Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/fa4515cff292f4a47f8a8e4dfd84a90febd77a66.roa
File:                     fa4515cff292f4a47f8a8e4dfd84a90febd77a66.roa (raw, json)
Hash identifier:          l30EiYlofYrhNYUVq0CPVbCvM9aj1m6PEoIHOIdzbCk=
Subject key identifier:   CB:D4:0E:83:02:F8:FB:FE:7C:E2:3C:4B:CD:EA:CC:D4:D7:4C:FC:C1
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       10F3F3
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/fa4515cff292f4a47f8a8e4dfd84a90febd77a66.roa
Signing time:             Wed 24 Mar 2021 14:44:28 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.248.103.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1111027 (0x10f3f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=fa4515cff292f4a47f8a8e4dfd84a90febd77a66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:73:41:c5:86:c5:46:27:21:26:2e:7f:5d:2e:
                    fc:c0:d5:eb:f3:ba:c4:a2:94:b5:25:87:7d:7b:d3:
                    b2:30:ae:d1:07:d1:74:b7:11:24:bb:df:a3:d1:f5:
                    94:6e:5d:74:5f:e3:35:c5:ec:f8:87:f3:3e:c7:37:
                    2b:ce:2b:02:cd:db:e3:3a:a8:63:bd:98:1c:7a:17:
                    97:e1:bb:a6:e7:8f:ee:1f:de:07:32:05:76:0b:33:
                    c1:a9:f2:50:23:32:68:d8:1f:60:9a:d4:a8:b2:17:
                    b1:f1:de:0f:ed:ed:71:a7:10:49:74:d8:b3:87:19:
                    8d:90:83:bf:ac:b2:67:58:b8:22:be:ee:29:40:e1:
                    97:13:72:12:83:69:a1:14:c0:72:24:e8:ab:b6:6f:
                    c5:2e:cc:8c:04:4d:f3:46:12:c5:90:47:a6:02:e8:
                    8a:62:b2:ba:a4:ca:6b:58:00:38:e5:45:cf:c4:fc:
                    5e:e0:16:09:f9:56:f1:14:d5:4f:fa:fa:58:b6:c0:
                    01:93:79:57:df:34:1a:84:cf:79:b8:5d:c1:26:ba:
                    41:dd:77:fe:ed:a7:e6:c3:2c:c1:06:4e:4a:1f:87:
                    6c:52:f3:5e:e7:69:7f:7c:9e:34:ea:3f:df:00:66:
                    0d:65:c0:16:cc:42:2c:b5:c9:49:19:e5:48:29:d8:
                    69:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D4:0E:83:02:F8:FB:FE:7C:E2:3C:4B:CD:EA:CC:D4:D7:4C:FC:C1
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/fa4515cff292f4a47f8a8e4dfd84a90febd77a66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.248.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:d1:f0:0c:cb:cd:eb:dc:b4:ff:c0:25:20:17:7a:38:22:8e:
         94:2a:2c:71:72:58:29:94:97:e1:9d:ec:97:e2:44:56:48:49:
         1a:b8:34:db:5e:06:4c:20:3d:7a:2e:bc:8a:4b:2a:cf:82:b3:
         e7:79:21:24:1e:aa:5a:38:04:23:a9:89:04:4b:ba:01:48:ab:
         1a:43:4b:f3:ce:78:85:40:d6:4d:a8:f5:69:dd:f6:58:5b:da:
         c7:f8:49:37:c0:42:0a:f3:94:44:bf:f9:a0:d9:80:72:19:d6:
         0d:95:be:f5:5e:f1:9c:44:39:aa:9f:28:1c:3f:8d:3d:d7:80:
         f5:1e:94:a1:f8:50:75:93:65:9d:8a:48:37:6e:59:1b:97:44:
         7a:4b:bd:06:a8:37:6a:85:fc:73:3c:b2:34:1e:05:f0:41:d0:
         02:a2:ba:40:a5:51:e6:43:7f:83:5a:2c:4a:90:69:67:eb:ec:
         0b:0f:67:ab:98:6e:c3:30:ee:7e:b2:a1:08:a8:d4:a5:03:0c:
         ef:94:63:af:53:e7:47:83:37:4b:31:21:12:2a:6d:b1:25:6b:
         ed:ca:8a:8e:b1:6f:4e:eb:dc:37:8d:5a:30:3e:d0:a1:bf:03:
         0c:57:af:73:98:54:2c:f1:f2:6b:e6:ba:86:e5:4a:f8:a1:f3:
         fe:09:2a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-ams.rpki-client.org