Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/e935d2054d691d805ba11011b5f4ba2db0eafbaa.roa
File:                     e935d2054d691d805ba11011b5f4ba2db0eafbaa.roa (raw, json)
Hash identifier:          PVnSSgWSGfv4Dv2qOGXIhIYe41Nh5Yub0NKtMUzgPiw=
Subject key identifier:   98:82:B8:DB:DD:6C:8B:99:91:9A:6F:9D:E6:72:24:B4:8F:65:E1:ED
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       0FE752
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/e935d2054d691d805ba11011b5f4ba2db0eafbaa.roa
Signing time:             Wed 24 Mar 2021 14:44:08 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.248.96.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1042258 (0xfe752)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=e935d2054d691d805ba11011b5f4ba2db0eafbaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:53:c8:95:a8:c5:a1:06:6d:f0:d3:7a:be:8f:
                    bd:c9:a3:53:11:fa:04:70:24:e5:97:c2:53:f7:a3:
                    9f:f4:29:c9:e1:9c:41:73:8d:4a:78:94:c7:c7:ac:
                    a0:7b:58:dd:75:26:0e:33:d9:4f:11:61:09:29:aa:
                    13:b8:e9:a9:ab:22:05:9c:6e:cc:bc:c7:61:90:95:
                    e7:7f:c5:bf:02:c3:ea:2d:77:51:fa:97:dd:03:5d:
                    c0:ea:9a:fe:aa:20:f9:52:d6:43:06:26:e7:8d:9d:
                    5f:17:9c:7e:93:fb:80:22:68:a9:9b:00:6b:2a:b5:
                    73:13:e3:7e:22:e3:e1:20:f9:57:9b:e6:2f:d7:21:
                    78:5a:5b:fc:97:b3:a0:75:28:09:5f:11:84:c8:33:
                    d0:0e:30:14:9a:37:24:36:ce:81:33:67:f0:f9:b6:
                    3e:ef:b1:78:bd:65:c5:92:8c:33:ac:13:07:60:df:
                    c8:1e:44:e2:99:a0:80:70:4f:9b:6d:07:7f:eb:61:
                    ac:b3:cb:9b:b7:ea:e0:1a:15:ca:1a:7a:09:3b:27:
                    56:17:3a:43:5b:cb:ca:12:a1:c6:af:c4:f7:e2:77:
                    eb:56:06:67:a5:cf:93:5c:57:ff:19:9a:6c:fe:19:
                    60:58:f8:cc:85:5a:61:c8:4a:a5:25:72:b4:fd:5e:
                    14:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:82:B8:DB:DD:6C:8B:99:91:9A:6F:9D:E6:72:24:B4:8F:65:E1:ED
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/e935d2054d691d805ba11011b5f4ba2db0eafbaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.248.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:3c:c8:c0:01:1b:42:89:4b:72:76:44:a0:2e:5c:49:fb:07:
         fb:a7:e1:d0:f2:0a:99:3b:8d:ce:2b:05:59:a5:41:aa:5e:2e:
         59:a8:15:f7:bf:1f:d4:4c:0a:6c:1d:83:47:34:5a:b8:f3:69:
         e9:b0:25:3b:0c:7e:c9:62:95:38:87:3c:3e:35:f7:82:5a:f7:
         91:4a:95:67:92:15:9f:94:7d:2f:34:ee:e0:3b:09:4d:af:9e:
         34:77:b2:6d:17:61:9c:cb:9a:c1:bb:22:97:0d:94:1d:8a:8f:
         54:f8:54:ba:4f:20:f1:a1:69:c1:32:ef:3a:26:b7:5b:85:2b:
         1e:e1:94:0a:7c:c8:0b:ef:fe:85:b7:c2:5e:80:8a:40:ce:8d:
         e5:08:6a:c5:0c:28:1e:57:31:92:f3:e1:d4:70:e8:36:48:d8:
         dd:2d:37:ae:49:ff:34:b2:17:a2:ff:55:36:01:0d:bf:82:82:
         63:02:eb:37:44:3b:47:0f:b2:0b:64:30:49:97:ea:76:20:8f:
         cc:70:25:c3:38:43:f6:97:d9:ce:50:87:bd:14:ae:64:7a:33:
         4d:db:90:4d:fa:de:85:32:51:4c:cd:16:3d:d0:d6:32:2a:5e:
         cb:11:9a:38:ff:d2:6a:58:53:14:83:09:53:1d:ac:bb:b0:53:
         52:05:c2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-ams.rpki-client.org