Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/82cd28b0-e8d2-4807-96bc-c195baa5a4e0/3667a1acf6d0c031c4feb3bf79d5b2085fe3b845.roa
File:                     3667a1acf6d0c031c4feb3bf79d5b2085fe3b845.roa (raw, json)
Hash identifier:          CUas+AKysBfDkL3ixRacDcN/pMGdF7tunc0wJb4Mm6E=
Subject key identifier:   38:C9:33:94:1A:B1:DD:EB:E0:34:0A:E7:DF:D3:5E:98:54:29:A0:99
Certificate issuer:       /CN=c7a7fe124be23600f4dc050bfc4848190cf90309
Certificate serial:       029863
Authority key identifier: 9E:6C:90:04:24:B4:D8:2C:E7:BE:7D:7D:98:EA:20:0B:EB:44:48:22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7a7fe124be23600f4dc050bfc4848190cf90309.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/82cd28b0-e8d2-4807-96bc-c195baa5a4e0/3667a1acf6d0c031c4feb3bf79d5b2085fe3b845.roa
Signing time:             Thu 08 Jun 2023 14:12:18 +0000
ROA not before:           Wed 07 Jun 2023 14:12:18 +0000
ROA not after:            Sun 08 Jun 2025 14:12:18 +0000
asID:                     262186
IP address blocks:        179.63.188.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170083 (0x29863)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7a7fe124be23600f4dc050bfc4848190cf90309
        Validity
            Not Before: Jun  7 14:12:18 2023 GMT
            Not After : Jun  8 14:12:18 2025 GMT
        Subject: CN=3667a1acf6d0c031c4feb3bf79d5b2085fe3b845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:79:3f:3e:d7:d1:29:31:df:e4:5c:bc:e7:d2:
                    32:e7:a9:ac:42:8a:5d:39:2c:b1:f0:a6:94:2b:83:
                    8d:38:e1:e7:dc:4d:0e:6d:11:f1:0d:bf:2f:df:a4:
                    78:8b:08:d5:c2:0b:8f:5f:0e:85:12:1a:ad:7f:0c:
                    b0:bd:38:db:9d:cb:a4:b5:38:ee:44:70:b0:24:73:
                    c1:ad:92:48:42:e6:70:3a:9a:d5:8c:63:0c:8a:64:
                    c5:5c:eb:1f:17:1c:31:79:a3:ac:02:5f:b8:83:e7:
                    54:82:b3:fc:bf:a6:25:ca:fb:51:9b:bb:d7:d5:b2:
                    29:69:a0:c2:ff:a3:60:90:62:db:98:3c:7f:bd:71:
                    3b:06:39:93:6a:48:be:be:23:18:a5:ae:66:77:6b:
                    ca:8d:f8:3c:56:48:20:f7:23:e1:01:1e:e8:79:6e:
                    4a:23:b7:1f:a2:5f:25:a2:76:75:fc:d8:80:0e:7f:
                    3a:8d:8f:61:66:c3:1c:ed:05:0f:5d:40:d3:2c:3d:
                    30:76:6c:cd:be:3d:72:5f:a2:a8:d5:42:c7:7b:6e:
                    ed:e8:60:2d:2a:a3:e4:67:9e:23:d2:fa:e7:f1:ca:
                    a9:6c:ae:f9:95:3b:4c:bc:64:ed:f3:5c:ab:2d:8d:
                    50:8f:38:02:84:75:0c:4e:8b:86:d8:b4:e0:30:3a:
                    f2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C9:33:94:1A:B1:DD:EB:E0:34:0A:E7:DF:D3:5E:98:54:29:A0:99
            X509v3 Authority Key Identifier:
                keyid:9E:6C:90:04:24:B4:D8:2C:E7:BE:7D:7D:98:EA:20:0B:EB:44:48:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7a7fe124be23600f4dc050bfc4848190cf90309.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/82cd28b0-e8d2-4807-96bc-c195baa5a4e0/3667a1acf6d0c031c4feb3bf79d5b2085fe3b845.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/82cd28b0-e8d2-4807-96bc-c195baa5a4e0/c7a7fe124be23600f4dc050bfc4848190cf90309.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:ab:0e:6c:1b:c5:fa:3f:1e:90:bf:93:c6:76:af:ff:43:5e:
         c2:0f:fc:55:69:26:1c:80:bf:bb:47:4d:ce:63:68:71:c0:22:
         eb:fb:37:f8:f7:72:32:dd:4c:8d:8c:20:f4:92:11:0f:71:59:
         60:78:3c:39:df:01:8b:08:62:28:da:df:a9:00:d9:88:dd:2d:
         b4:74:54:c2:84:ca:1a:27:97:7f:ed:f7:0f:ff:60:b1:48:5a:
         10:57:d6:11:9d:86:87:69:3e:2a:4b:a1:fa:c3:d0:1a:b0:51:
         14:cd:ad:e9:c9:fc:75:35:21:45:25:bd:91:96:42:59:eb:f6:
         b8:c5:08:62:e5:fe:e5:ca:09:6c:49:ce:5d:14:d5:ad:41:18:
         70:12:8f:1a:07:16:8f:39:59:ad:03:99:49:ab:e1:b5:5d:e3:
         cb:d0:c2:bb:62:02:9c:fd:d7:ed:79:08:f5:c6:da:02:3a:22:
         af:8a:e6:ed:91:55:14:74:39:3c:d2:d2:15:ac:b7:b7:ba:eb:
         77:53:b5:77:ec:78:94:29:05:33:6e:0e:3f:29:8d:18:f5:3c:
         41:16:64:9d:ca:66:a7:cb:d3:78:cb:68:1c:6a:32:c4:62:63:
         34:6c:40:83:22:84:65:d2:e8:04:2b:e5:96:8b:8e:d6:6b:d0:
         2e:55:b9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 16 18:03:08 2023 by rpki-client on console-fra.rpki-client.org