Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/23700266f9693c88b5d2b60387588a01ef12bfa6.roa
File:                     23700266f9693c88b5d2b60387588a01ef12bfa6.roa (raw, json)
Hash identifier:          Ip9ZBohB8h3yHzsbwCiABTWPrAS9eq2a94/lzJbwxv8=
Subject key identifier:   DE:44:37:17:1F:A4:39:ED:D7:3A:EC:BB:71:23:40:63:39:39:AE:2D
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       0FE0F3
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/23700266f9693c88b5d2b60387588a01ef12bfa6.roa
Signing time:             Wed 24 Mar 2021 14:44:08 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.247.95.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1040627 (0xfe0f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=23700266f9693c88b5d2b60387588a01ef12bfa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:35:a9:19:cb:d5:54:ea:db:9f:c6:6b:01:2b:
                    5f:5a:27:6d:7b:1b:77:d3:04:96:76:80:05:6c:23:
                    b7:b3:6d:f0:70:fe:96:ba:55:cd:11:21:7d:c9:31:
                    d8:e6:ca:13:d4:5a:c1:af:fc:6b:1c:5f:c8:8e:dd:
                    6e:1b:10:75:9e:e2:05:bd:ec:4c:dd:d1:e6:c6:65:
                    89:00:8f:96:8f:b6:12:ad:03:02:9f:f0:45:b5:de:
                    2d:41:3e:f7:2e:2e:84:1b:e4:37:b9:0a:f4:57:8a:
                    b2:cb:d0:2e:12:1d:a1:ce:bc:e7:97:bf:44:fd:b2:
                    cd:f5:88:fd:41:cf:6b:cf:59:55:c2:1d:9f:58:98:
                    33:df:ce:3a:e9:8b:47:3b:c8:1b:5b:f5:78:c1:50:
                    1e:37:2d:26:26:26:34:22:fc:1d:ad:13:b2:38:a8:
                    1d:d0:45:15:58:ec:b5:09:ef:b9:9f:27:81:d0:83:
                    de:a4:52:2a:ef:71:2d:ff:d0:c0:ff:65:ff:76:ad:
                    64:d3:b2:7d:be:c8:cc:7f:65:52:0f:a3:03:05:47:
                    49:b6:3c:e8:97:f7:03:c3:93:ac:67:37:99:8f:97:
                    9f:7e:00:fb:49:07:0d:71:58:7d:25:08:74:84:62:
                    25:1d:e3:ed:9d:ab:94:51:bb:5c:81:fd:a6:9f:ce:
                    41:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:44:37:17:1F:A4:39:ED:D7:3A:EC:BB:71:23:40:63:39:39:AE:2D
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/23700266f9693c88b5d2b60387588a01ef12bfa6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:ef:ec:08:55:f7:4e:07:e3:7c:50:a0:f3:29:c9:25:1c:e8:
         19:1d:0e:a2:00:00:5c:21:1d:34:2e:62:85:d5:cf:22:49:ce:
         28:59:d1:3e:69:94:59:7f:7b:38:8f:7e:d4:a7:59:22:c0:f1:
         25:d4:81:f5:51:c1:4c:bd:03:6e:c0:c9:57:b4:9e:73:a2:b3:
         42:59:aa:92:1d:bd:0a:98:e2:5d:2f:dc:a3:65:c0:cf:65:44:
         53:f5:bf:ba:dd:52:0f:94:ab:2b:e4:c8:19:41:bf:b4:06:8b:
         4a:ef:9e:a6:57:86:9c:67:4f:14:59:7d:82:f7:6c:e6:d7:5a:
         f8:2b:45:01:7c:c8:f1:8a:63:68:73:04:84:c0:95:92:56:3c:
         50:65:92:3b:f9:0c:41:e4:63:83:35:d2:aa:62:9b:3b:89:a1:
         98:b8:08:8e:ae:b3:b9:92:f2:41:a2:2d:cf:29:a4:14:81:72:
         64:14:8c:f1:26:71:7a:d3:a1:09:4a:3f:c8:b2:42:4a:24:ec:
         97:c1:8b:34:78:cc:58:1b:39:49:08:17:1d:26:69:84:1a:bf:
         fa:6f:77:f3:c4:a7:8b:69:bd:0f:dd:32:ef:c9:2b:53:b6:9a:
         f6:12:35:8f:c3:d8:b1:31:8d:a2:8b:21:1b:6d:17:7d:b3:5b:
         f2:c8:7d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:42 2023 by rpki-client on console-ams.rpki-client.org