Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/66dc7837-2e74-4915-9fc6-51e02c992608/f4095d57f3892dbf902b0eca3bab5e4f583e27fc.roa
File:                     f4095d57f3892dbf902b0eca3bab5e4f583e27fc.roa (raw, json)
Hash identifier:          o5Ix82xKQTC24Zdx5b37M2UWTVLg7LbnNVgc7GCPS+0=
Subject key identifier:   59:91:FB:CE:D1:3B:68:C0:5F:0F:D0:A6:B8:94:7E:50:2A:14:36:45
Certificate issuer:       /CN=2a088b7596a53e352343b4d6a453d313ba76ec6a
Certificate serial:       0D7C6E
Authority key identifier: D3:A3:5E:AA:1B:68:B2:82:FC:F1:FD:CD:E2:CC:B2:D9:1B:27:2E:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a088b7596a53e352343b4d6a453d313ba76ec6a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/66dc7837-2e74-4915-9fc6-51e02c992608/f4095d57f3892dbf902b0eca3bab5e4f583e27fc.roa
Signing time:             Wed 24 Mar 2021 14:32:49 +0000
ROA not before:           Wed 24 Mar 2021 14:32:49 +0000
ROA not after:            Tue 24 Mar 2026 14:32:49 +0000
asID:                     52465
IP address blocks:        190.112.216.0/22 maxlen: 24
                          179.60.216.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 883822 (0xd7c6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a088b7596a53e352343b4d6a453d313ba76ec6a
        Validity
            Not Before: Mar 24 14:32:49 2021 GMT
            Not After : Mar 24 14:32:49 2026 GMT
        Subject: CN=f4095d57f3892dbf902b0eca3bab5e4f583e27fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a0:77:4b:65:d7:01:9b:1e:4b:0a:59:57:a7:
                    47:e9:d8:a0:25:de:75:ff:de:b8:68:a2:11:bf:56:
                    9e:ad:05:3f:2d:7f:70:9f:47:0f:6a:b6:6b:bf:dd:
                    e6:56:37:ca:f6:ce:73:6a:0c:d8:3f:e2:2c:21:a2:
                    61:ce:68:ef:4c:b2:c8:f8:f1:41:24:9d:26:cb:8e:
                    5e:a7:fa:2c:0c:0f:98:94:73:e1:0b:c8:2c:dc:f6:
                    bb:52:88:10:16:f8:08:47:64:55:a7:65:de:0e:dd:
                    ee:95:70:33:ce:92:b3:41:ce:7a:db:9e:8f:00:b8:
                    7e:d0:52:1a:26:b2:21:16:a2:4d:e1:d4:8a:b6:b6:
                    48:bd:b5:24:44:33:57:3c:48:a6:b1:81:70:81:7e:
                    46:1e:b0:38:4b:22:5c:3f:37:e0:88:94:28:bf:91:
                    c4:57:fc:9f:97:da:af:f2:40:13:72:c5:35:79:74:
                    d8:a2:95:7a:21:21:7e:fd:ce:dd:11:4c:a1:11:37:
                    50:a7:d2:33:62:17:56:e5:1c:86:da:6b:97:ca:5d:
                    11:7b:ef:3b:d6:f8:17:48:13:b3:55:f3:40:fc:6e:
                    3c:f3:d3:7c:99:51:46:e5:ef:0b:43:2c:75:7f:57:
                    e6:7f:89:8f:fe:75:1d:4f:ba:47:01:2e:76:e3:7f:
                    8c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:91:FB:CE:D1:3B:68:C0:5F:0F:D0:A6:B8:94:7E:50:2A:14:36:45
            X509v3 Authority Key Identifier:
                keyid:D3:A3:5E:AA:1B:68:B2:82:FC:F1:FD:CD:E2:CC:B2:D9:1B:27:2E:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a088b7596a53e352343b4d6a453d313ba76ec6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/66dc7837-2e74-4915-9fc6-51e02c992608/f4095d57f3892dbf902b0eca3bab5e4f583e27fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/66dc7837-2e74-4915-9fc6-51e02c992608/2a088b7596a53e352343b4d6a453d313ba76ec6a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.216.0/22
                  190.112.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:38:ec:b0:08:62:90:04:63:dc:1d:4a:da:76:71:f6:fb:d5:
         49:9a:89:65:0d:3d:04:f0:7b:be:ed:89:dc:40:23:0c:9a:51:
         75:fe:29:88:a1:36:39:09:1a:bb:6d:e9:80:81:07:b7:ba:8a:
         d8:37:d6:a6:24:3a:00:d1:67:da:98:fb:eb:40:af:e2:c9:34:
         03:5f:08:e4:c9:78:58:86:9a:4e:0a:8e:6f:23:ec:cf:f7:37:
         02:2e:cf:85:1f:fb:76:39:10:ae:8b:bd:eb:7a:a8:68:8a:b8:
         9b:69:43:bf:9d:d9:d0:8d:51:ea:66:43:46:da:bd:a1:2a:15:
         5a:76:0d:12:d2:3e:79:4a:00:2d:ca:24:5f:ac:7b:5f:e8:8c:
         ae:c0:34:31:de:e8:3e:6e:0f:ad:e2:49:47:71:1a:b5:90:ee:
         16:59:5f:b7:26:0c:e9:e0:c0:94:bf:65:55:d4:a1:46:0b:7c:
         ba:63:12:9d:4e:49:ba:c2:80:0a:d4:c8:44:af:75:c6:d3:3e:
         4b:da:a1:23:a1:c5:28:dd:3b:de:5f:2b:17:e4:23:97:5f:64:
         9e:3b:1a:a5:32:3b:50:c4:93:c2:5e:64:89:ab:62:24:54:00:
         ad:d2:c0:06:76:a4:3e:7d:ee:02:13:b2:61:26:c3:c6:7a:9f:
         6b:1a:2f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:22 2023 by rpki-client on console-fra.rpki-client.org