Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/96f7d5e3-6359-4e79-b6f1-8a4916ecfbf3/e1d4a373f56278894b4fc72753a70e4473206429.roa
File:                     e1d4a373f56278894b4fc72753a70e4473206429.roa (raw, json)
Hash identifier:          Xq6mrGXccUj54GbTj2F4QdzffxoGdlnxxiv/Ax8lHwc=
Subject key identifier:   ED:BE:4F:53:BE:C1:B5:1A:68:A6:2F:9F:6C:7C:F7:F9:0D:B3:25:E1
Certificate issuer:       /CN=010b9d9c696fcfc6fcf94f280d1b1174a54c09fe
Certificate serial:       0615CC
Authority key identifier: 4F:6B:F0:61:5E:B6:D2:E1:33:4E:13:A1:95:B5:87:F0:3C:27:0A:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/010b9d9c696fcfc6fcf94f280d1b1174a54c09fe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/96f7d5e3-6359-4e79-b6f1-8a4916ecfbf3/e1d4a373f56278894b4fc72753a70e4473206429.roa
Signing time:             Fri 04 Mar 2022 13:28:21 +0000
ROA not before:           Fri 04 Mar 2022 03:00:00 +0000
ROA not after:            Mon 04 Mar 2024 03:00:00 +0000
asID:                     263755
IP address blocks:        138.121.124.0/22 maxlen: 24
                          2803:6440::/32 maxlen: 32

Validation:               Failed, certificate revoked on Sun 03 Mar 2024 08:31:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398796 (0x615cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=010b9d9c696fcfc6fcf94f280d1b1174a54c09fe
        Validity
            Not Before: Mar  4 03:00:00 2022 GMT
            Not After : Mar  4 03:00:00 2024 GMT
        Subject: CN=e1d4a373f56278894b4fc72753a70e4473206429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:cc:22:38:52:34:47:82:85:c7:67:b5:b5:1b:
                    45:61:46:67:7f:6f:a1:9e:de:fc:2c:e7:d6:f8:9d:
                    e3:a4:df:c2:63:2b:2e:62:79:71:c6:02:4b:83:5b:
                    1d:08:e6:34:42:cb:c4:ca:63:2a:92:d5:c0:29:a5:
                    27:db:3d:7c:5b:03:cf:2a:da:6e:9e:dd:80:5f:65:
                    6a:f0:05:24:f5:98:71:85:c4:78:05:3c:fa:b9:41:
                    e7:bd:9c:5d:83:b4:6b:a9:bf:5a:8d:5e:c4:82:d2:
                    97:6c:2c:09:0e:01:14:28:33:23:03:f3:85:1e:fb:
                    35:da:7b:c4:19:9b:95:41:18:d1:4b:33:b3:e3:7e:
                    7d:fb:32:e1:9c:84:6d:dc:32:6c:bb:79:80:38:25:
                    75:9b:1c:b5:6f:2d:6e:5c:47:be:7a:45:72:a2:bb:
                    b8:42:64:18:30:34:1d:09:31:96:cc:4e:72:78:65:
                    7c:2c:5e:3d:f0:9a:fd:a5:42:84:b5:bf:57:a5:fe:
                    63:18:80:30:de:42:e7:9b:bb:87:5d:f5:b9:fe:84:
                    eb:eb:db:70:7c:f7:93:18:f2:0b:fd:f0:d5:4b:ee:
                    47:26:4a:0a:ce:f2:34:03:73:fc:3b:59:32:d5:65:
                    05:08:ef:81:69:fb:79:66:50:d1:32:5e:e9:ff:65:
                    0c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:BE:4F:53:BE:C1:B5:1A:68:A6:2F:9F:6C:7C:F7:F9:0D:B3:25:E1
            X509v3 Authority Key Identifier:
                keyid:4F:6B:F0:61:5E:B6:D2:E1:33:4E:13:A1:95:B5:87:F0:3C:27:0A:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/010b9d9c696fcfc6fcf94f280d1b1174a54c09fe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/96f7d5e3-6359-4e79-b6f1-8a4916ecfbf3/e1d4a373f56278894b4fc72753a70e4473206429.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/96f7d5e3-6359-4e79-b6f1-8a4916ecfbf3/010b9d9c696fcfc6fcf94f280d1b1174a54c09fe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.124.0/22
                IPv6:
                  2803:6440::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:d3:b6:09:40:37:a8:ac:43:cf:03:50:ac:b6:06:d1:f7:81:
         74:a9:b2:e7:d3:ab:a4:b1:ed:dc:fb:b5:af:c9:51:c6:7c:be:
         32:15:24:40:52:33:21:7f:ee:3f:c7:08:ab:61:b0:db:3f:81:
         12:78:55:97:80:a9:74:21:b1:bd:67:a7:c4:91:04:22:2e:74:
         aa:55:a7:b7:02:7a:5d:98:e3:12:c4:60:bf:63:e8:b2:f3:4b:
         66:1b:3e:e0:68:fb:32:40:24:11:0c:79:db:20:af:40:d3:f5:
         cb:3f:e6:6e:05:44:53:25:45:4e:78:b4:40:12:41:4f:e8:1a:
         5d:de:db:19:e4:71:30:1e:7a:02:99:4c:f6:2c:84:b0:ed:07:
         21:b4:76:f2:f7:97:76:c6:9a:17:14:e2:cc:e0:cb:53:22:77:
         18:ab:10:b8:7b:14:be:bc:fe:fc:10:e6:fd:86:35:11:8b:62:
         d1:30:03:32:88:95:7d:8e:59:88:5e:78:b6:4e:fa:85:40:50:
         2b:c8:99:cc:a4:0d:f4:a6:00:26:28:b2:8f:0c:72:1c:85:5a:
         c4:13:bb:42:0a:d2:fd:24:86:93:25:1f:b8:83:1b:d9:66:e4:
         da:97:32:0c:7d:58:e0:8b:16:c1:e1:ad:3a:ff:73:fc:10:3f:
         0c:99:da:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 3 10:18:17 2024 by rpki-client on console-fra.rpki-client.org