Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/664b5aef-b1a8-4245-aa97-0a002964e65c/e9b6e4f5c6d8fcbc833c7897a446784ceaf95f9a.roa
File:                     e9b6e4f5c6d8fcbc833c7897a446784ceaf95f9a.roa (raw, json)
Hash identifier:          exmx5CU907yfLjZlBYgRkbxyL+paATl2y4UkXU44XpI=
Subject key identifier:   F9:70:57:07:48:57:F0:AA:91:BF:EC:19:C7:44:CE:D5:52:DC:41:03
Certificate issuer:       /CN=4245076a2cc4607485f913342504c58cdd14441f
Certificate serial:       0CBDF8
Authority key identifier: AD:9F:16:5E:4D:D8:00:B7:41:B8:04:04:F0:38:D6:DE:24:E5:55:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4245076a2cc4607485f913342504c58cdd14441f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/664b5aef-b1a8-4245-aa97-0a002964e65c/e9b6e4f5c6d8fcbc833c7897a446784ceaf95f9a.roa
Signing time:             Wed 24 Mar 2021 14:34:22 +0000
ROA not before:           Wed 24 Mar 2021 14:34:22 +0000
ROA not after:            Tue 24 Mar 2026 14:34:22 +0000
asID:                     61503
IP address blocks:        138.36.252.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 835064 (0xcbdf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4245076a2cc4607485f913342504c58cdd14441f
        Validity
            Not Before: Mar 24 14:34:22 2021 GMT
            Not After : Mar 24 14:34:22 2026 GMT
        Subject: CN=e9b6e4f5c6d8fcbc833c7897a446784ceaf95f9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:db:59:ef:5c:e1:b0:05:88:52:46:a7:c3:f0:
                    51:5c:c2:ce:5c:a0:60:9b:a4:f2:3f:4c:17:61:46:
                    1b:d9:ac:ec:08:c2:52:5c:1b:14:bf:a0:26:1c:0e:
                    fb:27:2d:aa:d5:46:9b:24:05:63:f3:cd:5c:df:88:
                    a7:c2:bd:a8:e3:38:49:51:c1:64:1f:f0:e3:6a:ca:
                    c5:7a:66:c3:f7:a9:a0:59:2d:4b:ee:77:e9:96:5c:
                    48:1b:5e:26:5b:c2:91:58:09:37:3a:a7:75:c7:78:
                    a3:2c:fb:e1:9b:8b:02:18:d7:50:9b:53:da:bb:d5:
                    17:ac:58:10:5f:9b:9f:c4:42:7c:1c:03:49:8d:29:
                    27:34:8e:4d:4e:ac:d9:4c:57:c0:45:c9:0d:1c:02:
                    53:84:21:d0:cd:b2:e2:70:c1:d8:96:e8:46:e8:f4:
                    e7:48:d4:79:2e:b7:83:63:e7:83:61:cb:34:fd:bf:
                    97:dd:eb:db:1b:d5:4a:85:b4:d0:79:5d:3e:e2:7c:
                    89:ec:1f:b9:ea:3d:c4:03:2c:8e:02:5a:a8:69:58:
                    57:16:ab:32:43:dd:ab:3e:00:a9:13:47:9e:77:7a:
                    3c:b5:53:59:06:18:89:c1:e5:64:ca:62:04:ec:60:
                    5b:07:9f:21:50:5c:4f:43:56:f1:21:84:d3:0a:fb:
                    6c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:70:57:07:48:57:F0:AA:91:BF:EC:19:C7:44:CE:D5:52:DC:41:03
            X509v3 Authority Key Identifier:
                keyid:AD:9F:16:5E:4D:D8:00:B7:41:B8:04:04:F0:38:D6:DE:24:E5:55:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4245076a2cc4607485f913342504c58cdd14441f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/664b5aef-b1a8-4245-aa97-0a002964e65c/e9b6e4f5c6d8fcbc833c7897a446784ceaf95f9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/664b5aef-b1a8-4245-aa97-0a002964e65c/4245076a2cc4607485f913342504c58cdd14441f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:1c:f5:2a:7e:44:78:ef:6c:3e:44:d8:cd:e9:8c:9f:15:9a:
         f3:da:55:22:ef:ec:63:41:2e:80:b1:cf:d9:9b:c1:35:9c:27:
         03:43:92:85:f4:88:6d:8e:2b:19:7f:e3:ce:c2:67:e5:ec:33:
         b0:51:13:66:c2:2b:ea:89:1e:92:51:22:61:8c:a8:ed:ba:d2:
         93:db:8a:40:59:ba:48:de:c7:50:eb:e5:02:75:16:9c:5c:42:
         aa:08:82:94:2f:60:7e:07:be:9a:fe:f4:fa:84:b0:18:56:a2:
         36:63:be:24:20:97:24:a1:f5:da:12:7f:6c:1f:4f:25:d7:5a:
         66:3a:b9:ac:c9:2e:73:1d:89:a9:27:02:de:97:81:53:bd:ae:
         b2:df:c6:7b:13:35:8a:aa:7e:3a:bb:9e:41:25:2c:fa:b1:3f:
         3f:65:1e:81:0a:9d:cd:e3:e0:82:92:88:4b:0e:18:08:50:fc:
         ae:26:27:42:68:64:89:c4:2d:84:f3:73:72:1b:b4:b5:cd:59:
         70:7a:18:b2:ab:4d:05:10:51:eb:84:41:ba:10:f3:26:e3:96:
         94:ec:18:8e:26:0e:74:0e:85:56:c6:5a:d6:fd:91:ce:f4:ac:
         ec:02:75:62:33:eb:fc:cd:b4:6f:c6:b2:45:24:3b:f1:bc:e8:
         10:02:6f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:22 2023 by rpki-client on console-fra.rpki-client.org