Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d350e74-9763-4abe-901c-40759415c66d/fc8df423acd2f7776b669e3f98a7ba50f92d663a.roa
File:                     fc8df423acd2f7776b669e3f98a7ba50f92d663a.roa (raw, json)
Hash identifier:          E1dY1bJW66I6iwEytQhMfgk2V+/8SEvZxW5edkBTx3c=
Subject key identifier:   B2:F1:04:E6:E0:6D:2B:D7:2B:F4:E1:25:0E:2A:EA:EF:2A:DD:9F:9F
Certificate issuer:       /CN=1ffcce79bd9c08a7a98d1dffb120685e7f3e2f74
Certificate serial:       0DE758
Authority key identifier: A1:E4:E1:3C:B6:59:EA:49:A5:D8:B1:A9:42:B5:D0:F6:16:93:58:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ffcce79bd9c08a7a98d1dffb120685e7f3e2f74.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9d350e74-9763-4abe-901c-40759415c66d/fc8df423acd2f7776b669e3f98a7ba50f92d663a.roa
Signing time:             Wed 24 Mar 2021 14:37:26 +0000
ROA not before:           Wed 24 Mar 2021 14:37:25 +0000
ROA not after:            Tue 24 Mar 2026 14:37:25 +0000
asID:                     52468
IP address blocks:        200.229.147.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 911192 (0xde758)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ffcce79bd9c08a7a98d1dffb120685e7f3e2f74
        Validity
            Not Before: Mar 24 14:37:25 2021 GMT
            Not After : Mar 24 14:37:25 2026 GMT
        Subject: CN=fc8df423acd2f7776b669e3f98a7ba50f92d663a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:96:e5:09:21:30:e2:96:f3:9a:7a:69:c1:9a:
                    c1:5d:4f:47:35:87:23:63:59:82:b8:e6:90:a5:05:
                    4d:36:6c:71:04:86:66:d3:24:ac:a3:7a:75:79:da:
                    06:30:59:71:f0:76:f6:56:aa:77:0a:c0:e7:de:51:
                    08:85:4d:63:87:33:d6:87:77:68:1d:8e:6f:f8:e0:
                    0b:6f:25:7e:0e:52:23:f9:48:8a:82:72:ec:c9:2b:
                    40:97:00:1f:a6:ae:ab:5e:c9:74:44:a1:98:fc:10:
                    a0:ce:49:43:1f:a3:38:90:21:aa:a5:72:1d:a4:e9:
                    b8:81:85:6b:44:c4:39:6d:79:cc:2b:f9:ad:19:49:
                    54:ff:fc:3d:01:b2:3c:c3:a3:b6:d6:f7:29:67:63:
                    a0:28:82:32:76:8b:4d:df:cb:06:ef:40:cf:79:7b:
                    00:25:88:43:e0:72:ae:93:14:e0:f0:87:20:3c:ed:
                    d7:fc:de:0b:34:07:56:6b:79:fb:9a:fd:8e:a3:4c:
                    1b:5a:d4:8a:96:f0:49:8a:7c:b6:41:fd:43:64:10:
                    6b:dd:e3:15:26:b3:7d:89:63:24:ed:ee:94:27:4e:
                    2c:97:d8:b5:42:7b:a3:e7:24:10:13:be:f7:c8:2a:
                    ce:b1:d6:ea:8d:c4:7b:75:49:4a:7e:28:24:42:b4:
                    e8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F1:04:E6:E0:6D:2B:D7:2B:F4:E1:25:0E:2A:EA:EF:2A:DD:9F:9F
            X509v3 Authority Key Identifier:
                keyid:A1:E4:E1:3C:B6:59:EA:49:A5:D8:B1:A9:42:B5:D0:F6:16:93:58:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ffcce79bd9c08a7a98d1dffb120685e7f3e2f74.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d350e74-9763-4abe-901c-40759415c66d/fc8df423acd2f7776b669e3f98a7ba50f92d663a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9d350e74-9763-4abe-901c-40759415c66d/1ffcce79bd9c08a7a98d1dffb120685e7f3e2f74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:05:14:e4:e3:3f:49:2c:29:1d:02:00:23:7e:3d:f7:ed:6b:
         1a:cd:d8:b7:ad:3b:d4:7b:26:81:6a:43:24:a6:33:f0:66:1e:
         56:4e:95:6e:4d:03:00:26:f5:17:4f:ab:7b:39:d3:cb:ec:6e:
         50:d3:db:0f:8c:0d:09:c9:12:cd:15:14:25:4c:5d:e3:be:70:
         1d:0d:5f:52:a4:16:78:0f:37:c9:3f:0b:35:5e:57:25:85:56:
         43:13:23:07:df:ee:cd:c9:0e:c5:f8:6e:20:45:8a:19:00:a0:
         36:c1:47:0b:b6:de:a9:96:a8:67:a6:6b:94:2c:cf:e4:a9:0e:
         6d:4d:5f:43:2d:a4:d8:d6:0a:48:9b:e5:6b:25:51:41:75:6f:
         1f:5f:df:c4:93:da:a2:5a:6b:1b:31:94:26:65:91:84:20:81:
         88:e2:dd:c5:e9:f5:5c:07:43:46:da:c8:23:68:ba:7b:e3:d1:
         91:3d:66:20:91:2d:75:6a:82:79:b5:ad:60:6b:e6:02:52:66:
         db:03:5a:c0:d5:43:81:e1:95:78:27:5c:bc:34:51:a4:25:57:
         6c:56:52:7a:42:93:1c:55:9e:61:92:37:92:8d:a6:5c:ae:a2:
         5b:25:f5:cb:ff:4f:2d:6f:a4:b9:d9:51:c6:d9:bd:ab:3b:c9:
         91:e1:b4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:32 2023 by rpki-client on console-fra.rpki-client.org