Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/eb112cef1eb7d212fbdba416065441c2244ad418.roa
File:                     eb112cef1eb7d212fbdba416065441c2244ad418.roa (raw, json)
Hash identifier:          GclPkkl9FPnCeQ/yxYhYVWPDEB8qfhaMoTGKXKY64dM=
Subject key identifier:   E8:3C:33:6B:ED:75:7A:C1:F3:E0:6B:A0:F5:1D:23:D9:F1:4F:8F:4E
Certificate issuer:       /CN=0306af81c270a60bd7a6b440bc97d420322ebcb5
Certificate serial:       1374B2
Authority key identifier: 4E:E1:F9:9A:52:D4:9D:50:D9:7F:85:62:7C:11:9B:73:97:86:B0:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0306af81c270a60bd7a6b440bc97d420322ebcb5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/eb112cef1eb7d212fbdba416065441c2244ad418.roa
Signing time:             Wed 10 Nov 2021 13:07:12 +0000
ROA not before:           Wed 10 Nov 2021 03:00:00 +0000
ROA not after:            Tue 10 Nov 2026 03:00:00 +0000
asID:                     263774
IP address blocks:        138.117.79.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1275058 (0x1374b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0306af81c270a60bd7a6b440bc97d420322ebcb5
        Validity
            Not Before: Nov 10 03:00:00 2021 GMT
            Not After : Nov 10 03:00:00 2026 GMT
        Subject: CN=eb112cef1eb7d212fbdba416065441c2244ad418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f9:d8:bb:d2:e8:9d:b6:20:39:60:33:64:ad:
                    34:07:88:55:b3:c4:de:66:54:1e:f7:07:38:08:1f:
                    be:08:56:74:d4:16:b4:d8:dc:ac:d9:3f:29:c5:51:
                    c1:ea:02:48:14:5d:26:31:61:0d:a1:ea:a1:c9:51:
                    5f:ae:28:f7:e2:72:92:50:15:db:72:72:bd:ca:f7:
                    81:b4:da:8b:ad:39:f7:44:7b:b8:9a:e3:60:0f:3f:
                    78:d1:8d:98:57:19:14:15:d7:39:5f:ac:ca:1e:58:
                    95:57:11:e8:7c:d2:9b:8c:50:34:d2:da:57:54:d6:
                    ce:80:13:f1:36:28:c7:f4:40:93:c1:62:32:b9:36:
                    1f:4c:0c:16:98:93:29:08:84:26:35:f2:13:77:9c:
                    ba:10:a5:d7:5b:dc:ab:8f:5b:f0:53:dd:5b:90:0e:
                    18:09:5c:01:e3:83:e6:58:61:bc:b6:74:74:e2:aa:
                    ad:97:ce:a9:c9:39:23:ad:a4:d7:fa:1d:1a:73:6d:
                    db:72:ae:a2:a4:cf:89:1f:60:84:70:34:47:2b:19:
                    64:55:ea:33:37:a9:d0:6e:05:72:8a:db:f9:cd:64:
                    59:cc:46:46:3b:77:45:b2:d3:35:25:ef:87:3b:ab:
                    f5:41:27:7d:ce:5f:f0:17:60:e2:fa:22:c1:19:46:
                    b1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3C:33:6B:ED:75:7A:C1:F3:E0:6B:A0:F5:1D:23:D9:F1:4F:8F:4E
            X509v3 Authority Key Identifier:
                keyid:4E:E1:F9:9A:52:D4:9D:50:D9:7F:85:62:7C:11:9B:73:97:86:B0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0306af81c270a60bd7a6b440bc97d420322ebcb5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/eb112cef1eb7d212fbdba416065441c2244ad418.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8e066124-dca4-4205-b594-90d392c3e32c/0306af81c270a60bd7a6b440bc97d420322ebcb5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:71:46:d9:9e:2e:64:ea:28:e6:fc:6a:73:68:82:a7:e6:d6:
         84:70:f7:85:34:8e:ef:dc:b2:48:d5:a5:db:d9:10:3b:c7:97:
         19:01:6f:64:85:1e:57:b0:b6:92:a6:1d:05:b8:b3:8b:1b:13:
         0f:e6:13:ff:99:c7:c0:f5:ea:59:b3:5b:5e:37:4b:5e:a2:b9:
         8d:19:e9:93:33:5e:d8:97:de:3a:bb:36:21:3d:f7:cf:de:a1:
         bb:7b:4c:d9:ba:be:c3:27:64:a9:dc:2a:c0:54:1a:be:c1:35:
         8c:fc:71:cd:32:91:ca:73:68:fd:96:86:3f:70:d4:70:c8:06:
         0c:48:8c:a8:1c:2e:81:c8:a0:88:91:6b:32:2c:6d:a2:1b:d7:
         82:40:52:b5:bb:30:4c:4d:d0:0a:4f:1f:2f:d2:67:b6:10:db:
         bc:7b:7e:e2:93:46:46:af:b3:e2:a9:97:f1:db:18:8e:2d:46:
         ad:63:72:81:df:28:4b:bc:19:6f:b6:01:c2:a7:c9:71:66:92:
         4a:23:d0:e0:48:6e:28:28:7f:3c:16:dd:28:b7:b8:32:b7:be:
         ab:98:7b:52:a7:03:06:f8:d9:6b:a1:1c:9f:91:84:2e:f6:83:
         93:db:f4:48:4c:b2:27:75:ff:50:4c:d3:de:4a:c5:47:39:a7:
         55:c2:c5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 8 11:44:00 2023 by rpki-client on console-ams.rpki-client.org