Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/651c63b7-e13e-43bf-b010-265cb1f0b182/d7216fd9d6a7c2ac6abefa48e04eed1d909bb517.roa
File:                     d7216fd9d6a7c2ac6abefa48e04eed1d909bb517.roa (raw, json)
Hash identifier:          Uzrk/wEd2JKCQ/fpG6n0R6O5XeOb+ALUbQtrkO6jKvc=
Subject key identifier:   34:4F:7C:37:61:8C:AE:CA:D8:32:B4:5A:E4:63:60:05:91:56:96:72
Certificate issuer:       /CN=2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82
Certificate serial:       0D109A
Authority key identifier: 92:B6:4A:50:EF:06:00:D0:23:FF:00:07:AC:5F:C0:FD:73:E1:A9:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/651c63b7-e13e-43bf-b010-265cb1f0b182/d7216fd9d6a7c2ac6abefa48e04eed1d909bb517.roa
Signing time:             Mon 09 May 2022 22:30:28 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     271837
IP address blocks:        179.63.20.0/22 maxlen: 31

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 856218 (0xd109a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=d7216fd9d6a7c2ac6abefa48e04eed1d909bb517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:31:13:20:4b:6c:82:df:5e:d5:dc:c8:03:fa:
                    a1:72:af:bf:7d:40:0f:7b:a6:09:7a:f9:6f:00:c9:
                    f1:0e:8b:52:69:a9:4b:12:10:1f:cb:8b:97:a4:90:
                    56:2e:73:3d:dd:2d:d1:06:be:3f:e6:23:87:02:c6:
                    92:67:ca:df:49:e8:fc:23:64:46:48:87:18:fd:31:
                    ec:ed:fc:ed:f7:2f:33:e5:96:08:b8:d6:5b:79:56:
                    dd:2e:09:71:d6:9f:1b:92:e9:0e:b6:25:75:d2:53:
                    5f:0f:d1:36:f3:8a:fa:3b:fa:46:15:a0:56:16:ad:
                    d4:45:f5:9f:2b:32:6c:4c:7e:98:96:c6:a2:12:ea:
                    68:0e:3e:0f:55:5a:dc:61:66:5a:cd:e4:2c:ad:25:
                    92:19:04:5d:0c:dc:ee:02:0d:2e:34:07:6b:6c:48:
                    d1:d8:da:4a:85:b7:ac:3d:24:ea:c2:29:18:48:05:
                    f3:51:64:47:44:f1:dc:e6:a2:2b:8e:24:b2:b0:76:
                    d6:c6:b0:38:d6:23:ca:e6:0c:3b:48:19:b0:41:5c:
                    7a:df:8c:75:80:33:b2:40:72:20:61:e2:ce:65:98:
                    44:d7:11:4d:96:6f:4d:12:37:57:33:9b:a3:15:9c:
                    f5:4b:c0:f2:48:6e:ce:38:40:97:37:4a:fa:c5:61:
                    88:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:4F:7C:37:61:8C:AE:CA:D8:32:B4:5A:E4:63:60:05:91:56:96:72
            X509v3 Authority Key Identifier:
                keyid:92:B6:4A:50:EF:06:00:D0:23:FF:00:07:AC:5F:C0:FD:73:E1:A9:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/651c63b7-e13e-43bf-b010-265cb1f0b182/d7216fd9d6a7c2ac6abefa48e04eed1d909bb517.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/651c63b7-e13e-43bf-b010-265cb1f0b182/2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:8e:61:70:90:59:39:49:6e:7c:0d:7b:32:9b:23:ee:7a:72:
         7d:31:2a:12:2f:78:b0:03:7a:d6:70:71:2e:b7:f8:21:68:eb:
         1e:14:06:4c:83:93:f3:82:3e:30:58:ca:1b:cf:03:0c:04:57:
         35:bf:61:46:71:3b:2c:61:8b:a5:39:49:89:97:fc:67:f6:3a:
         b8:4e:93:76:26:80:38:49:aa:61:5d:03:19:07:26:55:68:51:
         79:54:e8:7a:52:47:e1:96:dc:ef:44:30:91:16:82:66:fc:11:
         a2:1d:b4:f4:9c:e8:d6:a4:8d:ed:1e:a6:7f:05:71:a4:f8:dd:
         b9:15:89:72:30:b1:43:fd:d4:72:48:8f:11:54:30:a7:4a:c8:
         e6:f4:db:dc:fc:18:e0:90:3f:c6:c1:08:d5:46:1e:44:90:2f:
         b4:b5:64:c0:df:d8:b5:b2:66:76:dc:f7:72:54:e9:ce:bf:94:
         c1:b4:ac:43:ee:40:3a:7e:09:33:3d:4d:f3:7e:2c:c2:cc:71:
         c8:2d:1b:9b:22:33:e8:ec:42:98:9e:d6:ef:b4:37:48:f2:1a:
         23:da:11:60:c4:6e:18:7e:55:ba:54:4c:74:72:cc:b5:cf:1e:
         be:d8:bf:99:58:6a:32:57:32:69:a2:f4:55:65:10:32:86:47:
         d4:5a:bc:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:22 2023 by rpki-client on console-fra.rpki-client.org