:11:87
            X509v3 Authority Key Identifier:
                keyid:92:B6:4A:50:EF:06:00:D0:23:FF:00:07:AC:5F:C0:FD:73:E1:A9:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/651c63b7-e13e-43bf-b010-265cb1f0b182/1de7f42453a1db4a186d9845463c3b1a829dd71d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/651c63b7-e13e-43bf-b010-265cb1f0b182/2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:9e:f7:fc:89:62:f4:99:fe:44:76:00:08:60:9f:a5:46:6e:
         0e:74:68:cf:f1:77:f5:17:41:f6:e0:30:3d:14:33:3d:a9:01:
         32:50:e2:5b:37:8e:56:75:81:3d:99:ea:58:13:c4:86:ee:07:
         2f:8e:2c:14:fd:f1:bf:c3:31:6f:5e:c4:b5:41:73:70:cb:93:
         a7:94:f1:6a:c1:9a:08:19:34:99:31:c5:ef:e2:57:3b:1d:fa:
         10:43:19:23:f1:a6:7e:3e:83:32:c2:4f:11:ef:86:6e:3e:58:
         69:39:3c:2a:c9:80:0d:96:dc:83:87:68:b6:88:2a:29:c5:30:
         bf:d4:70:cc:3e:f1:98:a7:a0:65:04:7f:8a:76:98:6d:e6:2e:
         48:37:89:11:b5:a7:2b:6b:e5:8a:f3:c9:8c:f2:b4:ef:04:eb:
         0a:6d:57:40:38:43:e3:fc:3e:7e:44:43:8e:73:03:7c:4a:69:
         dd:86:fc:59:a6:89:f1:1d:c7:7c:91:99:b1:5d:68:04:2b:21:
         7f:24:9b:88:b1:76:e5:ad:7d:fe:53:7f:18:25:5b:b5:3d:95:
         f7:cc:f0:56:4a:71:86:87:37:38:ce:e0:fb:bd:76:e3:21:e0:
         31:6c:fd:0d:e0:c6:c0:b6:7e:db:57:67:4a:95:66:c3:27:04:
         43:ab:77:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:37 2023 by rpki-client on console-ams.rpki-client.org