Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a23c971f-2262-44e6-b309-3f59bfc2d0f5/0960d15cbf56e1dd186d0aec5b564feb8eb25bb1.roa
File:                     0960d15cbf56e1dd186d0aec5b564feb8eb25bb1.roa (raw, json)
Hash identifier:          N2XgoECp6fdI5bOkP2OJikzTj+br7CKG0Flxg3pUsfw=
Subject key identifier:   A8:85:EC:03:99:91:26:22:5C:13:FB:33:BB:1A:8D:55:ED:E2:A2:64
Certificate issuer:       /CN=b937c1111990e7b39c1f43b075333acd225a29b1
Certificate serial:       0D3728
Authority key identifier: 1E:DA:A3:9E:B6:3D:C0:32:7D:77:BB:5F:91:84:2D:3E:3B:A2:51:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b937c1111990e7b39c1f43b075333acd225a29b1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a23c971f-2262-44e6-b309-3f59bfc2d0f5/0960d15cbf56e1dd186d0aec5b564feb8eb25bb1.roa
Signing time:             Wed 24 Mar 2021 14:46:29 +0000
ROA not before:           Wed 24 Mar 2021 14:46:28 +0000
ROA not after:            Tue 24 Mar 2026 14:46:28 +0000
asID:                     28103
IP address blocks:        201.222.48.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 866088 (0xd3728)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b937c1111990e7b39c1f43b075333acd225a29b1
        Validity
            Not Before: Mar 24 14:46:28 2021 GMT
            Not After : Mar 24 14:46:28 2026 GMT
        Subject: CN=0960d15cbf56e1dd186d0aec5b564feb8eb25bb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:eb:5e:29:f9:fa:dd:0b:1c:35:57:a4:db:0a:
                    1d:5d:8e:a3:19:c2:8e:79:95:9c:d2:13:c7:69:2c:
                    41:dc:36:e5:28:59:fb:fd:3f:d7:e5:a2:23:bd:1f:
                    19:d8:1e:00:6a:87:de:8b:8a:d4:d9:ba:64:22:cc:
                    a9:7c:e2:c9:a1:32:ca:34:03:88:37:d4:ac:d3:f1:
                    f3:a0:06:44:ae:8e:cb:64:29:ca:2d:77:a9:96:6e:
                    d9:79:70:5d:70:58:ec:35:6c:c8:46:05:8c:a6:2b:
                    67:36:cb:31:8f:7b:0f:97:64:13:8e:46:7c:f8:62:
                    28:dc:bd:2a:f1:53:24:04:3f:14:0e:bd:5b:ec:42:
                    b4:59:b9:a8:f6:f2:26:e8:02:44:7c:d5:c3:1d:c6:
                    55:b8:25:5e:9b:b1:33:39:09:1d:d1:ac:28:f8:38:
                    30:22:d3:26:fc:b0:1e:9c:0c:98:2e:ad:2c:a7:76:
                    9c:f9:3d:66:d3:87:70:04:15:37:c1:02:65:c7:d3:
                    44:14:e5:1d:4c:53:42:25:cc:08:2b:8a:68:6e:a2:
                    cd:4a:73:a5:14:5e:d6:46:d6:32:a9:0f:2e:f4:f5:
                    6a:e7:cc:ce:46:a3:79:b4:a2:c4:ed:d0:3c:b2:ad:
                    6d:cc:75:b0:ba:0c:78:0e:f7:a2:f6:88:94:cc:71:
                    d3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:85:EC:03:99:91:26:22:5C:13:FB:33:BB:1A:8D:55:ED:E2:A2:64
            X509v3 Authority Key Identifier:
                keyid:1E:DA:A3:9E:B6:3D:C0:32:7D:77:BB:5F:91:84:2D:3E:3B:A2:51:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b937c1111990e7b39c1f43b075333acd225a29b1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a23c971f-2262-44e6-b309-3f59bfc2d0f5/0960d15cbf56e1dd186d0aec5b564feb8eb25bb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a23c971f-2262-44e6-b309-3f59bfc2d0f5/b937c1111990e7b39c1f43b075333acd225a29b1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.222.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         57:be:8d:1d:af:07:fd:ff:b7:1a:35:30:9d:58:e2:ef:a1:ac:
         1b:42:44:56:cb:e0:a9:c8:1d:bf:07:1b:6c:f0:06:c5:da:f8:
         57:a4:7f:22:08:c3:f4:fa:56:ec:a3:ab:4f:ff:ef:4c:bf:30:
         3c:b1:fe:a5:ad:f8:a1:6a:90:e1:62:67:0f:b6:4a:94:ef:bf:
         f8:d5:82:43:a0:ff:43:13:7e:b6:fa:bf:79:38:ab:31:4a:ff:
         55:a2:ce:17:a1:4b:db:6b:6b:96:e4:0b:d8:42:06:5b:ec:e1:
         30:49:5a:b5:59:00:96:0f:87:d8:03:25:98:f1:44:e3:e4:c4:
         b1:e6:45:b9:09:67:ec:c3:fb:c9:27:0a:22:b3:b6:02:c4:f8:
         bf:25:41:33:59:bf:36:3e:07:7c:ac:3c:e6:5e:8c:f8:59:b9:
         95:83:01:63:bb:67:f2:0c:cb:7b:2e:35:04:0b:c2:14:13:73:
         22:92:45:cb:cf:9d:b9:17:ff:12:c3:92:b8:0f:02:0f:d9:41:
         26:59:9a:3f:d9:2a:83:af:79:76:a3:b3:cb:90:69:d0:6f:e9:
         44:1b:cd:25:03:71:3a:ea:08:0b:25:cf:08:a0:44:a2:8d:77:
         99:59:52:4c:db:79:61:4c:95:d7:90:b8:ed:d5:6f:10:cc:a5:
         f2:6a:9c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 17 12:42:54 2023 by rpki-client on console-fra.rpki-client.org