Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/f6763abc7fb3a71cd5fe2bdf6e9b40a44e5fc471.roa
File:                     f6763abc7fb3a71cd5fe2bdf6e9b40a44e5fc471.roa (raw, json)
Hash identifier:          RTkd4WEoLSt6+ZACAO3tJ3ZticHfYU9wTvSenTxh/Ms=
Subject key identifier:   12:5B:A6:42:BD:15:8E:2B:4C:63:74:2D:5E:00:83:81:EC:46:1C:F3
Certificate issuer:       /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial:       0A0FF7
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/f6763abc7fb3a71cd5fe2bdf6e9b40a44e5fc471.roa
Signing time:             Wed 24 Mar 2021 14:43:18 +0000
ROA not before:           Wed 24 Mar 2021 14:43:16 +0000
ROA not after:            Tue 24 Mar 2026 14:43:16 +0000
asID:                     18734
IP address blocks:        189.202.249.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 659447 (0xa0ff7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
        Validity
            Not Before: Mar 24 14:43:16 2021 GMT
            Not After : Mar 24 14:43:16 2026 GMT
        Subject: CN=f6763abc7fb3a71cd5fe2bdf6e9b40a44e5fc471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:86:1e:de:8f:a2:32:37:eb:ec:12:e2:7c:4d:
                    e7:46:76:16:6d:f1:43:8a:5a:8e:b7:08:25:e6:06:
                    43:1c:64:7c:91:4a:3e:77:a5:44:e0:30:ab:e6:d1:
                    8a:7b:16:94:69:33:ed:b7:2b:c2:70:15:df:11:c0:
                    22:29:39:af:6f:6c:d8:77:39:db:51:ed:08:a1:4d:
                    9d:d4:aa:60:23:08:dd:d8:f2:dd:63:64:ce:cf:cb:
                    7d:c0:54:e3:57:ad:34:cf:53:4a:a0:30:dc:df:de:
                    98:21:ae:95:3b:dd:94:dd:08:cc:32:7e:39:45:b7:
                    cc:ac:91:4a:69:22:a4:30:66:12:32:80:3a:91:53:
                    10:6f:eb:12:04:fc:83:b2:3d:36:79:b1:88:12:ab:
                    7f:63:ce:9a:64:f9:0f:73:59:1f:ae:83:22:71:7e:
                    c0:8f:a1:2b:49:e2:ba:eb:1e:d6:c1:e8:07:e8:ba:
                    67:57:7a:ed:3d:9a:05:37:41:29:15:91:9c:54:61:
                    3b:07:f9:dd:f2:50:8c:2b:fd:6f:39:09:d9:0b:a0:
                    da:7c:7b:07:40:b1:51:6e:d0:aa:d3:7c:a5:3d:ce:
                    e5:f0:01:9f:67:e3:fd:4a:7c:af:ab:a3:15:a7:c0:
                    94:a0:13:d4:f5:b1:bb:5e:d7:4a:af:99:c0:6e:3c:
                    0a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:5B:A6:42:BD:15:8E:2B:4C:63:74:2D:5E:00:83:81:EC:46:1C:F3
            X509v3 Authority Key Identifier:
                keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/f6763abc7fb3a71cd5fe2bdf6e9b40a44e5fc471.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.202.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:1d:50:ae:70:23:63:5c:c9:3c:8e:60:11:dc:23:ae:1b:dd:
         09:46:3e:32:74:67:3b:5c:7d:d0:e4:cf:e0:9c:67:77:c1:3a:
         1e:72:a5:b1:26:46:4a:ef:46:a1:4b:c9:b7:ae:63:d5:52:e7:
         30:06:03:d9:38:e2:48:ed:54:14:dc:c3:ec:57:cd:52:87:6d:
         18:8d:13:f9:f1:6b:c6:34:5e:c9:86:08:05:97:09:22:40:09:
         82:ab:2e:c2:1a:f7:8f:a3:1f:52:3c:5a:7e:a8:e7:4f:de:a7:
         3c:3e:55:0e:10:20:02:5d:d7:ef:06:45:96:d6:f6:ea:53:9f:
         d3:cf:ab:6e:a8:4c:db:41:f5:81:ca:26:e8:41:ce:69:0f:ed:
         0e:de:f8:a6:7f:fb:cd:10:b5:d9:43:fd:a5:d9:6e:fb:28:8a:
         3c:58:00:ac:aa:04:5c:f6:ca:80:d5:f2:ce:0a:bb:9b:a0:dc:
         80:fb:21:8d:88:5e:c7:a0:ca:1c:c6:6b:80:51:5b:b1:fd:55:
         8b:c6:89:a3:c5:1d:93:da:e2:e4:33:cc:fa:be:21:00:c7:d6:
         f1:42:93:1b:54:9c:7d:5e:a7:db:97:ac:ca:6e:07:09:a1:2a:
         24:1a:f5:17:3b:5f:88:d4:f1:7c:ed:d4:25:84:37:dc:df:67:
         6d:3b:c7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org