Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/cc485829dc9719623abf2a641000a0eff2d56ec2.roa
File:                     cc485829dc9719623abf2a641000a0eff2d56ec2.roa (raw, json)
Hash identifier:          hPeETro8pQ+/IablYrQsiPltkj5M3WasyROWYvGIqBM=
Subject key identifier:   0B:15:86:5A:97:75:6E:60:30:E1:73:5A:08:87:ED:70:38:94:F6:8D
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       10AA84
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/cc485829dc9719623abf2a641000a0eff2d56ec2.roa
Signing time:             Wed 24 Mar 2021 14:44:23 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.248.75.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1092228 (0x10aa84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=cc485829dc9719623abf2a641000a0eff2d56ec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6d:bf:c6:e5:6f:11:06:b7:88:e9:29:02:fb:
                    68:35:87:33:66:55:6c:63:78:94:8a:e6:9c:9a:52:
                    38:4a:cf:05:51:16:eb:3c:e6:4b:57:f4:a3:45:a8:
                    ed:74:b6:57:f2:92:d4:a9:a4:b0:e6:24:0f:74:72:
                    4f:4b:ca:79:9c:00:a6:2a:fc:6b:70:67:4d:7f:18:
                    d3:b6:46:1a:c0:20:46:66:99:d4:ac:01:51:9a:81:
                    cd:60:26:d3:58:32:1b:5e:41:69:2e:87:19:ba:5a:
                    69:ae:2f:a3:ab:c9:4e:ae:e1:ff:07:4b:ae:07:97:
                    7c:07:c0:83:a0:5b:be:f2:26:05:45:46:b6:66:5a:
                    88:6e:37:2a:fe:af:38:4d:76:a6:8b:4f:b3:87:07:
                    c3:c0:3e:9e:8e:4d:c7:31:f2:aa:e9:6a:38:5d:56:
                    88:ba:8e:c2:ac:61:fd:b0:68:e8:f2:1d:25:9e:d4:
                    85:28:d3:e7:20:67:31:9a:fb:9e:33:15:1c:94:93:
                    36:59:3c:37:bd:d2:08:d7:16:ce:5e:88:d9:95:be:
                    68:28:91:a6:9d:94:56:42:a1:f3:ef:a1:b2:67:a7:
                    6e:b6:9f:93:5c:a7:69:a8:7d:91:42:80:d0:23:cb:
                    00:92:df:a4:ed:fd:1c:69:b6:c0:2b:5e:e5:1c:00:
                    6a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:15:86:5A:97:75:6E:60:30:E1:73:5A:08:87:ED:70:38:94:F6:8D
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/cc485829dc9719623abf2a641000a0eff2d56ec2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.248.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:f4:be:e2:39:28:2c:7c:28:34:f6:1f:0b:92:c0:57:44:d1:
         4b:76:37:1f:f3:12:e9:2a:39:a7:3b:03:1c:15:d2:5f:7a:f8:
         2f:c0:cd:cc:56:27:41:32:e1:be:dd:6c:d1:7a:47:9a:2d:e5:
         59:32:94:64:9c:86:ef:2a:f6:dc:1d:b5:56:9a:f8:96:93:04:
         a8:aa:90:1b:ac:6a:38:85:a4:d6:7e:a0:16:ac:7f:06:6f:4a:
         dc:b8:32:81:c5:fa:f8:6e:5c:23:68:87:b2:e2:95:60:13:c2:
         b6:64:da:92:7f:ea:85:3e:a4:fe:a3:b4:21:a1:be:c3:56:83:
         43:99:15:0c:42:62:fe:c2:e3:75:58:91:f8:3b:17:7e:f0:09:
         c3:25:60:b5:6c:d3:74:47:7b:0d:01:5e:ae:e4:09:f3:5e:cb:
         c2:dd:3f:76:0f:f8:d5:0c:31:ef:40:10:29:e9:8f:59:b0:f2:
         0d:8f:04:b4:53:64:07:2c:88:d3:53:e2:5b:68:6f:d8:dc:56:
         e4:a8:df:0c:25:46:53:05:ce:36:f3:76:bd:7d:e1:13:fc:af:
         03:55:a4:28:2e:0f:d7:c0:09:e1:d1:eb:4f:53:8c:0b:c0:13:
         96:fb:dc:df:f6:c1:d1:22:fa:ab:ba:a3:cf:c3:51:18:11:47:
         bc:d7:33:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-ams.rpki-client.org