Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/9d7ccb02fc78a30de19183bf742482d393b1e70b.roa
File:                     9d7ccb02fc78a30de19183bf742482d393b1e70b.roa (raw, json)
Hash identifier:          yZshuUHydCq2V+7WdK3rC7z+l4wPoBcSb6CC0fHmRsI=
Subject key identifier:   D5:B4:1A:EF:A1:AF:5C:49:94:BC:6A:FD:7A:49:9E:FF:78:97:F8:54
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       10F45B
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/9d7ccb02fc78a30de19183bf742482d393b1e70b.roa
Signing time:             Wed 24 Mar 2021 14:44:28 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.247.10.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1111131 (0x10f45b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=9d7ccb02fc78a30de19183bf742482d393b1e70b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:32:ab:29:6b:5a:69:87:8a:4a:9a:05:e2:23:
                    02:02:ab:42:98:34:f5:56:f7:ae:75:af:02:2f:02:
                    8c:f6:7f:f3:83:67:3f:15:3d:2a:f0:97:00:db:b0:
                    05:8e:e8:a7:f2:06:3a:7f:44:f0:cf:50:16:74:71:
                    44:3e:ab:57:19:86:c7:3f:b2:30:da:af:d3:77:f2:
                    00:d1:b3:59:a4:41:57:70:a4:45:ff:c6:24:4c:c4:
                    0d:4b:95:cd:6b:d2:95:e8:f7:7b:81:ce:14:71:f4:
                    d3:32:95:84:f1:eb:76:cc:c1:7e:1e:31:bc:5e:14:
                    27:63:30:58:3b:fd:da:5e:aa:34:7b:a1:a5:c8:87:
                    a1:fd:8b:87:7c:64:00:95:0d:c6:20:22:2a:4f:db:
                    48:93:c5:df:23:32:e2:b3:ca:b4:ba:c4:cb:a3:37:
                    8c:42:2a:83:b9:d6:db:b8:b9:d4:2e:fe:7c:d3:bf:
                    c3:36:d6:97:5e:4d:b1:c1:61:2d:ec:d3:22:34:3d:
                    cc:42:d2:61:bd:4f:3b:62:17:d3:82:24:8a:ff:14:
                    71:e1:4d:2d:76:44:cc:a1:2e:33:1e:70:7e:00:2b:
                    34:d8:87:bf:dc:75:47:38:8c:9e:ac:f7:2f:4f:9e:
                    39:b5:14:d1:98:53:39:7c:e2:00:f7:7c:08:42:70:
                    f6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B4:1A:EF:A1:AF:5C:49:94:BC:6A:FD:7A:49:9E:FF:78:97:F8:54
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/9d7ccb02fc78a30de19183bf742482d393b1e70b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:54:70:d7:98:2f:77:a8:25:65:c7:36:2a:1e:88:2e:ba:63:
         0d:78:45:54:3f:5e:fa:e4:b4:ed:9c:30:d3:23:c5:3d:88:5e:
         45:a9:c2:58:33:70:ca:26:c3:5a:80:ff:7d:98:33:b2:e4:10:
         01:98:98:99:b3:7e:61:fa:2d:5f:b6:bb:fc:e6:cd:e0:9d:6c:
         41:80:71:26:5b:ac:c6:4d:b1:b3:a3:37:cc:a2:44:65:bf:a8:
         43:c5:b8:8a:6e:48:28:51:01:fc:cb:8b:1d:2f:87:83:20:8a:
         0c:bb:74:a7:57:cf:c3:a3:7b:71:3d:56:f3:e7:1a:77:82:78:
         6b:e9:4a:28:55:29:d7:c5:37:e1:4b:5a:ab:3b:b3:c0:11:97:
         2d:53:bf:02:e7:38:f8:e8:c5:ec:40:b4:56:3d:69:78:18:b8:
         b6:87:c1:ac:47:91:3e:00:af:e6:5e:b7:09:65:00:60:04:c5:
         7e:58:ee:29:2f:10:db:c2:53:8f:6c:5d:6e:8e:8f:f3:31:5e:
         21:e1:67:cf:5a:87:43:52:80:08:48:c9:d0:fc:43:a9:f4:27:
         2f:e0:cc:86:30:36:b7:25:b1:06:81:3c:48:ee:fe:fc:87:55:
         ae:96:a0:1d:91:aa:15:52:ea:8c:8b:ed:a8:64:d5:a5:b3:c0:
         be:d7:e8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:43 2023 by rpki-client on console-ams.rpki-client.org