Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/882f24eeac2ba3784f853da4792fd0efc1f31cf4.roa
File:                     882f24eeac2ba3784f853da4792fd0efc1f31cf4.roa (raw, json)
Hash identifier:          jD/KR1uOtIIdklGz16L4jmmrjbf+tt7012+7ysdYlOM=
Subject key identifier:   CE:0A:29:19:13:CD:2F:01:6F:B0:7A:D1:63:0C:B8:7A:E3:A1:3A:80
Certificate issuer:       /CN=fbcc8ded40bc24937a2ae4fb7a521bd388ee024b
Certificate serial:       216FF2
Authority key identifier: 81:44:D0:EE:20:41:EA:AA:3B:7A:D7:C3:4E:65:02:F9:6F:AB:F8:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/882f24eeac2ba3784f853da4792fd0efc1f31cf4.roa
Signing time:             Tue 08 Aug 2023 08:30:00 +0000
ROA not before:           Mon 07 Aug 2023 08:30:00 +0000
ROA not after:            Wed 06 Aug 2025 08:30:00 +0000
asID:                     269862
IP address blocks:        138.185.14.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2191346 (0x216ff2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbcc8ded40bc24937a2ae4fb7a521bd388ee024b
        Validity
            Not Before: Aug  7 08:30:00 2023 GMT
            Not After : Aug  6 08:30:00 2025 GMT
        Subject: CN=882f24eeac2ba3784f853da4792fd0efc1f31cf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:93:3f:01:00:3a:05:ae:08:7b:e4:2b:cf:d2:
                    1e:4e:ce:15:b5:dc:27:c8:c8:cd:5f:cc:81:1d:73:
                    8d:57:39:e1:0d:c3:18:79:08:9f:e4:8d:1f:4b:07:
                    3b:e1:52:69:6d:65:e6:8c:26:23:50:f0:0a:87:a9:
                    e1:26:45:29:26:cf:01:65:b6:4e:7a:47:d3:3d:cb:
                    43:2f:2e:17:97:3f:12:7d:e9:d8:44:50:de:94:df:
                    d8:53:03:03:d6:b4:46:27:1c:81:b6:b7:56:d1:ef:
                    34:f2:f5:d3:45:5d:ed:f2:49:e1:08:79:03:fb:a9:
                    71:a4:58:47:4c:53:7c:63:6a:09:ad:aa:a8:96:a6:
                    5b:1f:ec:41:cd:e7:9a:9b:94:1a:2f:56:b9:1e:4d:
                    b5:5e:9f:5d:6f:1c:72:7f:51:f9:a8:86:f5:54:08:
                    00:f2:88:a7:db:1c:98:5f:c2:e5:a0:83:e7:16:3d:
                    bd:ca:ac:b7:ea:f3:24:a1:73:ed:a1:07:b4:a5:c6:
                    72:dd:da:4d:04:6e:50:34:e0:3b:ba:7e:9a:7a:9b:
                    c0:75:9c:7b:2e:2b:7f:84:26:b2:6e:3a:db:96:30:
                    5e:af:c1:f7:b6:33:1f:3d:db:5e:c0:cc:aa:54:a1:
                    fc:34:95:1b:d7:75:66:cc:ac:1b:6a:56:da:87:d0:
                    c0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:0A:29:19:13:CD:2F:01:6F:B0:7A:D1:63:0C:B8:7A:E3:A1:3A:80
            X509v3 Authority Key Identifier:
                keyid:81:44:D0:EE:20:41:EA:AA:3B:7A:D7:C3:4E:65:02:F9:6F:AB:F8:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/882f24eeac2ba3784f853da4792fd0efc1f31cf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:60:27:df:d9:eb:7a:16:4b:2d:43:d7:8f:e5:23:11:3a:ba:
         29:b2:22:34:1a:f2:29:bb:73:a6:5e:ed:2f:b8:6d:9c:6d:05:
         37:dc:40:07:18:cd:ae:65:1c:78:eb:de:bf:1a:97:37:7f:24:
         5a:b9:7f:81:ea:6b:a6:63:e9:5f:2b:b1:3a:32:c9:a3:91:62:
         6f:64:cf:88:48:7a:09:65:ad:c4:95:ea:64:2f:bd:9c:6f:c9:
         55:d4:c2:52:fb:b7:b4:40:27:05:ed:f0:00:30:7f:69:2e:ec:
         61:38:5a:97:7b:8d:38:bc:4f:3f:2e:25:f4:77:9d:70:e1:d9:
         7f:cd:54:8f:ed:d0:47:7d:00:39:f7:91:f5:f6:d1:f0:3b:ee:
         fd:8c:b2:c5:2e:01:77:16:89:72:91:7d:2c:c8:62:04:a1:fe:
         35:ae:30:76:a8:06:ef:3e:ca:ae:17:9b:71:4c:67:eb:a8:2d:
         37:bd:d0:12:9c:70:80:50:b3:06:ea:01:4e:f4:ca:ce:10:53:
         6b:cc:29:32:ab:46:3c:99:06:ab:3f:dd:b6:0d:cf:f3:bc:26:
         46:96:0d:96:d6:46:e6:70:50:22:2d:80:6e:45:de:5f:24:97:
         13:c1:2a:b5:52:bb:30:4a:c9:7b:9c:da:39:ff:4e:33:02:0d:
         f9:0c:44:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 20 05:16:42 2023 by rpki-client on console-fra.rpki-client.org