Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/17ee7044d7e8d0b0edd77613e7a7cdf03f7d6bcf.roa
File:                     17ee7044d7e8d0b0edd77613e7a7cdf03f7d6bcf.roa (raw, json)
Hash identifier:          4YaMLJNjq7iq10JAJSfJyTRiXMudYd38FxdP+gmVuqY=
Subject key identifier:   07:56:B3:22:A1:41:8B:66:A3:1F:57:31:16:79:D4:96:99:7C:64:5C
Certificate issuer:       /CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
Certificate serial:       0903CF
Authority key identifier: 42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/17ee7044d7e8d0b0edd77613e7a7cdf03f7d6bcf.roa
Signing time:             Tue 28 Dec 2021 14:23:55 +0000
ROA not before:           Mon 27 Dec 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     270026
IP address blocks:        161.22.36.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 590799 (0x903cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
        Validity
            Not Before: Dec 27 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=17ee7044d7e8d0b0edd77613e7a7cdf03f7d6bcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:26:2e:74:6a:bd:2b:6f:be:ff:98:39:89:bc:
                    5b:de:54:ca:c7:6c:f5:a0:45:95:eb:6f:9d:2b:00:
                    df:f9:31:ae:f0:72:b1:c2:73:9c:2a:b0:cc:94:16:
                    66:67:74:75:9e:a1:87:fa:c6:c5:ff:74:b1:d6:fa:
                    bd:7c:2b:41:77:98:ba:65:c5:bf:27:f7:4e:0f:bb:
                    79:5e:0c:81:38:e5:6f:86:e7:77:6c:db:ec:d9:95:
                    6e:6b:b1:2a:56:3c:d6:2b:a1:bb:52:38:82:50:78:
                    2a:e8:2e:a0:b5:ad:e1:e8:15:24:65:be:dc:55:c8:
                    9e:9f:a3:93:e9:e8:71:32:51:48:f5:99:ae:9b:21:
                    bf:83:2b:fd:bc:07:f6:07:8e:7f:22:dd:8e:37:70:
                    65:3f:15:5f:5a:7b:e9:73:b2:a5:13:5f:d2:38:32:
                    3e:84:b7:78:2d:c0:a6:76:7f:26:cb:7a:d0:2e:c2:
                    ab:e9:10:ea:9c:0e:a9:5d:fa:dc:30:ec:38:af:07:
                    08:06:a3:bb:53:1b:01:fa:d2:e1:c5:b3:6e:66:67:
                    f3:d1:c6:7c:b8:61:e5:8e:26:96:67:01:25:e0:6c:
                    97:a9:8f:91:5c:06:72:23:c8:84:4b:ad:95:55:b1:
                    28:94:97:5a:e4:cc:53:bc:82:71:04:15:0e:77:00:
                    dc:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:56:B3:22:A1:41:8B:66:A3:1F:57:31:16:79:D4:96:99:7C:64:5C
            X509v3 Authority Key Identifier:
                keyid:42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/17ee7044d7e8d0b0edd77613e7a7cdf03f7d6bcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:fe:4b:9b:53:65:15:b1:d2:a8:19:02:2a:cb:86:1c:2c:87:
         8a:74:0d:80:37:c8:13:18:eb:48:43:30:c6:be:96:c2:6f:ed:
         1b:1e:6d:5e:4e:74:de:b9:e8:a2:b2:33:e1:4b:0d:3b:34:20:
         a7:a3:eb:f2:04:ac:ca:cc:ad:9b:35:e2:df:d0:32:fe:fb:e3:
         24:be:47:f4:f1:f2:09:07:b0:8c:51:99:a0:6d:e5:19:c9:72:
         6c:85:27:db:6d:8a:14:98:0f:76:d2:c4:db:79:57:b2:8e:8a:
         47:c4:64:1d:75:aa:83:71:d7:c8:58:27:af:2a:fd:72:bb:94:
         dd:ca:2c:3f:11:d7:95:f8:c7:e7:d6:e7:80:2c:85:74:8f:35:
         a4:a7:cf:22:78:64:e2:36:ea:b4:7c:fa:91:57:b1:ee:94:9b:
         4a:af:5a:c0:ae:a7:da:85:1d:0e:11:eb:ba:b4:84:fb:99:59:
         0c:ee:21:a2:91:f9:c7:56:d7:e2:7e:4d:e8:c4:5d:57:b8:5b:
         73:02:66:0c:f0:d8:ad:90:ea:d3:f2:a9:0c:cb:86:b7:1c:0e:
         30:69:86:3a:9e:c3:2b:6c:bb:56:b5:40:d4:e7:a7:a2:e7:b9:
         21:fa:8d:76:e7:36:3c:0e:fd:d4:42:4e:e1:f2:d5:0c:09:ac:
         09:28:4e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org