Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/a1b5dc1ddbc652dd739c9736dde4ae4588258716.roa
File:                     a1b5dc1ddbc652dd739c9736dde4ae4588258716.roa (raw, json)
Hash identifier:          QEh9W9nCuXJhuboniOo3IAg3AgH1upu61OV4M1RtWIQ=
Subject key identifier:   15:BC:84:5B:A8:03:72:3C:58:39:C1:3C:2F:34:19:C5:CD:83:44:50
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       1094F1
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/a1b5dc1ddbc652dd739c9736dde4ae4588258716.roa
Signing time:             Wed 24 Mar 2021 14:44:21 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.248.58.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1086705 (0x1094f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=a1b5dc1ddbc652dd739c9736dde4ae4588258716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:39:64:3d:2e:88:5b:ce:80:ef:76:35:6a:5a:
                    e8:5f:66:3f:d3:cb:b1:08:44:bc:7a:f6:75:db:6a:
                    7c:a6:23:46:b7:83:c5:a1:18:57:b3:b4:db:52:af:
                    30:9f:9a:0e:e3:e1:8c:4c:7b:6e:97:25:9f:50:fd:
                    69:b8:7a:96:94:2b:d4:a5:3c:02:ed:61:99:9f:56:
                    cd:7a:56:a2:f8:20:9c:3e:a8:61:37:de:74:d9:1d:
                    c1:8b:5e:cc:ea:37:c7:98:39:33:28:c9:b1:ab:1e:
                    3d:4d:ef:3a:d5:76:2e:cb:75:d4:8b:95:3f:93:29:
                    00:1c:7e:a1:7f:65:e9:11:06:d7:d1:7b:de:8d:8d:
                    d1:83:0a:4a:b6:e1:d1:a7:00:7c:bb:67:df:d2:0e:
                    34:b9:ff:55:fe:66:8e:7e:15:61:1e:4e:a4:48:f3:
                    a2:b7:ff:56:94:cf:47:4a:70:39:5f:17:4d:e5:90:
                    57:84:d4:cc:aa:23:8b:7f:b4:41:b8:fa:cd:c1:0b:
                    0f:0d:3d:7e:7a:2b:22:e7:58:d9:45:2f:e2:08:cb:
                    7a:3f:17:fe:f3:2b:23:41:c3:08:80:d3:d8:0f:6b:
                    a2:5f:bd:dc:2e:dc:6f:8a:7e:85:4b:c9:dd:7a:fa:
                    b1:33:57:0c:34:f8:21:26:19:a7:7c:67:ba:40:83:
                    39:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BC:84:5B:A8:03:72:3C:58:39:C1:3C:2F:34:19:C5:CD:83:44:50
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/a1b5dc1ddbc652dd739c9736dde4ae4588258716.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.248.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:05:94:63:4e:e7:21:c6:32:39:f3:2a:5a:b4:f1:c0:e6:0d:
         0c:1c:58:4d:f3:4b:ff:21:2d:85:17:48:2b:34:ff:de:52:f5:
         c5:f1:d2:f7:1d:d7:d2:6d:2d:48:53:06:14:79:b3:e6:9c:69:
         14:15:cc:30:23:31:fd:0c:67:d1:9f:12:6d:d5:3b:c8:ac:6e:
         5e:64:c2:cf:e3:5a:45:be:c5:3e:b7:cb:32:a4:bc:64:fd:95:
         44:98:08:61:fb:f0:94:fe:c8:f8:47:9c:70:99:6b:b9:8a:00:
         e8:ba:07:d8:55:db:4d:fd:a4:1b:30:28:40:bd:7c:eb:9d:5f:
         09:1b:39:b7:b0:0e:8c:17:c3:f4:08:40:82:dd:e7:66:02:78:
         eb:28:54:af:f4:68:7f:fe:51:b2:b2:8c:87:52:33:2f:b8:54:
         1f:fe:06:63:6b:78:63:6d:ba:91:6c:a1:26:8b:e3:8f:9e:af:
         a1:1b:5f:67:5f:08:52:10:8b:99:f8:6f:20:3b:71:f0:0e:b9:
         f4:f1:75:fb:5e:c5:f9:5d:c6:33:9a:fb:43:4f:aa:34:ae:9d:
         ec:b1:5a:9d:e2:82:62:f7:4c:3a:da:43:af:e2:d5:87:e9:29:
         0d:bd:74:fe:db:c6:21:d4:45:49:dc:97:93:15:47:1c:55:c8:
         ad:b2:ea:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:43 2023 by rpki-client on console-ams.rpki-client.org