Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/021dcbd6fda529f5d0382a08edbaa5f3c0beea6a.roa
File:                     021dcbd6fda529f5d0382a08edbaa5f3c0beea6a.roa (raw, json)
Hash identifier:          NEIUQHO4++6mmcPRzBw1zbWGxjOogxX9zD2IYRas3oc=
Subject key identifier:   61:49:81:58:05:67:0E:B9:01:63:99:00:FB:A4:CB:A4:E6:44:18:C4
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       0FF086
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/021dcbd6fda529f5d0382a08edbaa5f3c0beea6a.roa
Signing time:             Wed 24 Mar 2021 14:44:09 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.247.58.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1044614 (0xff086)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=021dcbd6fda529f5d0382a08edbaa5f3c0beea6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:cf:70:65:ac:cd:dd:f6:ba:d1:7f:2a:a4:c9:
                    d1:da:19:a4:c6:31:63:ef:2c:f3:09:4b:d0:00:11:
                    f4:f2:10:02:6a:12:70:a8:80:d0:fc:b5:d3:1c:08:
                    7a:b4:00:05:57:cf:07:d6:52:5a:02:ea:1e:be:b9:
                    d2:c8:ba:63:16:d4:2f:0e:c1:05:f4:8a:d0:15:5d:
                    3a:b6:d0:d7:ef:da:59:cf:f8:57:f8:fc:d6:20:60:
                    ff:a2:84:c6:1b:86:a5:2a:bd:04:53:37:37:72:92:
                    9a:07:8f:6c:09:00:37:c4:e6:51:3b:96:d3:09:3f:
                    3f:4d:e2:59:7f:91:c1:82:82:c9:92:f6:59:cc:9d:
                    a6:24:39:d4:3c:e5:de:05:a1:b5:b1:0d:fc:9e:a3:
                    17:28:2d:83:07:39:65:52:8a:ec:78:ef:07:a7:4f:
                    c8:90:ce:53:2e:4b:8b:22:8b:26:48:61:b2:66:50:
                    8f:69:3b:fb:69:a7:cc:03:a7:96:91:35:5d:b7:77:
                    67:cf:29:9b:0f:c7:51:4d:92:77:bb:0e:94:f5:c4:
                    87:6f:9e:05:ba:2a:2d:c2:8d:72:6b:ac:73:c7:df:
                    55:ba:65:1f:70:af:2e:dd:cd:33:aa:ba:18:9b:96:
                    f3:8d:32:86:bb:42:e4:e6:08:51:55:7b:cc:5a:26:
                    af:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:49:81:58:05:67:0E:B9:01:63:99:00:FB:A4:CB:A4:E6:44:18:C4
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/021dcbd6fda529f5d0382a08edbaa5f3c0beea6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:72:71:21:28:6d:2f:ca:af:16:ff:67:5e:ae:ea:c7:96:e5:
         be:50:75:7a:fc:47:fa:d8:a5:9d:9c:44:8c:09:49:8f:97:e4:
         49:98:a6:08:c8:d0:1e:dc:c8:13:08:7e:57:dd:61:d1:fa:4c:
         50:aa:cf:ca:ae:64:55:56:bc:75:ff:3d:e2:2b:f6:d0:15:fa:
         3c:5d:a2:e7:3a:97:ed:90:e9:ae:79:53:81:fe:18:85:42:20:
         13:7c:13:f8:ff:6e:6f:2d:e2:7e:d0:c8:ac:98:a8:3b:82:27:
         03:15:d5:1d:5a:4f:02:8c:51:b6:fc:51:1b:94:da:63:25:9f:
         36:5d:fe:df:33:fb:6e:22:5a:54:73:60:0d:3f:d2:12:2f:db:
         89:42:4d:87:a6:8e:8c:2b:47:5a:a2:b7:43:cf:f1:32:f8:6b:
         c0:3c:d1:92:f7:72:0b:4b:8a:a1:2f:24:21:bd:e3:01:14:4d:
         0b:da:52:1d:77:4e:2a:15:67:2a:6b:72:8f:5f:dc:ad:e6:78:
         c6:ba:8f:ce:2c:03:ff:08:09:e8:3e:f1:26:4a:a3:3f:9a:31:
         92:5d:31:2e:a2:bd:d0:39:61:8d:84:b5:29:a3:88:93:07:a3:
         a5:45:04:ed:01:14:d1:b3:34:c8:c7:74:a4:97:d9:6a:0a:3b:
         e0:6b:26:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:25 2023 by rpki-client on console-fra.rpki-client.org