Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/d31eba1ee563f09242ea33916c49929100fa65c5.roa
File:                     d31eba1ee563f09242ea33916c49929100fa65c5.roa (raw, json)
Hash identifier:          8Xi78gbHFibqIZex/Sa5/5X+QnP2yusy4bTmVK+oTCA=
Subject key identifier:   76:54:1A:03:79:CD:08:9F:F5:E8:F4:AA:16:A5:C2:E3:AF:98:D6:AE
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       109A3B
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/d31eba1ee563f09242ea33916c49929100fa65c5.roa
Signing time:             Wed 24 Mar 2021 14:44:22 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.247.102.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1088059 (0x109a3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=d31eba1ee563f09242ea33916c49929100fa65c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5b:06:75:80:83:29:d1:f7:40:09:7c:58:2a:
                    40:72:32:1f:2a:d8:1f:36:21:67:8c:66:69:95:e8:
                    e9:cc:b0:3b:b2:13:75:9b:75:65:f3:da:a5:c1:a7:
                    03:25:b9:d8:90:43:87:54:8c:f6:b6:04:c8:27:c2:
                    ac:03:9f:a9:3a:0b:6f:55:4e:45:dc:c4:9c:8f:8d:
                    5e:c6:66:8e:88:28:dc:b6:f1:1f:68:f6:f4:12:2c:
                    63:17:52:fa:42:0f:7c:47:b4:cd:2f:eb:c7:80:24:
                    de:1d:69:ad:c8:62:6f:30:40:2e:9d:e0:bd:fe:bd:
                    3a:8c:b8:9d:dd:43:20:52:e6:fe:40:be:9a:f0:4d:
                    d8:1b:1c:e1:00:52:24:b3:f9:4a:c0:38:7d:df:09:
                    b1:aa:7a:c0:ba:85:e7:fa:c0:bb:d6:fa:fa:ca:64:
                    0c:83:07:b9:0c:bf:96:d3:e3:e2:d7:60:73:d2:05:
                    d6:47:80:9f:20:8c:ba:cd:ad:70:c5:59:1b:79:09:
                    70:37:38:5e:f3:14:d1:07:27:5e:aa:f8:cc:ea:f9:
                    90:4e:47:9d:2b:da:6d:fc:13:a4:90:90:66:51:1d:
                    2e:fd:4c:98:ee:a2:35:72:7a:6f:7b:98:0a:bd:be:
                    8d:de:ca:8f:54:d5:37:c9:80:2e:f0:2b:88:d8:ab:
                    b1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:54:1A:03:79:CD:08:9F:F5:E8:F4:AA:16:A5:C2:E3:AF:98:D6:AE
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/d31eba1ee563f09242ea33916c49929100fa65c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:a9:25:86:22:a6:e0:1e:67:1b:3f:8d:e7:ce:94:15:95:82:
         cc:1b:42:09:4a:cb:57:b1:1f:ab:ca:ea:c7:c2:34:a5:78:fb:
         20:d0:90:c0:1e:9f:49:b6:5d:dc:53:11:16:9b:62:3c:fe:14:
         9f:f4:7b:e8:d4:f4:9e:4b:b8:42:4a:5b:b7:38:ed:86:86:69:
         17:44:ba:57:39:93:ba:1f:7b:40:3d:7f:6e:4e:07:27:f0:2d:
         84:10:57:a7:ad:05:cf:c0:fd:3f:b0:a8:f7:0a:19:a3:0b:8e:
         e2:55:95:73:a7:38:61:b0:b3:bd:b3:86:8c:c8:db:12:9b:88:
         43:4e:dd:b0:8f:9a:48:bb:71:57:33:ec:98:dc:52:33:2b:9c:
         16:67:93:75:01:90:75:b0:31:0d:54:ff:fc:2f:6d:a2:7f:17:
         6a:58:e7:23:94:13:74:28:03:9e:f1:23:90:97:23:f6:67:d7:
         44:64:7a:f8:03:6d:3e:1c:c2:91:af:0c:53:e8:6f:66:ce:a8:
         36:83:18:e3:69:89:a1:92:d4:61:52:90:f1:d0:5d:bb:ff:ed:
         e2:bb:48:74:e7:8f:1f:89:b8:11:7a:86:77:82:23:1f:19:b2:
         04:73:08:68:4e:a3:f4:4e:35:25:4f:88:f5:cb:73:10:56:7c:
         c1:57:22:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-ams.rpki-client.org