Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95768f2d-c858-4ead-b85c-580ee3c53caf/ce49557068872c32008fd9cb8bf5b217aef2d770.roa
File:                     ce49557068872c32008fd9cb8bf5b217aef2d770.roa (raw, json)
Hash identifier:          eKc/ZdkKa/eMipp83Vquy+0Zo5OPGMqbR0IKBIupTlY=
Subject key identifier:   94:1F:72:E2:09:F4:D4:BA:93:6A:A6:47:A7:13:71:58:C8:F5:01:E8
Certificate issuer:       /CN=637d8fdc4535b0e4099c644d47106ef014aaaeea
Certificate serial:       0D33FA
Authority key identifier: 48:34:2B:6E:D3:2F:1C:9A:0E:26:05:34:12:EA:A7:7F:83:5F:25:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/637d8fdc4535b0e4099c644d47106ef014aaaeea.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95768f2d-c858-4ead-b85c-580ee3c53caf/ce49557068872c32008fd9cb8bf5b217aef2d770.roa
Signing time:             Wed 24 Mar 2021 14:32:47 +0000
ROA not before:           Wed 24 Mar 2021 14:32:47 +0000
ROA not after:            Tue 24 Mar 2026 14:32:47 +0000
asID:                     27792
IP address blocks:        143.202.24.0/22 maxlen: 24
                          170.84.212.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 865274 (0xd33fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=637d8fdc4535b0e4099c644d47106ef014aaaeea
        Validity
            Not Before: Mar 24 14:32:47 2021 GMT
            Not After : Mar 24 14:32:47 2026 GMT
        Subject: CN=ce49557068872c32008fd9cb8bf5b217aef2d770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:22:93:47:51:a0:f3:9a:2f:7d:95:74:54:99:
                    0a:8b:7d:7a:68:f1:10:72:ca:aa:8a:79:a2:d2:8e:
                    68:5a:6a:9e:f3:14:a4:b6:14:3e:fb:a7:52:05:a2:
                    3b:9a:3d:7d:b6:67:b2:d2:5f:07:eb:2b:48:d2:6f:
                    72:50:97:4c:fe:2a:e5:5d:ed:14:6c:bd:eb:af:96:
                    b7:5f:8b:9d:31:36:72:90:ab:0a:01:54:d8:80:f0:
                    e9:03:a3:65:8f:d1:52:b9:ce:4a:8d:d5:0b:13:7f:
                    d5:82:cc:b1:06:38:6a:8d:ab:4f:78:44:92:68:93:
                    b3:04:e0:43:aa:cf:2e:cb:ee:51:6d:c8:74:f4:17:
                    95:e8:a1:b5:f8:77:63:29:06:e0:a0:2d:4a:96:08:
                    ee:d0:ed:9a:c4:de:9c:2f:7a:2e:d5:c6:62:36:a8:
                    0e:d9:5f:35:f2:e0:3d:68:d4:97:0a:76:77:57:18:
                    67:10:ab:3b:bc:7d:5d:89:ca:08:05:81:1a:92:0a:
                    28:b8:37:53:8d:86:fb:89:3c:2b:74:62:3b:76:33:
                    71:5b:35:e7:7b:9a:7f:bd:b2:77:cd:ad:28:cc:89:
                    7f:fd:db:09:0d:d2:70:84:20:da:b5:f3:df:15:e7:
                    39:6b:88:ae:ce:b1:e9:cb:41:4a:f2:aa:ca:6e:58:
                    bc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:1F:72:E2:09:F4:D4:BA:93:6A:A6:47:A7:13:71:58:C8:F5:01:E8
            X509v3 Authority Key Identifier:
                keyid:48:34:2B:6E:D3:2F:1C:9A:0E:26:05:34:12:EA:A7:7F:83:5F:25:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/637d8fdc4535b0e4099c644d47106ef014aaaeea.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95768f2d-c858-4ead-b85c-580ee3c53caf/ce49557068872c32008fd9cb8bf5b217aef2d770.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95768f2d-c858-4ead-b85c-580ee3c53caf/637d8fdc4535b0e4099c644d47106ef014aaaeea.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.24.0/22
                  170.84.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:f6:6e:19:f6:ab:b0:ff:1e:3d:07:c3:c9:07:d5:a4:9f:eb:
         f2:df:c2:5c:74:ef:13:39:ba:9f:08:58:00:29:41:0e:71:fa:
         7d:d5:95:fc:1d:94:c7:85:e3:26:7c:ff:9d:89:7b:3f:54:85:
         eb:ed:07:82:a4:c3:15:96:bb:60:4d:66:05:f0:bf:7a:9b:7b:
         9b:8b:c5:c6:b4:5b:23:e8:40:9f:d4:25:f4:b0:78:5e:99:e2:
         92:f9:fe:67:53:86:1a:89:32:32:fc:03:b9:7d:dd:6e:24:63:
         b5:ce:07:4d:c6:b6:fc:0b:bf:7b:93:20:29:e6:eb:88:16:a5:
         d4:f5:c0:7e:e6:ec:3a:43:c7:1d:59:70:23:2c:67:55:5f:9c:
         fd:6b:95:d4:18:58:8a:0c:91:d5:77:8a:92:f2:47:56:94:04:
         ab:97:8b:a1:9a:5c:d6:b6:59:a5:af:31:1a:ff:d4:5a:b6:a1:
         87:c7:29:e6:db:ed:1e:21:f7:01:0f:32:77:8b:f4:7e:d1:39:
         30:96:29:20:19:97:bd:d2:f3:55:e6:bb:0d:a6:11:fc:4e:49:
         d7:fc:22:2b:4e:02:36:c1:f9:01:80:f4:24:d4:fc:6b:6b:d9:
         ef:7b:09:ea:7d:22:d5:cc:2b:1f:f3:d0:fe:c6:8e:43:d9:e5:
         58:aa:e7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 16:15:06 2023 by rpki-client on console-fra.rpki-client.org