Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/675f04db-6b1b-4906-b84d-2a1d5a3d6658/2aea1173054186022d71503ba7c77dd40e7d91be.roa
File:                     2aea1173054186022d71503ba7c77dd40e7d91be.roa (raw, json)
Hash identifier:          qpoQNfVoOonnl0DNbGCz/Fm+ntYyi2oZnSvpzVGkQp0=
Subject key identifier:   87:87:4E:4F:E4:1F:FA:7A:1F:A5:F9:78:30:38:0C:94:F5:04:32:75
Certificate issuer:       /CN=9e7510573b4e2f6f118e04dc9188c5f3ef257302
Certificate serial:       1547A4
Authority key identifier: 57:62:04:5B:C0:F0:4D:39:AF:ED:B9:CC:C2:E6:DE:8C:11:10:00:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e7510573b4e2f6f118e04dc9188c5f3ef257302.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/675f04db-6b1b-4906-b84d-2a1d5a3d6658/2aea1173054186022d71503ba7c77dd40e7d91be.roa
Signing time:             Fri 04 Feb 2022 15:15:27 +0000
ROA not before:           Thu 03 Feb 2022 03:00:00 +0000
ROA not after:            Sun 03 Feb 2030 03:00:00 +0000
asID:                     272056
IP address blocks:        192.141.167.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1394596 (0x1547a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e7510573b4e2f6f118e04dc9188c5f3ef257302
        Validity
            Not Before: Feb  3 03:00:00 2022 GMT
            Not After : Feb  3 03:00:00 2030 GMT
        Subject: CN=2aea1173054186022d71503ba7c77dd40e7d91be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3d:06:2c:79:c2:eb:95:54:1b:91:d0:de:79:
                    ae:1e:fc:07:54:54:6b:53:13:e8:1a:fb:bb:fe:4f:
                    06:70:74:2e:39:04:cd:46:21:de:24:a7:57:7c:76:
                    0c:f9:b5:2d:2b:c1:2d:60:90:a4:e0:d4:f0:3b:e6:
                    ea:d1:22:10:dd:9f:10:74:99:85:b7:46:e0:4b:bf:
                    7e:c0:79:4d:4d:cd:60:54:84:ed:c6:a2:37:01:d5:
                    29:df:f0:92:b7:a9:a3:25:e5:ca:c8:2e:98:33:33:
                    27:55:2b:0a:bc:d1:61:13:da:82:b1:91:ad:0a:d2:
                    a9:67:a5:83:85:25:e4:f7:f2:9e:57:31:b1:e8:43:
                    79:37:3e:97:64:5f:26:37:d5:35:7c:3e:15:a4:ff:
                    dd:7f:f2:6f:76:7f:b9:dc:7d:0e:3b:af:a8:5d:70:
                    61:04:92:7a:f3:4f:0d:66:79:4f:1d:4f:90:fb:5e:
                    4f:45:72:dc:e8:07:a7:ed:45:05:fe:af:0a:bc:ad:
                    a2:75:97:c1:e4:f3:6b:ad:06:60:74:04:90:a6:ea:
                    25:cb:75:ee:23:25:b5:ea:66:7b:1f:d9:82:42:da:
                    85:cf:93:fa:19:ca:68:43:b9:f5:a9:0d:29:06:be:
                    75:b3:23:c1:3a:04:a9:2f:42:31:94:50:75:86:23:
                    5b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:87:4E:4F:E4:1F:FA:7A:1F:A5:F9:78:30:38:0C:94:F5:04:32:75
            X509v3 Authority Key Identifier:
                keyid:57:62:04:5B:C0:F0:4D:39:AF:ED:B9:CC:C2:E6:DE:8C:11:10:00:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e7510573b4e2f6f118e04dc9188c5f3ef257302.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/675f04db-6b1b-4906-b84d-2a1d5a3d6658/2aea1173054186022d71503ba7c77dd40e7d91be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/675f04db-6b1b-4906-b84d-2a1d5a3d6658/9e7510573b4e2f6f118e04dc9188c5f3ef257302.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:9f:47:da:0a:7c:bb:d2:75:32:13:48:4d:9c:e7:0a:ff:d0:
         d0:e0:bf:08:65:7f:ad:1f:07:38:66:9e:d4:17:75:c5:6a:cb:
         8c:d6:59:f4:2f:46:53:d7:a1:3a:98:ad:b4:c8:c7:87:29:12:
         7c:a8:f3:fa:00:b1:e0:be:01:44:97:bb:01:bc:65:ae:c6:95:
         32:83:4c:0f:f3:72:1f:26:35:71:ba:86:3e:23:b1:1c:bc:5d:
         3c:de:7c:75:40:aa:df:2c:e0:31:76:72:af:c1:54:a6:3c:c4:
         62:75:89:c9:b4:85:92:09:a3:02:a0:dd:b8:21:9b:98:53:c4:
         29:e9:7e:ea:45:c7:21:ac:9e:96:e2:1f:52:27:6d:19:40:40:
         10:dc:d2:38:9d:e2:bd:7e:20:a1:a8:b1:c0:31:cb:c0:99:1a:
         78:4f:12:f5:f4:ca:00:67:27:44:d8:61:dd:24:20:f8:52:63:
         12:de:00:d5:26:e1:ee:36:38:4c:7d:1c:80:08:a3:5d:97:98:
         9a:bb:b1:f1:2f:11:b5:9f:31:f8:20:32:97:b1:c0:ba:8d:6e:
         00:7c:e5:4a:ed:22:1c:65:eb:67:30:69:38:27:70:98:5e:03:
         2a:9e:95:9b:e7:09:d7:b3:a8:76:58:54:d6:88:01:2f:22:b6:
         17:b0:1d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-ams.rpki-client.org