Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/66defe58-851b-414c-a41a-db67e8459ca8/19fee404859bb4a5484062062a6f8c6f785be642.roa
File:                     19fee404859bb4a5484062062a6f8c6f785be642.roa (raw, json)
Hash identifier:          lSCyX8dfw9nIDl8EW+9wyEndBd/OpeFB+l+N4eLOHss=
Subject key identifier:   B9:E1:CF:8E:94:7B:39:CC:E6:9C:10:D3:77:55:D0:E2:63:02:11:30
Certificate issuer:       /CN=f0347c0fec9316885a81e931cbc3693f0c24169f
Certificate serial:       0292
Authority key identifier: 05:F2:81:08:DF:C8:CD:9D:FA:B4:6B:2C:52:4C:AA:F6:DF:C2:9F:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f0347c0fec9316885a81e931cbc3693f0c24169f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/66defe58-851b-414c-a41a-db67e8459ca8/19fee404859bb4a5484062062a6f8c6f785be642.roa
Signing time:             Fri 17 Sep 2021 22:03:43 +0000
ROA not before:           Fri 17 Sep 2021 03:00:00 +0000
ROA not after:            Sun 17 Sep 2023 03:00:00 +0000
asID:                     264856
IP address blocks:        179.48.252.0/22 maxlen: 24
                          190.14.144.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 658 (0x292)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0347c0fec9316885a81e931cbc3693f0c24169f
        Validity
            Not Before: Sep 17 03:00:00 2021 GMT
            Not After : Sep 17 03:00:00 2023 GMT
        Subject: CN=19fee404859bb4a5484062062a6f8c6f785be642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c6:88:fb:a6:a3:97:43:dc:ab:3a:4b:3c:4e:
                    87:75:27:c8:48:37:f7:03:89:41:bb:60:9f:24:9e:
                    44:72:a3:ed:5b:2a:6f:04:59:db:73:58:76:7b:df:
                    c6:2e:e6:cd:e6:8b:0b:41:a5:1c:3c:c6:d9:44:c1:
                    a0:ec:31:ee:3f:68:52:fb:f7:65:71:08:0a:74:01:
                    11:7e:81:ba:de:a4:3d:8c:49:65:fd:b4:5c:d1:33:
                    67:27:2b:b3:94:3e:62:f7:10:dd:2b:22:7c:89:ee:
                    18:7d:50:01:13:ed:d4:1b:d3:18:fa:e5:5c:f3:5d:
                    a4:6f:cf:5c:45:7b:8c:87:9f:2b:50:05:e1:90:6c:
                    28:7b:bd:d5:aa:38:63:80:3f:4c:83:ef:88:32:7e:
                    16:9b:b9:e5:eb:c0:54:6e:49:d2:97:6e:9c:7b:05:
                    70:5d:93:8b:42:87:43:18:42:60:d4:5f:64:8e:f0:
                    3e:1a:76:6f:0c:ec:55:4d:94:e6:d6:8f:eb:32:99:
                    ac:fa:3f:08:51:50:35:45:b6:93:1b:61:84:1e:d4:
                    35:bf:58:48:76:2c:76:5b:b1:b6:99:4c:44:80:37:
                    7b:ea:e3:74:3e:5e:15:6e:1c:25:d5:dd:5d:dd:de:
                    44:26:71:bb:e7:c4:06:8b:bc:83:38:75:7a:af:88:
                    02:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E1:CF:8E:94:7B:39:CC:E6:9C:10:D3:77:55:D0:E2:63:02:11:30
            X509v3 Authority Key Identifier:
                keyid:05:F2:81:08:DF:C8:CD:9D:FA:B4:6B:2C:52:4C:AA:F6:DF:C2:9F:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f0347c0fec9316885a81e931cbc3693f0c24169f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/66defe58-851b-414c-a41a-db67e8459ca8/19fee404859bb4a5484062062a6f8c6f785be642.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/66defe58-851b-414c-a41a-db67e8459ca8/f0347c0fec9316885a81e931cbc3693f0c24169f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.252.0/22
                  190.14.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         28:ff:0a:f2:5e:76:22:6d:b3:58:aa:84:0a:e1:b4:19:02:f3:
         1a:99:ae:f5:1b:05:ac:fe:73:7b:d4:78:af:4a:7a:8c:e7:35:
         af:4f:00:1f:56:34:8a:9c:f3:b8:15:23:17:07:10:d8:4b:a0:
         37:a7:51:f1:be:ba:95:94:a2:ae:09:f3:f9:bd:c0:30:b6:7c:
         c4:3e:cb:0b:eb:81:23:e3:62:d5:f2:39:73:26:d0:d3:98:94:
         93:d9:7c:fc:de:0f:40:31:81:c1:e0:b0:12:48:da:c6:99:20:
         10:bd:f1:59:d5:1a:cd:68:18:cd:7a:b1:43:34:e1:52:3c:77:
         c8:aa:97:77:ce:32:2b:69:be:a8:6b:d0:57:2c:5b:4a:39:09:
         b3:f9:1d:69:06:7a:27:5e:c4:df:28:b9:01:95:bc:83:91:55:
         0e:2a:5f:dd:89:5c:e3:e8:c0:15:c6:6b:61:19:75:33:84:cc:
         99:33:fc:32:4a:7d:bd:65:83:7c:26:dd:b7:c8:eb:ee:fe:c7:
         4e:4a:c7:b3:15:86:42:03:ae:0c:13:ad:9e:53:7e:18:27:5e:
         3f:c8:05:4b:d7:ee:6a:29:63:4d:6b:c4:b4:39:46:cd:a1:b9:
         1a:e7:cd:75:ca:c7:5d:53:53:75:83:26:77:cf:da:e8:39:a1:
         eb:e3:1c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:22 2023 by rpki-client on console-fra.rpki-client.org