Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/f06ac81aca4a0fe3cfcd00479c5330149cd582e8.roa
File:                     f06ac81aca4a0fe3cfcd00479c5330149cd582e8.roa (raw, json)
Hash identifier:          ko4R3KVpEeIQuIAWGgQw87YZEk9i9q/NNr8lrKyNNSc=
Subject key identifier:   3E:26:61:45:88:10:75:9C:46:ED:A0:3A:69:DE:B2:03:7F:A8:58:00
Certificate issuer:       /CN=b0e4cadafcf7e03afe28925adf350f1286db7b25
Certificate serial:       1BE8BA
Authority key identifier: D6:91:34:D4:D4:A3:99:B7:77:15:94:69:EF:88:67:20:5F:C1:55:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0e4cadafcf7e03afe28925adf350f1286db7b25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/f06ac81aca4a0fe3cfcd00479c5330149cd582e8.roa
Signing time:             Sat 29 Oct 2022 14:07:56 +0000
ROA not before:           Tue 23 Mar 2021 14:47:41 +0000
ROA not after:            Tue 24 Mar 2026 14:47:41 +0000
asID:                     272874
IP address blocks:        138.186.6.0/23 maxlen: 23
                          138.186.6.0/24 maxlen: 24
                          138.186.7.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1829050 (0x1be8ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0e4cadafcf7e03afe28925adf350f1286db7b25
        Validity
            Not Before: Mar 23 14:47:41 2021 GMT
            Not After : Mar 24 14:47:41 2026 GMT
        Subject: CN=f06ac81aca4a0fe3cfcd00479c5330149cd582e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:70:27:52:36:25:e2:ee:8c:54:c3:04:e4:cb:
                    b9:13:a6:4e:0e:3d:0e:71:d2:00:ff:3d:80:09:54:
                    de:9a:f7:b5:3b:76:48:93:ab:9b:e9:58:86:84:93:
                    70:c8:09:59:76:47:1f:5b:f5:5e:b1:d3:64:d9:69:
                    fa:91:ed:cd:d5:6e:29:e5:b1:16:af:74:ff:68:6f:
                    69:07:cd:53:59:b1:10:0a:a5:87:13:e6:8b:2e:07:
                    16:fb:76:57:73:f8:19:77:62:86:7e:02:01:45:10:
                    c1:52:30:b4:8d:15:b6:ae:30:51:ed:18:68:82:9d:
                    41:fd:4d:f4:12:39:5b:b4:ef:69:e6:59:02:96:eb:
                    3a:c8:a8:29:70:0e:3a:a5:85:ec:f4:05:07:3b:34:
                    f3:77:6a:a6:4d:2b:fb:ec:64:be:e9:23:2c:2c:b9:
                    a4:d3:75:9b:33:4b:14:8c:fb:87:15:bd:09:78:ab:
                    79:a0:86:82:0a:eb:f3:6d:7a:30:8e:1e:69:79:96:
                    5f:7e:8e:d9:d5:65:0c:b6:78:72:6e:fa:cc:35:9a:
                    b0:ef:e3:d3:a1:c9:5c:1c:82:4a:f2:24:e6:fd:53:
                    e7:33:63:19:ee:2b:30:43:46:24:a2:f4:f2:6b:57:
                    fd:76:cf:a9:5c:00:68:53:42:72:51:85:f0:83:a6:
                    fc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:26:61:45:88:10:75:9C:46:ED:A0:3A:69:DE:B2:03:7F:A8:58:00
            X509v3 Authority Key Identifier:
                keyid:D6:91:34:D4:D4:A3:99:B7:77:15:94:69:EF:88:67:20:5F:C1:55:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0e4cadafcf7e03afe28925adf350f1286db7b25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/f06ac81aca4a0fe3cfcd00479c5330149cd582e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9d8b8faa-bbe3-4371-a95a-db197dfd3bbf/b0e4cadafcf7e03afe28925adf350f1286db7b25.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:87:22:7e:44:d4:74:7d:f2:72:66:94:6e:ba:7a:61:1a:20:
         0e:9b:4e:96:7f:a1:c7:a2:25:79:6d:19:df:df:57:35:07:75:
         42:13:ee:e0:9a:32:84:bd:ca:79:7f:cc:bd:bb:2e:e7:c9:f7:
         3b:f8:53:5b:4b:07:de:ce:78:68:b1:1b:c5:b7:fa:ae:4a:04:
         ad:b2:62:91:f0:ae:79:13:87:cf:81:17:f0:65:2d:ff:5c:cb:
         a9:22:4d:ed:43:75:da:b6:be:ff:6c:0b:fe:ed:aa:5d:82:65:
         ca:f9:45:bf:52:51:78:a0:64:61:27:c9:9d:47:7c:a2:77:ab:
         ab:5b:fe:d3:41:fe:1d:91:3a:85:e1:8b:36:9f:d3:fa:1f:8f:
         e5:e3:56:bd:0a:78:4e:8b:3d:37:a4:97:27:52:f2:fb:b8:62:
         86:66:b7:ff:e5:ae:f6:f6:31:b2:82:97:50:be:a4:0d:3f:0d:
         db:37:51:ce:3d:4e:d8:67:71:c8:35:c8:ae:5e:05:76:7b:8d:
         bb:c4:b5:f5:de:90:34:29:5f:53:be:18:e3:9a:b1:33:bd:9d:
         68:33:a4:3f:4a:5c:a8:ce:26:ab:a5:d7:1b:c6:28:59:b1:18:
         5d:9e:15:4d:d0:55:ee:ec:00:9d:9f:d8:13:43:6e:e9:09:8c:
         8f:ae:dd:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 29 03:39:18 2023 by rpki-client on console-fra.rpki-client.org