Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/96453540-fd50-46c4-95b3-f9f7d67f9f9f/3cbe86f545ee659aaaa7b1e847e55a0bbde881aa.roa
File:                     3cbe86f545ee659aaaa7b1e847e55a0bbde881aa.roa (raw, json)
Hash identifier:          akGct7ZCFtJS3bovLndQllB2OlkKYVNQMcOWeLBjLWE=
Subject key identifier:   16:9C:DB:D5:CE:32:29:D2:7F:0E:8D:F2:9F:B7:4C:5F:B4:10:53:C4
Certificate issuer:       /CN=0188a1fa54e685e6dab16384784db802887cbc4f
Certificate serial:       0D67AE
Authority key identifier: 8F:89:29:75:DA:D6:CC:A7:A6:48:69:18:80:6E:38:6B:88:24:B0:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0188a1fa54e685e6dab16384784db802887cbc4f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/96453540-fd50-46c4-95b3-f9f7d67f9f9f/3cbe86f545ee659aaaa7b1e847e55a0bbde881aa.roa
Signing time:             Wed 24 Mar 2021 14:35:08 +0000
ROA not before:           Wed 24 Mar 2021 14:35:08 +0000
ROA not after:            Tue 24 Mar 2026 14:35:08 +0000
asID:                     266747
IP address blocks:        138.122.200.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 878510 (0xd67ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0188a1fa54e685e6dab16384784db802887cbc4f
        Validity
            Not Before: Mar 24 14:35:08 2021 GMT
            Not After : Mar 24 14:35:08 2026 GMT
        Subject: CN=3cbe86f545ee659aaaa7b1e847e55a0bbde881aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2a:cf:ae:c2:dc:0c:8e:88:64:34:4c:dd:27:
                    a6:26:4b:d7:7a:5d:81:28:42:92:32:c8:b5:4f:92:
                    a6:9c:0b:42:48:19:2d:8e:84:75:c1:28:01:eb:ea:
                    7d:ce:1d:32:e6:92:70:a3:e5:73:4d:03:ff:7b:49:
                    8d:f0:c6:0a:76:25:d0:cb:57:7a:e9:c3:5d:43:95:
                    c5:42:19:0a:2d:02:3e:59:8b:54:19:62:0a:36:c5:
                    33:f3:b3:45:4c:ff:56:b4:3b:8b:b0:52:a8:fb:14:
                    04:9e:72:ed:0d:e7:5a:a2:85:c1:58:e8:7e:12:18:
                    5d:73:ff:a2:1f:bd:00:3e:a2:25:dd:77:99:e6:06:
                    71:9c:95:be:2d:53:48:99:9b:ee:57:5e:71:36:12:
                    2a:db:fe:ef:e7:42:79:54:31:c5:9d:8c:c7:23:e2:
                    5a:4e:c1:ac:dc:22:93:fb:d7:df:99:cf:79:18:a4:
                    b5:5f:05:d4:f9:33:a4:12:97:23:2b:bb:21:92:ed:
                    62:7d:1b:dc:c9:1c:f3:05:72:fb:99:93:22:83:d3:
                    06:0e:a4:52:f9:97:d0:d4:2b:dc:97:f4:6a:93:4d:
                    8e:b1:5b:81:ca:ce:94:44:96:60:02:5e:74:b3:06:
                    2b:97:f1:48:ba:5c:45:7b:3d:3c:53:e5:bb:79:b5:
                    87:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:9C:DB:D5:CE:32:29:D2:7F:0E:8D:F2:9F:B7:4C:5F:B4:10:53:C4
            X509v3 Authority Key Identifier:
                keyid:8F:89:29:75:DA:D6:CC:A7:A6:48:69:18:80:6E:38:6B:88:24:B0:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0188a1fa54e685e6dab16384784db802887cbc4f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/96453540-fd50-46c4-95b3-f9f7d67f9f9f/3cbe86f545ee659aaaa7b1e847e55a0bbde881aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/96453540-fd50-46c4-95b3-f9f7d67f9f9f/0188a1fa54e685e6dab16384784db802887cbc4f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:2c:8f:fa:7c:01:be:e9:12:01:68:af:c7:84:8f:54:aa:b6:
         81:13:1e:ab:86:75:1b:f5:90:56:91:86:3b:6e:c5:e9:d0:73:
         c8:e0:be:ac:8f:1c:81:fa:f7:02:32:aa:2d:91:e0:27:a4:fa:
         76:de:f0:5d:79:c4:74:df:d5:85:cb:8a:3c:b1:b0:36:d4:18:
         6a:8b:64:66:85:bc:bb:fe:8c:94:cb:8b:3c:05:18:34:71:12:
         c5:b6:a1:c8:c0:88:5a:fe:ef:c5:3d:7d:e4:08:d1:cf:66:bb:
         59:35:09:01:06:5e:82:aa:6c:86:bf:0d:48:c8:e1:3f:6f:12:
         1a:46:d7:41:0a:10:99:46:e0:bb:9f:8c:c2:92:8e:3d:98:33:
         28:56:ec:18:8c:a0:4c:bc:96:2c:6e:82:91:d1:e4:20:e6:f0:
         9f:92:2b:1a:19:80:dd:24:97:0c:e0:21:ee:05:6e:65:dc:21:
         e6:0d:8d:46:ea:a1:89:0d:52:07:06:b7:93:0e:fb:45:89:0d:
         c2:31:33:3e:59:44:b9:79:73:10:a9:66:5e:7f:fb:0d:95:3e:
         9c:e1:64:c0:2f:d5:cc:43:d6:bb:30:a6:2c:9a:99:58:55:ed:
         6a:52:cc:94:0a:0f:44:5e:77:bc:de:77:6a:6e:99:e7:85:69:
         bb:2f:27:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 7 19:36:37 2023 by rpki-client on console-fra.rpki-client.org