Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/33ef103c8a7916e884eaef3e027fd912a74772ff.roa
File:                     33ef103c8a7916e884eaef3e027fd912a74772ff.roa (raw, json)
Hash identifier:          5rtc3RIexH0rOhjqOv8JV6ykGdj1Uxffv83HG8OEXMo=
Subject key identifier:   DB:AF:17:EC:8E:88:A8:7E:26:0E:AB:5E:6A:F3:EC:B4:80:F8:DF:5D
Certificate issuer:       /CN=3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1
Certificate serial:       0D24EB
Authority key identifier: AC:7D:7D:7E:A0:9E:88:51:25:89:0B:4F:D1:63:23:CE:9F:36:81:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/33ef103c8a7916e884eaef3e027fd912a74772ff.roa
Signing time:             Wed 24 Mar 2021 14:43:09 +0000
ROA not before:           Wed 24 Mar 2021 14:43:08 +0000
ROA not after:            Tue 24 Mar 2026 14:43:08 +0000
asID:                     32098
IP address blocks:        201.174.235.0/24 maxlen: 24
                          201.174.236.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 861419 (0xd24eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1
        Validity
            Not Before: Mar 24 14:43:08 2021 GMT
            Not After : Mar 24 14:43:08 2026 GMT
        Subject: CN=33ef103c8a7916e884eaef3e027fd912a74772ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:82:85:df:e1:4c:d7:77:24:92:45:7b:df:b6:
                    d8:48:5f:e4:87:90:5d:ba:8c:46:78:f7:fa:dc:50:
                    ce:05:8e:d7:72:ca:41:aa:5b:cc:20:7b:58:e7:2a:
                    07:31:aa:7b:6f:92:1b:3c:a5:fb:a2:1b:7a:b3:ce:
                    49:ea:96:5d:e1:e5:2a:91:6f:ab:90:43:a4:10:a0:
                    aa:8c:96:86:54:fb:a8:00:68:ce:b6:c4:41:32:db:
                    bf:aa:88:44:7d:bf:3f:b0:4b:2d:f8:80:ed:e4:fd:
                    6c:78:ba:3e:88:e5:ef:d1:0d:b4:d7:7d:92:3f:67:
                    7f:86:18:b8:d4:07:ac:df:b4:c9:fc:0b:ad:fc:2d:
                    e8:be:35:fc:26:2a:c2:27:7e:54:17:72:f6:1a:39:
                    ed:9b:c8:86:fd:ca:a4:70:e4:62:da:58:63:1f:c0:
                    2c:1c:70:98:2e:81:6a:6f:24:41:c3:06:43:c8:ad:
                    2e:f9:4a:b4:ca:89:ee:31:60:93:3a:75:d1:13:b1:
                    d8:00:ca:8b:90:ba:51:55:30:d6:37:b6:a3:4d:1d:
                    be:23:8c:76:37:c8:01:ca:39:bc:61:0c:35:28:3f:
                    0b:b6:85:b4:3a:66:59:23:c0:99:b8:81:a3:76:02:
                    9c:5d:37:69:28:9f:77:87:3f:7f:6d:35:4b:8b:4d:
                    aa:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:AF:17:EC:8E:88:A8:7E:26:0E:AB:5E:6A:F3:EC:B4:80:F8:DF:5D
            X509v3 Authority Key Identifier:
                keyid:AC:7D:7D:7E:A0:9E:88:51:25:89:0B:4F:D1:63:23:CE:9F:36:81:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/33ef103c8a7916e884eaef3e027fd912a74772ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.235.0-201.174.236.255

    Signature Algorithm: sha256WithRSAEncryption
         1c:00:3e:cc:6a:bd:93:b0:ae:3c:44:e3:e8:dd:db:b9:a4:3a:
         2b:84:51:a8:ca:23:63:79:9e:87:6f:81:0f:3e:b1:cf:dc:9f:
         00:b6:1f:95:dd:5a:17:a6:bf:ab:be:15:27:f3:6e:45:d5:65:
         80:94:5c:88:b7:70:dc:0a:6f:8d:42:72:d3:fe:7b:28:23:84:
         bc:05:b7:bf:35:96:a4:a0:11:ef:5c:44:19:c0:32:d5:fe:79:
         d5:2a:82:eb:75:3f:7a:76:88:db:67:0f:85:67:40:e7:db:be:
         e2:7f:43:42:f6:f9:02:76:0b:e1:d8:a0:14:0b:4b:9e:4f:f3:
         d4:67:90:0e:80:70:ad:4e:46:a5:d5:07:73:d8:db:7f:28:58:
         c8:a9:a6:fe:87:68:5f:31:0d:c1:52:af:de:ae:65:df:7a:d1:
         c6:2c:85:d8:88:6f:82:b4:f8:5a:d4:0c:66:04:61:1f:bb:3c:
         c7:ca:bc:ef:26:7b:8c:0b:20:c9:3f:c0:ed:7d:dd:a1:d5:e5:
         ab:35:67:1b:a8:37:c6:6c:fb:fc:fb:48:88:93:b9:5e:df:95:
         4d:26:69:59:4d:73:b2:50:44:ee:da:d1:c0:54:f3:9c:66:ae:
         f6:54:fa:4e:14:08:95:3e:ff:c1:d1:42:5b:03:77:17:28:1c:
         44:8d:5a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:24 2023 by rpki-client on console-fra.rpki-client.org