Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/fd64cf3710b97d9e0c9b5cd86fb044e39fbc151d.roa
File:                     fd64cf3710b97d9e0c9b5cd86fb044e39fbc151d.roa (raw, json)
Hash identifier:          ilE88egrRUWayR9Rv4rNo4pLrBV8CvlCvQ4efnptywA=
Subject key identifier:   9C:20:75:AE:86:F0:9C:71:C6:CB:C3:39:B4:7C:9F:58:D9:06:17:47
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       10D8D2
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/fd64cf3710b97d9e0c9b5cd86fb044e39fbc151d.roa
Signing time:             Wed 24 Mar 2021 14:44:27 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.247.71.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1104082 (0x10d8d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=fd64cf3710b97d9e0c9b5cd86fb044e39fbc151d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:19:f1:37:5c:20:42:2f:1c:bb:fd:88:a7:c0:
                    d0:1c:61:d5:de:87:d0:81:67:3a:2e:f0:65:70:b6:
                    69:89:8e:e3:1e:51:fb:36:2c:52:4b:d5:0f:cc:16:
                    b9:ed:a1:d3:85:e2:f4:84:74:4a:47:4b:61:6a:d2:
                    30:da:bd:17:da:da:11:4b:22:54:e9:8a:11:05:f1:
                    cc:d4:47:87:7c:8d:55:74:59:8a:2d:73:36:61:7c:
                    73:e4:f8:01:6c:61:18:f7:ec:3d:eb:74:26:45:c9:
                    08:28:46:52:76:45:a9:f6:25:15:a9:d4:74:dc:57:
                    71:b2:6a:1b:96:8c:c5:da:01:96:02:10:31:0c:70:
                    bd:09:d6:be:2c:fa:dc:4f:21:f5:fc:ee:21:60:76:
                    ba:21:43:a4:d6:28:54:a2:b4:25:b4:2e:c3:48:d5:
                    94:76:13:21:7a:45:08:0a:43:9e:35:2b:02:cf:6d:
                    de:14:07:65:c2:ea:85:04:bf:03:bd:4f:e2:bb:c6:
                    ad:4f:bd:f5:65:54:1e:0c:9f:c6:72:01:6c:0e:2e:
                    c8:05:a0:17:f2:57:e2:f7:95:58:dd:4a:a7:a1:ba:
                    de:93:34:cf:02:8c:25:88:ee:77:07:aa:ad:5a:c1:
                    d6:57:1a:3b:a0:e1:46:6a:95:e1:82:ea:55:f2:2c:
                    e2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:20:75:AE:86:F0:9C:71:C6:CB:C3:39:B4:7C:9F:58:D9:06:17:47
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/fd64cf3710b97d9e0c9b5cd86fb044e39fbc151d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:c1:9c:95:37:89:75:58:ee:00:80:9a:0a:15:3e:b2:56:08:
         bc:db:cb:63:b8:56:d4:99:16:e2:f7:22:cf:68:e6:47:02:4d:
         65:c6:ac:51:84:d8:c2:77:76:34:3f:bb:ed:3b:e7:4c:fb:ac:
         f4:40:a7:b2:85:3c:4a:05:d9:8a:ad:a3:76:39:61:81:97:73:
         51:45:51:66:1e:cc:e5:d4:ad:96:98:d0:58:53:98:7d:15:40:
         87:3f:03:c3:b9:7d:19:a8:fa:c9:55:ca:4a:17:b5:d2:64:43:
         4e:46:ae:92:96:09:89:17:ac:f0:4b:cb:cb:0d:20:fa:76:4e:
         e3:25:11:2a:22:1f:b5:cc:5a:7d:bc:70:ff:c3:47:f1:23:75:
         e1:39:2b:d1:c8:38:de:dc:35:a5:b9:0a:6b:5d:d9:6f:ba:13:
         c1:76:bc:de:b2:f1:f1:8c:f3:c5:97:02:e1:65:01:ee:e3:bd:
         a8:a5:4a:e3:94:43:e6:48:d8:bf:fb:24:48:19:e9:37:1f:5f:
         1e:7e:d3:41:fb:d9:72:87:c9:52:28:b6:a7:bc:8d:72:f4:b9:
         fb:c0:2d:56:64:e9:5f:7b:2f:32:b3:5b:cb:fa:b0:00:aa:4a:
         0f:47:12:03:9d:b1:06:03:46:ca:84:a9:e9:99:56:31:82:c8:
         00:c6:f0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-ams.rpki-client.org