Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93f4ac0f-16d0-4b72-a294-a003b518b791/0d3dcde2efa8e943e7a0631dea2dca14cf9f9818.roa
File:                     0d3dcde2efa8e943e7a0631dea2dca14cf9f9818.roa (raw, json)
Hash identifier:          myjM4O/sfsrH7dallNb5UfUZ/zTxZSJbeqeCDoI7X7E=
Subject key identifier:   01:F6:43:46:E0:7A:62:03:05:EE:C7:C5:F7:F0:B6:56:09:0C:8A:F1
Certificate issuer:       /CN=d7e93f6af1f07bb8ddc6b073ba6a351e401c4f18
Certificate serial:       3F13
Authority key identifier: 53:64:0D:CF:4A:3B:80:76:09:CE:5A:E2:1E:06:95:18:BD:14:C8:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d7e93f6af1f07bb8ddc6b073ba6a351e401c4f18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93f4ac0f-16d0-4b72-a294-a003b518b791/0d3dcde2efa8e943e7a0631dea2dca14cf9f9818.roa
Signing time:             Tue 06 Apr 2021 21:06:21 +0000
ROA not before:           Tue 06 Apr 2021 03:00:00 +0000
ROA not after:            Sat 02 Apr 2022 03:00:00 +0000
asID:                     28005
IP address blocks:        168.121.128.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16147 (0x3f13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e93f6af1f07bb8ddc6b073ba6a351e401c4f18
        Validity
            Not Before: Apr  6 03:00:00 2021 GMT
            Not After : Apr  2 03:00:00 2022 GMT
        Subject: CN=0d3dcde2efa8e943e7a0631dea2dca14cf9f9818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a5:a7:66:3e:43:f5:6a:e9:91:1d:f7:67:1b:
                    06:35:cc:c5:96:18:4a:04:c4:e3:03:71:4e:bb:07:
                    c5:2a:5d:82:86:7b:90:89:a3:56:a3:9f:3c:86:21:
                    f4:b4:94:7c:ca:5d:8e:3b:95:37:a1:b8:39:28:e4:
                    60:b7:00:69:45:fc:fe:88:a3:9d:14:d9:db:f6:ca:
                    1f:14:30:72:e3:8b:c6:39:bc:ef:c2:04:3d:d7:bc:
                    35:56:24:52:9c:2b:d7:6b:32:fc:38:fa:fd:d2:5f:
                    0d:58:66:c5:d5:50:b9:61:3a:ff:11:7a:41:b9:4b:
                    b9:6c:e5:22:78:36:05:d0:92:79:a3:ec:f3:5e:04:
                    61:d5:8d:79:cc:d1:37:9e:a1:c3:67:b6:d0:d9:c7:
                    7b:b7:f8:ed:65:32:bc:87:59:7f:0e:32:0b:2c:43:
                    7f:58:07:2e:aa:53:ee:85:eb:cb:00:df:7d:63:28:
                    b0:4f:af:b5:14:be:21:1b:82:7a:da:cc:d8:37:a6:
                    e6:c0:3a:c5:6c:30:44:36:e0:9c:13:92:d1:a5:c2:
                    59:69:8b:c9:7a:0c:2c:55:47:08:43:ba:d7:91:90:
                    2c:35:b9:25:66:f8:02:d2:9d:09:27:d1:be:85:6c:
                    72:06:12:e0:9a:2b:1c:8e:2d:75:4c:6c:9c:a6:b2:
                    fe:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F6:43:46:E0:7A:62:03:05:EE:C7:C5:F7:F0:B6:56:09:0C:8A:F1
            X509v3 Authority Key Identifier:
                keyid:53:64:0D:CF:4A:3B:80:76:09:CE:5A:E2:1E:06:95:18:BD:14:C8:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d7e93f6af1f07bb8ddc6b073ba6a351e401c4f18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93f4ac0f-16d0-4b72-a294-a003b518b791/0d3dcde2efa8e943e7a0631dea2dca14cf9f9818.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93f4ac0f-16d0-4b72-a294-a003b518b791/d7e93f6af1f07bb8ddc6b073ba6a351e401c4f18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:14:f9:39:55:43:d6:6c:83:af:83:11:71:f6:1f:b9:49:d1:
         37:c8:c2:cb:1d:78:59:40:b9:9b:9e:25:2d:79:07:93:a7:e4:
         8d:48:21:05:ee:45:cc:80:75:ed:3f:77:00:ed:07:0d:91:ad:
         ab:1a:3c:96:a5:a9:61:01:15:fc:b5:8f:15:b3:7c:9f:b4:4a:
         72:d7:54:cb:78:df:89:c8:ba:96:07:41:f1:b8:56:94:34:4e:
         9c:f6:45:dd:86:70:3c:27:0d:a9:9b:38:f0:92:93:a4:52:9a:
         1f:66:ae:09:29:fd:21:0b:5f:0b:f2:13:74:ce:f5:70:b8:49:
         67:53:50:08:80:a3:ff:32:0a:d1:14:9d:1f:92:09:29:be:20:
         56:a4:aa:d1:92:fe:8b:7f:27:99:58:b9:4c:1a:62:57:98:ef:
         dd:3a:a0:29:b4:0b:68:76:c9:c0:d1:cc:6e:b6:b6:22:c0:f5:
         cb:e5:7f:c2:00:e6:d9:db:fa:5a:2c:c7:13:ae:0b:71:30:ed:
         d5:44:9b:ea:fa:ee:99:5e:c3:66:10:20:76:b1:43:eb:df:38:
         fe:e9:fd:a6:4d:f0:a1:ac:15:4c:d5:69:ca:a4:78:f7:fb:76:
         2a:65:c8:66:ed:f4:df:94:55:f5:12:c3:ea:0d:54:94:32:71:
         60:f1:76:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:31 2023 by rpki-client on console-fra.rpki-client.org