Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/c5911c6c9b846c94e38508451f8ea9fa93383402.roa
File:                     c5911c6c9b846c94e38508451f8ea9fa93383402.roa (raw, json)
Hash identifier:          2FUQmfhMxbKtff1O0/tzTNxsNAJjLSnRxkmkay0tSNg=
Subject key identifier:   CA:69:28:09:1E:73:6E:63:CC:CC:A6:85:3E:C7:89:0A:E9:42:86:D6
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       10BCE1
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/c5911c6c9b846c94e38508451f8ea9fa93383402.roa
Signing time:             Wed 24 Mar 2021 14:44:25 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.247.87.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1096929 (0x10bce1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=c5911c6c9b846c94e38508451f8ea9fa93383402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:61:62:87:71:63:9d:0e:26:1e:6b:1b:c7:69:
                    09:a9:4b:35:1e:1f:2a:15:cc:ce:59:d5:37:8e:89:
                    aa:08:68:86:d9:8a:1b:7b:24:a2:47:37:ed:87:58:
                    77:ad:78:5e:9f:b6:39:26:d2:39:10:38:12:8e:02:
                    de:21:6c:9b:bf:d7:36:7a:2e:ef:42:c0:2e:70:df:
                    89:c2:71:f1:ab:40:34:4d:98:cb:54:ef:d3:65:c8:
                    c7:aa:c1:f2:37:56:9d:00:4d:b5:b8:33:db:78:0c:
                    48:2f:a2:fc:5b:28:20:65:d8:5c:e3:e8:d4:2d:b9:
                    a0:6d:ac:02:23:4f:34:20:3b:e5:55:13:3e:fb:37:
                    ac:21:77:ac:26:d0:95:fb:b0:8a:7c:2e:16:7f:18:
                    ae:06:93:1e:a6:fd:9e:c2:cf:48:9f:b4:91:bf:e3:
                    99:dd:24:60:1e:a2:ae:1e:e9:66:61:e4:cd:cc:76:
                    e5:fb:b3:fc:0a:99:70:34:fb:8d:58:97:b4:22:95:
                    0a:50:09:77:a6:28:64:46:69:1f:b8:ce:fd:7e:99:
                    88:c0:96:4c:af:45:50:46:a3:b7:e6:9b:c2:55:48:
                    54:87:38:8e:6b:89:cb:7c:b6:6b:25:1f:36:1c:4f:
                    a7:62:9b:79:12:b6:45:26:9b:2e:7c:08:04:2b:96:
                    33:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:69:28:09:1E:73:6E:63:CC:CC:A6:85:3E:C7:89:0A:E9:42:86:D6
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/c5911c6c9b846c94e38508451f8ea9fa93383402.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:95:2c:66:9c:9c:e0:1b:4a:af:1f:ba:71:4b:2b:d4:05:d3:
         e3:6d:f6:f7:98:6b:c8:0a:58:17:57:1d:86:cb:d8:e7:5e:9a:
         d7:96:04:89:b3:6c:e2:52:e4:30:c0:d9:c8:5f:e4:b9:2b:26:
         dc:03:83:62:e0:b2:86:ba:e9:3f:9b:3b:31:2a:f7:fb:bc:63:
         2b:f8:24:ea:7c:e6:b8:8c:64:e2:0f:22:ca:13:b6:ed:8a:eb:
         45:cf:b3:30:8a:fc:5d:62:0b:72:b8:ef:d8:06:97:84:25:9f:
         46:94:57:02:b5:4e:86:0e:29:09:1e:a7:58:f3:cc:48:7b:e7:
         14:58:d3:00:99:6e:a2:71:46:ee:cd:7e:5b:c1:8b:24:02:85:
         5f:e9:f3:03:42:60:a6:30:5d:48:d1:75:00:71:e9:73:3a:21:
         dd:eb:42:21:78:0a:db:d5:8b:a9:02:d4:57:a3:df:19:94:05:
         cf:d2:2e:69:52:f8:01:27:66:71:b1:a1:d8:4a:9b:c6:20:4b:
         d8:4f:b2:0e:f1:30:08:bf:d5:1a:78:c8:10:cf:ce:ec:45:91:
         32:ef:a9:8e:53:54:eb:8c:af:57:a4:fb:7a:42:ab:7a:76:5c:
         19:58:b3:d2:35:f0:4a:9e:d1:18:ec:c7:d8:95:a4:4f:cb:97:
         2e:68:0b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:43 2023 by rpki-client on console-ams.rpki-client.org