Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/d61c52a75a46d0b86032a822f901d030b4cb461d.roa
File:                     d61c52a75a46d0b86032a822f901d030b4cb461d.roa (raw, json)
Hash identifier:          jv9+/P/ZqUBDluBev1oEOlyYXoWzPX5ADmEqD3waZ4A=
Subject key identifier:   2B:08:16:B5:54:84:71:79:F5:A1:61:E4:0D:13:20:B2:97:E6:D3:A4
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       1D7661
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/d61c52a75a46d0b86032a822f901d030b4cb461d.roa
Signing time:             Wed 08 Jun 2022 22:22:32 +0000
ROA not before:           Wed 08 Jun 2022 03:00:00 +0000
ROA not after:            Sat 08 Jun 2024 03:00:00 +0000
asID:                     278
IP address blocks:        132.247.5.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1930849 (0x1d7661)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Jun  8 03:00:00 2022 GMT
            Not After : Jun  8 03:00:00 2024 GMT
        Subject: CN=d61c52a75a46d0b86032a822f901d030b4cb461d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d0:f2:42:4d:e6:76:54:1c:ec:e4:79:96:72:
                    3c:90:f9:ce:af:60:f7:ed:52:3d:42:2f:cd:64:b9:
                    a7:4c:bd:d5:5a:50:82:66:61:6a:bb:ca:59:c0:b8:
                    d0:e3:52:ad:5a:03:2a:50:4a:25:e5:cd:6a:5c:ba:
                    4b:59:16:23:60:7b:b1:92:39:38:5f:e3:ed:50:3a:
                    57:e0:50:a5:8a:be:bb:a7:03:d9:53:76:23:83:32:
                    e3:a5:ce:21:d4:ae:fb:29:10:6d:3d:a1:c3:b7:e1:
                    ba:f7:0e:e8:24:93:9e:af:56:f9:dd:81:80:2f:c6:
                    da:1e:58:34:6b:b0:91:20:2d:05:8b:83:ae:5c:0a:
                    53:ac:37:2b:56:ef:e3:40:5c:5c:6a:80:47:d4:78:
                    0e:20:87:da:08:6e:ba:33:78:2d:15:9f:91:d8:43:
                    47:e0:75:0a:fc:0f:47:0e:71:ec:e8:cf:c6:14:b0:
                    13:0d:f7:5e:6e:95:55:44:14:79:9e:a7:d6:1b:80:
                    d2:4b:0f:05:54:9d:5e:20:b6:80:7d:54:27:85:c5:
                    58:bf:b9:54:d0:c9:79:31:f2:bb:f2:fa:cc:2c:98:
                    af:9d:74:5e:30:34:94:84:e6:ac:26:60:a6:a0:ef:
                    2f:83:ff:6d:ed:d7:06:06:9f:a2:1c:7a:fe:42:54:
                    c4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:08:16:B5:54:84:71:79:F5:A1:61:E4:0D:13:20:B2:97:E6:D3:A4
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/d61c52a75a46d0b86032a822f901d030b4cb461d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:f7:b1:6c:4b:37:72:92:53:95:12:16:7d:3a:4e:cc:f8:69:
         ba:a6:d0:e2:33:b6:e8:0c:09:d0:c4:6c:49:15:66:d0:92:8f:
         be:6d:ff:b0:b7:1b:1e:e8:a8:ba:9d:88:6f:a3:5f:d4:f3:26:
         67:96:76:5a:e6:48:99:ca:3f:3c:41:c5:46:00:ea:01:26:f9:
         39:4c:0a:fc:be:a9:87:06:09:48:c7:84:82:57:99:91:ef:2c:
         94:1f:83:9d:ec:e9:c5:0b:25:fc:ad:ad:bb:d4:23:64:0a:88:
         28:51:66:87:f9:8f:24:09:65:ea:e6:d5:d1:db:8e:aa:4e:17:
         aa:44:5b:9e:98:11:13:b8:c7:7c:7b:47:05:45:6a:a9:b4:6f:
         e5:c5:56:ec:30:67:f1:39:ef:be:0c:11:b9:90:d1:2c:c4:3d:
         78:f4:9f:88:66:9a:6b:32:2f:a1:34:64:97:2d:bb:32:c9:61:
         74:4c:37:6a:80:96:48:24:24:16:5d:1d:17:ef:91:1c:74:95:
         4e:48:19:d4:04:e5:52:0d:49:42:a7:6b:c5:72:15:cd:b3:8c:
         3d:8c:f6:20:0d:6e:f3:8d:34:3e:16:a7:51:64:de:cd:b4:72:
         1a:39:3c:3c:89:9b:4c:8e:1d:ea:db:cd:0c:5b:39:16:b5:b7:
         68:35:1b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-ams.rpki-client.org