Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/ee1b0d5183ff43b6f541a33e62074a8efa3d37a3.roa
File:                     ee1b0d5183ff43b6f541a33e62074a8efa3d37a3.roa (raw, json)
Hash identifier:          B/Ye6qOG0hgfy8nviGDJCjgK1z61K4B2Kh/MimcKYaM=
Subject key identifier:   5C:4A:02:6F:6D:47:06:47:27:97:F6:E0:55:45:53:E1:9C:82:E1:01
Certificate issuer:       /CN=30415e525ae2a6911d8229a69de6df7b5716b468
Certificate serial:       133947
Authority key identifier: AF:60:BD:49:A3:A8:C1:3E:E3:F8:AC:3C:DE:F7:D3:F4:87:71:B1:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30415e525ae2a6911d8229a69de6df7b5716b468.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/ee1b0d5183ff43b6f541a33e62074a8efa3d37a3.roa
Signing time:             Fri 15 Oct 2021 02:02:20 +0000
ROA not before:           Thu 14 Oct 2021 03:00:00 +0000
ROA not after:            Sat 14 Oct 2023 03:00:00 +0000
asID:                     264668
IP address blocks:        128.201.163.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1259847 (0x133947)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30415e525ae2a6911d8229a69de6df7b5716b468
        Validity
            Not Before: Oct 14 03:00:00 2021 GMT
            Not After : Oct 14 03:00:00 2023 GMT
        Subject: CN=ee1b0d5183ff43b6f541a33e62074a8efa3d37a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:31:3a:32:9e:c2:da:04:3c:b6:c0:c7:87:a3:
                    67:6d:3b:bc:ec:c1:38:8d:10:1d:69:2f:f8:a6:58:
                    70:3f:d8:20:d0:4c:9a:b9:73:66:8d:e7:da:cb:4f:
                    a9:df:4d:a3:03:33:93:0d:d1:48:08:95:c0:65:2e:
                    f7:60:f5:0b:61:7b:c0:01:a6:ed:86:34:c0:18:5f:
                    89:db:ff:e2:81:2c:0f:a2:3d:ac:de:07:eb:a6:13:
                    5d:a6:39:0f:ac:bb:e6:10:cb:56:d5:12:55:c1:61:
                    85:b8:13:57:0d:81:c1:12:0c:4c:ec:38:74:86:25:
                    44:47:e4:17:04:01:7c:d5:af:de:78:99:f3:05:39:
                    98:60:ad:74:22:c5:71:b2:65:a6:2d:55:fe:b1:ae:
                    4a:4d:77:d9:9f:38:8e:48:9c:11:b5:92:1f:fc:5e:
                    b2:60:c6:9a:df:0e:97:e9:49:e5:62:a3:3b:13:72:
                    c0:e1:dc:c0:7a:4b:24:4f:70:b6:9f:73:a2:ef:1a:
                    bd:4a:d9:7c:c3:80:bc:5d:52:b8:0a:dc:22:9a:5a:
                    77:27:b3:fa:3b:b3:95:4d:7b:e7:ea:8d:c3:41:dc:
                    0a:ff:77:a6:c1:7b:f6:63:bd:de:bc:46:b3:57:4a:
                    6d:06:60:c0:48:3b:59:b2:4d:6d:67:b9:0f:ea:b1:
                    b2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:4A:02:6F:6D:47:06:47:27:97:F6:E0:55:45:53:E1:9C:82:E1:01
            X509v3 Authority Key Identifier:
                keyid:AF:60:BD:49:A3:A8:C1:3E:E3:F8:AC:3C:DE:F7:D3:F4:87:71:B1:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30415e525ae2a6911d8229a69de6df7b5716b468.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/ee1b0d5183ff43b6f541a33e62074a8efa3d37a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/30415e525ae2a6911d8229a69de6df7b5716b468.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:a5:92:cd:6d:6b:2c:c0:9f:48:13:b0:47:a5:c7:80:88:70:
         52:65:39:1e:f0:11:43:47:3e:f6:c7:54:6f:23:ef:5c:96:06:
         3e:95:a3:8e:51:73:84:4e:64:86:73:89:79:b1:b5:a5:cd:6d:
         8c:f9:db:f8:75:2a:bf:80:02:cc:d2:2f:fb:df:4a:1a:f4:f2:
         4c:08:74:f1:13:9a:72:10:b4:b5:96:af:bb:26:83:97:71:03:
         b8:48:be:67:81:b3:ab:04:15:c6:13:8a:55:25:08:7d:52:3f:
         a1:8f:7c:1c:2d:d0:e3:c1:73:14:39:2b:c3:b3:2f:16:5b:5a:
         1c:df:c6:61:cc:77:3f:27:27:d7:2b:f2:42:93:be:d0:32:6a:
         1e:ca:f0:6d:a0:12:7c:a2:5a:0d:c5:4f:22:be:30:aa:22:15:
         a6:fa:53:ae:f5:74:33:5a:4c:ef:11:a7:e0:14:b8:74:46:49:
         b7:f4:6e:b0:a5:ec:ab:38:1e:b3:a3:54:93:98:8e:6f:c6:29:
         fc:8f:c6:13:f8:8e:47:6c:a5:69:47:cb:fb:66:32:de:e2:1c:
         bb:48:ee:37:7d:5d:d4:2b:8e:99:b0:3e:3d:33:a3:85:7b:26:
         a2:cf:c7:06:92:94:a5:3d:73:c7:85:dc:8a:8f:c8:f3:c8:65:
         58:ff:cb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 13 09:01:43 2023 by rpki-client on console-ams.rpki-client.org