Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/50c174c9e293a468023d256811d0e579f0dd46b1.roa
File:                     50c174c9e293a468023d256811d0e579f0dd46b1.roa (raw, json)
Hash identifier:          arTFhjoxu13NsFwQLCXSMSuEUgz/0PHeKK8K2WoDKoo=
Subject key identifier:   96:23:A5:3E:53:BC:98:F3:95:0E:4F:3A:01:DD:2F:AE:DF:91:FC:19
Certificate issuer:       /CN=0306af81c270a60bd7a6b440bc97d420322ebcb5
Certificate serial:       136CCD
Authority key identifier: 4E:E1:F9:9A:52:D4:9D:50:D9:7F:85:62:7C:11:9B:73:97:86:B0:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0306af81c270a60bd7a6b440bc97d420322ebcb5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/50c174c9e293a468023d256811d0e579f0dd46b1.roa
Signing time:             Wed 10 Nov 2021 13:05:04 +0000
ROA not before:           Wed 10 Nov 2021 03:00:00 +0000
ROA not after:            Tue 10 Nov 2026 03:00:00 +0000
asID:                     263774
IP address blocks:        138.117.77.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1273037 (0x136ccd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0306af81c270a60bd7a6b440bc97d420322ebcb5
        Validity
            Not Before: Nov 10 03:00:00 2021 GMT
            Not After : Nov 10 03:00:00 2026 GMT
        Subject: CN=50c174c9e293a468023d256811d0e579f0dd46b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:29:ed:92:ca:67:df:4b:4f:19:0a:cc:2d:e6:
                    1e:96:58:df:45:ab:22:7e:00:59:a5:ca:44:3d:a7:
                    dd:7a:ed:7f:48:02:86:ca:2c:ca:6c:87:0b:c1:b0:
                    60:8d:a7:cb:19:4c:68:fc:ab:aa:98:a5:72:3e:a0:
                    dc:e3:92:f6:e0:9e:7e:65:1e:c5:8a:a6:60:52:58:
                    0a:a3:53:71:45:64:c0:07:24:64:13:3e:38:4d:7c:
                    d8:5e:0b:55:a1:65:81:a2:7c:4c:8a:ec:02:e6:99:
                    ed:60:02:71:b7:92:06:94:97:cc:8b:50:04:66:f3:
                    6a:55:08:00:72:8d:f6:72:9b:0c:c2:e3:87:0f:59:
                    07:ff:26:10:26:4f:db:4f:a9:15:1a:09:78:0b:d3:
                    51:17:9f:c2:12:9a:57:6b:cb:26:f7:ff:16:d7:f1:
                    ad:f2:a5:98:55:a5:17:71:66:04:38:23:86:e1:3f:
                    3d:e4:7d:2a:57:5f:91:27:30:87:55:59:c0:4d:2d:
                    6a:a4:96:87:2d:68:20:e0:8b:f3:e7:52:ad:3f:61:
                    d9:c1:cb:ae:ae:d4:f7:94:94:33:2d:0d:a6:35:4d:
                    a3:ff:db:51:12:ef:2b:92:53:3f:3b:a7:0e:c0:5d:
                    3f:01:32:d5:7e:6b:92:75:9a:17:08:46:c8:6c:e7:
                    ad:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:23:A5:3E:53:BC:98:F3:95:0E:4F:3A:01:DD:2F:AE:DF:91:FC:19
            X509v3 Authority Key Identifier:
                keyid:4E:E1:F9:9A:52:D4:9D:50:D9:7F:85:62:7C:11:9B:73:97:86:B0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0306af81c270a60bd7a6b440bc97d420322ebcb5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/50c174c9e293a468023d256811d0e579f0dd46b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/0306af81c270a60bd7a6b440bc97d420322ebcb5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:26:7f:35:18:78:9c:c3:13:77:e1:14:1f:40:f5:2e:da:4e:
         0c:8a:a0:f0:f7:61:8a:45:97:b7:3a:c5:94:68:3f:e7:f2:e2:
         c2:f0:64:2e:6f:2a:f5:c2:e9:a6:cc:11:a9:0c:ec:9e:98:38:
         2b:2c:3f:6a:13:28:48:b2:16:95:30:0c:13:d6:63:e0:0f:ff:
         4f:db:d4:5c:e4:46:58:93:ba:c2:c1:e2:ff:7d:b1:46:2e:f1:
         66:b2:b5:b2:6d:c1:0c:f7:9b:6a:f0:e7:77:c4:09:69:22:40:
         27:c3:c5:e3:3e:75:a5:a8:f6:f2:bd:9e:21:47:10:0c:2c:ab:
         24:0a:26:60:81:de:3b:87:db:2d:bd:b1:04:38:b3:79:51:31:
         63:21:b4:7a:ce:9d:ac:db:6a:74:da:2c:66:58:e5:d6:7a:04:
         e0:3f:27:76:d5:9b:c3:e7:a3:ee:fd:16:b7:79:58:ff:90:c1:
         1a:0d:1d:cc:aa:1f:00:bb:ab:42:99:1c:ab:d2:9f:89:20:9d:
         fb:30:8b:78:2e:2d:94:d0:a7:76:bb:a1:0c:0f:78:29:da:19:
         18:96:ce:de:d7:a1:01:d5:a2:4f:20:eb:d9:07:22:8d:5e:2b:
         41:c1:5d:9f:d5:78:58:41:d9:da:68:d8:9b:4b:ad:b5:63:66:
         70:9e:20:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 8 11:46:54 2023 by rpki-client on console-fra.rpki-client.org