Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b86da1c-10b6-46c7-837f-cbf717b10524/c1124ef16af1045548c48888f4fe4a4190198a47.roa
File:                     c1124ef16af1045548c48888f4fe4a4190198a47.roa (raw, json)
Hash identifier:          93SH5z+U3p1ORh57+s2vPTxYVjWaf3Z6oBFmcqaxQac=
Subject key identifier:   99:E5:DD:32:AD:19:CC:DE:CD:8B:BD:22:55:BD:C2:99:A6:67:23:99
Certificate issuer:       /CN=31742366465ae7b8aabae7fbfcda60083162897c
Certificate serial:       0CEFE7
Authority key identifier: A2:78:13:93:22:69:C8:86:9B:20:FD:8F:4F:20:96:AB:54:EB:BB:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/31742366465ae7b8aabae7fbfcda60083162897c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9b86da1c-10b6-46c7-837f-cbf717b10524/c1124ef16af1045548c48888f4fe4a4190198a47.roa
Signing time:             Wed 24 Mar 2021 14:34:34 +0000
ROA not before:           Wed 24 Mar 2021 14:34:34 +0000
ROA not after:            Tue 24 Mar 2026 14:34:34 +0000
asID:                     263702
IP address blocks:        131.221.32.0/22 maxlen: 24
                          138.255.100.0/22 maxlen: 24
                          168.195.128.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 847847 (0xcefe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31742366465ae7b8aabae7fbfcda60083162897c
        Validity
            Not Before: Mar 24 14:34:34 2021 GMT
            Not After : Mar 24 14:34:34 2026 GMT
        Subject: CN=c1124ef16af1045548c48888f4fe4a4190198a47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:30:ad:87:28:a2:bc:c2:9f:ff:f8:9e:39:b1:
                    72:e3:4b:09:f9:f9:69:72:87:8f:50:6b:be:56:4c:
                    2d:5d:11:7a:34:60:08:a0:9c:c4:84:98:e7:0d:1b:
                    ea:75:a9:60:3a:19:78:10:50:04:19:74:b6:fe:20:
                    71:da:59:29:9e:c8:8d:99:9e:87:2f:c2:9a:cf:7d:
                    38:a0:69:86:cc:cb:b9:86:bb:fd:85:06:bb:78:e0:
                    c3:a6:e2:aa:d3:38:6a:03:a2:7e:9d:d5:6f:34:f1:
                    69:d4:c7:b4:66:01:28:bf:62:01:cc:c9:79:2d:f2:
                    ef:e3:fe:5a:3d:9b:7f:b6:d4:73:27:ef:64:8d:f2:
                    ba:66:77:44:ac:0e:3a:35:2d:97:02:2c:42:d9:c5:
                    43:72:b8:c5:ee:37:d1:6a:d9:ff:c2:e7:73:20:4c:
                    40:3a:2a:c9:c5:05:15:9b:d1:a1:3c:80:a3:e0:2a:
                    29:d7:e0:5a:d9:82:be:b5:b3:54:8f:d2:da:42:67:
                    84:ab:da:cc:35:88:08:22:fa:37:3a:3d:79:7a:6b:
                    cf:a8:2b:dc:81:44:ec:be:59:27:6c:c8:1b:9d:f7:
                    5a:d8:01:ae:11:3b:9e:69:57:25:9a:bc:0b:50:37:
                    8e:a1:a7:d0:8a:41:53:2a:ee:3b:6a:bf:0a:ae:f9:
                    30:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E5:DD:32:AD:19:CC:DE:CD:8B:BD:22:55:BD:C2:99:A6:67:23:99
            X509v3 Authority Key Identifier:
                keyid:A2:78:13:93:22:69:C8:86:9B:20:FD:8F:4F:20:96:AB:54:EB:BB:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/31742366465ae7b8aabae7fbfcda60083162897c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b86da1c-10b6-46c7-837f-cbf717b10524/c1124ef16af1045548c48888f4fe4a4190198a47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9b86da1c-10b6-46c7-837f-cbf717b10524/31742366465ae7b8aabae7fbfcda60083162897c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.32.0/22
                  138.255.100.0/22
                  168.195.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:fd:f0:73:2d:97:0a:f1:96:31:bf:8e:d2:16:0f:bf:83:3a:
         2e:42:3f:2a:0c:99:6b:66:be:d9:3f:86:b9:81:e0:73:9a:34:
         1a:da:00:4f:0b:96:8c:26:fb:06:ae:fa:0d:79:28:72:95:4d:
         8a:c0:91:35:0e:7a:8a:07:a8:06:be:03:e7:f4:f6:1a:8e:d9:
         03:c7:e5:b1:74:a8:f5:4d:9c:a5:f6:25:6e:b5:eb:6a:27:7e:
         30:a1:bc:d3:34:44:cd:8a:21:c2:2a:84:87:36:be:f9:0d:d5:
         b5:86:7a:18:76:b1:29:9b:42:04:b1:88:0f:f8:dc:10:18:b3:
         01:59:52:d8:cb:ff:29:e9:94:1c:6a:56:3c:b5:df:46:ab:c9:
         08:c2:c7:8a:e6:7e:bc:48:33:17:46:19:16:94:f7:0e:36:54:
         76:ed:8f:19:e3:70:d5:b3:e3:3b:13:bd:2e:91:d4:cf:92:90:
         f9:55:88:c9:da:ec:d1:56:70:6d:55:ae:92:43:34:bb:38:f1:
         a8:cb:a9:ee:a4:8b:c5:69:e3:64:ec:4a:63:15:47:22:ca:26:
         4a:25:fb:0d:fb:2f:d2:08:81:8e:65:be:84:70:5c:a9:0b:89:
         4c:f5:28:8a:93:60:10:89:45:e2:33:82:6d:4c:63:70:fb:b4:
         3f:74:83:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:32 2023 by rpki-client on console-fra.rpki-client.org