Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/1e1df7f9aeb18b4f604ab63bc0b591501621af71.roa
File:                     1e1df7f9aeb18b4f604ab63bc0b591501621af71.roa (raw, json)
Hash identifier:          1QLtjY7efZjpbSoOEPKBRFCYMwB/LDYRQs7ymBTOjYA=
Subject key identifier:   EA:C4:76:FE:CD:05:C2:CA:E3:C6:57:BD:9E:C4:AE:DF:7F:26:62:AB
Certificate issuer:       /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial:       0D1BAA
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/1e1df7f9aeb18b4f604ab63bc0b591501621af71.roa
Signing time:             Wed 24 Mar 2021 14:29:20 +0000
ROA not before:           Wed 24 Mar 2021 14:29:18 +0000
ROA not after:            Tue 24 Mar 2026 14:29:18 +0000
asID:                     61521
IP address blocks:        138.204.250.0/24 maxlen: 24
                          201.182.130.0/24 maxlen: 24
                          2001:13c7:601c::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 859050 (0xd1baa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
        Validity
            Not Before: Mar 24 14:29:18 2021 GMT
            Not After : Mar 24 14:29:18 2026 GMT
        Subject: CN=1e1df7f9aeb18b4f604ab63bc0b591501621af71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2f:04:82:06:8b:e3:01:90:40:ca:03:e4:3e:
                    76:aa:99:3e:1f:93:2a:5b:c9:5c:0a:12:0a:65:5c:
                    5a:f3:7c:60:09:5d:a0:85:7e:22:cb:bf:8d:76:fd:
                    b2:2c:6b:72:35:57:f4:61:28:d0:5f:c5:1b:29:8f:
                    9c:f2:13:bc:01:34:ae:82:87:b4:92:e5:46:06:cf:
                    7f:17:92:84:dc:91:19:15:7f:eb:45:a1:a7:ce:be:
                    75:c6:6a:41:e7:33:9b:b1:22:59:9f:14:91:ab:d0:
                    db:39:e3:66:af:f6:0b:4e:6a:73:1f:36:c0:c0:87:
                    90:8d:94:17:cb:bc:c3:8f:0c:c7:48:8f:1f:05:5e:
                    55:39:f4:10:85:23:d7:ec:dd:25:da:1f:25:41:0d:
                    93:d0:5a:94:e4:a9:c4:93:bf:33:16:9c:26:3d:41:
                    e6:b9:07:6c:56:3b:0f:e9:37:6d:55:b9:89:ca:14:
                    d7:70:b8:f1:73:7b:84:85:dc:4c:31:52:af:91:e8:
                    97:05:29:9f:73:f0:86:75:a4:ab:ce:d7:e6:95:67:
                    3b:79:92:5b:b3:71:a4:b3:4f:76:51:4d:e7:f1:9b:
                    2a:86:88:4d:48:75:2d:8c:1c:69:2a:da:52:5d:51:
                    f3:72:18:6e:d3:2f:d4:3e:6c:0c:89:11:07:09:45:
                    2b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C4:76:FE:CD:05:C2:CA:E3:C6:57:BD:9E:C4:AE:DF:7F:26:62:AB
            X509v3 Authority Key Identifier:
                keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/1e1df7f9aeb18b4f604ab63bc0b591501621af71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.250.0/24
                  201.182.130.0/24
                IPv6:
                  2001:13c7:601c::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:e7:dc:8a:cf:8e:a1:f0:27:9c:08:95:f6:39:6d:c7:2c:85:
         7b:ae:2e:43:14:89:21:16:94:59:bf:3b:a9:57:81:f2:62:b5:
         98:6c:f8:d9:07:b9:2e:2b:a9:c1:7b:b2:4d:7b:28:d3:b8:66:
         a3:df:49:98:72:5e:b2:e5:8a:b9:bb:82:64:64:c4:d0:fa:42:
         36:6c:50:17:18:82:2b:bc:bf:86:86:65:f8:3b:9c:20:ec:f3:
         8f:47:e7:38:71:54:d5:e9:7a:2b:e4:2b:26:70:1a:d8:4a:d3:
         82:ec:ab:2a:96:57:5d:fd:bb:42:f5:22:de:7b:b7:21:62:a0:
         f8:25:97:c4:97:69:61:73:d3:bb:0f:0f:52:ef:3b:51:47:5a:
         42:33:cc:de:e7:b4:cd:8a:b7:83:30:c9:37:aa:72:92:67:cf:
         21:ff:3e:cb:07:ee:3f:a7:fe:72:88:48:8a:19:13:1a:3b:04:
         00:7a:cd:8c:1a:c6:ca:c9:56:ed:14:2d:04:1b:9f:d9:50:ae:
         ef:ab:8d:f6:d9:85:7e:07:74:9e:b6:7c:da:16:da:72:9b:3b:
         5f:90:53:86:2b:c2:c5:d1:7d:72:1e:57:45:01:b4:41:6a:9b:
         11:2b:40:db:af:b9:2e:8c:6c:c1:8f:e4:fb:ad:35:ca:7b:4d:
         52:dd:80:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 30 12:36:31 2023 by rpki-client on console-ams.rpki-client.org