Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/01141337ca4fcc666609647683810304b8b3f70e.roa
File:                     01141337ca4fcc666609647683810304b8b3f70e.roa (raw, json)
Hash identifier:          C/cjHt0G87nbMaB9AYslNLpWizSR42hCRQBZx5IKc5U=
Subject key identifier:   AE:52:A4:F0:FE:4E:17:2A:72:76:E6:CF:A6:D4:88:57:C6:4C:CF:76
Certificate issuer:       /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial:       0A142A
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/01141337ca4fcc666609647683810304b8b3f70e.roa
Signing time:             Wed 24 Mar 2021 14:43:19 +0000
ROA not before:           Wed 24 Mar 2021 14:43:16 +0000
ROA not after:            Tue 24 Mar 2026 14:43:16 +0000
asID:                     18734
IP address blocks:        189.204.235.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 660522 (0xa142a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
        Validity
            Not Before: Mar 24 14:43:16 2021 GMT
            Not After : Mar 24 14:43:16 2026 GMT
        Subject: CN=01141337ca4fcc666609647683810304b8b3f70e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:22:27:67:09:4d:8b:51:d3:e2:36:c8:0a:59:
                    87:37:8a:9a:1c:29:7d:0c:f3:15:0c:52:db:71:6a:
                    b3:3d:bd:b3:5d:64:29:c3:7f:1a:dc:c4:ef:58:59:
                    e6:ff:06:af:8f:15:1d:2b:48:10:1c:cc:f5:84:5d:
                    12:e5:a2:8f:21:2b:d0:65:48:ab:d2:59:7c:81:91:
                    4c:8d:6a:c0:b2:2a:1a:53:00:17:c7:cf:fb:9c:4a:
                    f1:57:79:03:2b:1a:0a:c0:56:56:38:76:b0:58:99:
                    2a:a9:2e:d0:d7:e3:b2:08:77:87:16:e1:4d:f4:5e:
                    50:46:15:f6:ad:80:1b:00:80:b3:06:66:b9:fb:6d:
                    06:fd:42:04:99:34:22:b4:59:b6:10:d3:55:ac:83:
                    98:1b:43:b6:57:9b:d0:74:7b:39:0a:f0:f6:7e:77:
                    7b:94:c1:2b:9e:2d:95:c5:01:c5:9b:ba:4e:ad:d1:
                    1f:cf:2a:eb:f9:49:09:9d:1f:f5:b2:13:7b:51:80:
                    f3:d3:60:f3:bc:e6:10:4c:7e:cc:f6:96:cc:97:c8:
                    b4:55:cf:c3:a0:66:6e:1e:33:f8:63:42:a2:47:75:
                    58:5c:4e:37:72:b8:2d:08:ea:78:c3:df:bd:af:3c:
                    c6:42:59:81:88:04:ba:92:8c:c0:e3:e9:12:a6:70:
                    2c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:52:A4:F0:FE:4E:17:2A:72:76:E6:CF:A6:D4:88:57:C6:4C:CF:76
            X509v3 Authority Key Identifier:
                keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/01141337ca4fcc666609647683810304b8b3f70e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.204.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:20:e8:5b:30:dc:26:74:1a:af:3b:bf:20:38:39:be:a1:92:
         7e:61:0a:85:1b:dd:b0:4e:17:23:36:53:91:72:2b:a1:73:74:
         bb:fd:1e:9d:55:63:44:d1:bb:af:4d:60:01:d5:51:3c:35:54:
         d7:3b:c9:6f:c3:47:fc:eb:01:66:2d:0f:b7:8d:bd:36:44:6a:
         79:10:60:e9:8c:d3:35:8f:81:d0:05:cf:9f:52:f8:a6:47:b1:
         06:51:33:49:84:57:78:f0:bd:44:53:01:e4:d1:ce:95:92:36:
         ff:15:8c:78:26:ed:6c:92:41:64:ba:44:a5:25:7e:ba:e3:ae:
         86:f3:8a:8f:bf:03:60:40:cc:26:2c:e1:a5:7d:5d:53:f1:b7:
         ee:33:8c:7e:1f:7c:07:07:b5:ce:6b:7c:c6:b6:00:f1:7f:cf:
         c2:a4:a5:7e:3c:58:53:04:1d:c4:16:11:d0:fd:b6:1b:a0:4a:
         03:4b:ff:e4:4c:27:e3:7d:f8:34:35:ba:c0:b6:39:82:a1:9a:
         19:de:e9:db:50:b6:42:cc:bd:f2:c1:32:63:dd:64:51:f0:08:
         50:5d:4c:5b:ba:01:f2:e2:84:65:4c:20:02:be:a3:7c:e2:51:
         03:be:7d:35:2a:08:da:43:32:4f:df:94:3f:a4:f5:2a:e9:8e:
         c7:f7:36:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:34 2023 by rpki-client on console-fra.rpki-client.org