Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/f300089b2279cdbaf7b494eec5b5962c70c15a97.roa
File:                     f300089b2279cdbaf7b494eec5b5962c70c15a97.roa (raw, json)
Hash identifier:          fxv4wc8xwN18jTsWMkAfd4fNdlmPXtXJfXnQAcWbPd4=
Subject key identifier:   01:D9:F0:C9:1C:ED:2C:10:7D:99:34:43:45:FB:DA:91:C4:55:0B:5F
Certificate issuer:       /CN=3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1
Certificate serial:       0D39E4
Authority key identifier: AC:7D:7D:7E:A0:9E:88:51:25:89:0B:4F:D1:63:23:CE:9F:36:81:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/f300089b2279cdbaf7b494eec5b5962c70c15a97.roa
Signing time:             Wed 24 Mar 2021 22:51:21 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     28509
IP address blocks:        201.174.207.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 866788 (0xd39e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=f300089b2279cdbaf7b494eec5b5962c70c15a97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ce:97:9c:51:eb:ad:7d:ab:be:c9:2a:a2:20:
                    5e:c3:89:dd:45:2f:66:64:aa:72:6e:d2:c0:a5:c5:
                    49:e0:2e:87:b5:67:33:f2:ca:94:c4:2c:5d:8c:be:
                    71:07:45:e1:a5:ea:0a:db:c4:0d:de:0e:9e:ca:d1:
                    3b:3d:4d:7c:79:22:f8:ca:24:df:78:56:40:12:59:
                    d5:6b:20:e7:bd:fe:50:99:66:e2:dd:1a:51:6a:da:
                    22:3f:e6:e4:62:67:33:99:29:cf:b5:69:98:b1:1b:
                    ce:90:aa:f4:d3:84:e3:31:99:ac:47:a4:f6:ed:22:
                    1a:ab:b5:ae:fd:17:ee:db:87:4b:ab:fa:3a:4d:6f:
                    3c:36:03:20:22:e6:07:6b:ea:1e:d3:c3:27:75:66:
                    c1:9d:06:3f:4a:3e:a5:f9:d8:c5:83:c5:29:f1:91:
                    26:96:c4:bb:07:ae:8a:a4:b7:b7:1d:6a:f8:3c:94:
                    d0:d7:54:7d:9d:e1:38:9e:19:f9:d8:93:4b:6a:6d:
                    c9:c4:25:27:30:30:e7:b0:0b:a9:b4:71:b9:c5:93:
                    d1:06:0b:6f:f2:51:fd:ec:ae:dc:3a:0e:2c:71:46:
                    b3:a3:ee:3e:58:4f:4c:74:6a:64:67:86:4e:29:b9:
                    cf:82:a4:c4:ae:b4:6b:43:18:d6:21:4a:e1:d4:be:
                    78:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D9:F0:C9:1C:ED:2C:10:7D:99:34:43:45:FB:DA:91:C4:55:0B:5F
            X509v3 Authority Key Identifier:
                keyid:AC:7D:7D:7E:A0:9E:88:51:25:89:0B:4F:D1:63:23:CE:9F:36:81:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/f300089b2279cdbaf7b494eec5b5962c70c15a97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:f7:74:f2:c8:9d:27:8a:75:ef:16:45:12:54:0e:93:b2:5d:
         9b:f6:7d:b9:2a:85:ce:f9:ac:a4:c8:8c:40:ca:7d:e9:cb:20:
         40:46:c2:d5:91:4e:36:d3:4f:e7:eb:f1:67:38:35:5c:0e:7a:
         a2:97:76:46:1d:a7:e0:97:a6:23:c9:49:00:75:bf:d7:00:08:
         5b:de:f6:40:c6:08:c5:bf:4a:c4:a3:ba:d2:27:a0:5c:aa:5f:
         6e:99:e0:eb:da:e4:35:65:a8:1b:ed:f9:5a:e7:86:20:c2:75:
         5f:84:76:c4:7c:f0:da:f5:56:1c:43:2c:d9:1b:c4:5a:8e:fd:
         5c:44:67:dd:3a:31:b7:0a:4b:68:54:98:07:62:fd:ad:07:51:
         86:94:0c:02:6d:87:b9:0c:9a:54:41:1e:69:0e:b6:52:b5:90:
         2b:3b:e9:33:af:3d:4a:5d:a6:56:7e:df:82:4d:b4:ef:55:2c:
         57:b9:67:38:89:86:f4:c8:c6:f0:f0:b6:55:84:4d:fa:3a:c9:
         0e:b3:c7:91:57:fb:ca:f1:56:30:e3:98:52:79:3f:c1:87:83:
         fe:5c:91:5f:05:b2:a6:76:72:c2:49:a5:66:17:43:65:38:b0:
         fe:f0:63:f4:4b:ad:7f:ef:a7:ba:1b:3d:00:80:c1:fe:8e:f1:
         9f:d9:1b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:39 2023 by rpki-client on console-ams.rpki-client.org