Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a23c971f-2262-44e6-b309-3f59bfc2d0f5/50c1470d54b98024091924bacb38b8877803be33.roa
File:                     50c1470d54b98024091924bacb38b8877803be33.roa (raw, json)
Hash identifier:          HntD0NHBsl4AOUKv7Xx0Wsewq/324XDoEC9PwpC8IeQ=
Subject key identifier:   DD:EC:6F:85:5C:02:91:CE:BD:74:DA:41:B0:0E:3A:DE:F0:63:D8:25
Certificate issuer:       /CN=b937c1111990e7b39c1f43b075333acd225a29b1
Certificate serial:       0D2F4C
Authority key identifier: 1E:DA:A3:9E:B6:3D:C0:32:7D:77:BB:5F:91:84:2D:3E:3B:A2:51:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b937c1111990e7b39c1f43b075333acd225a29b1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a23c971f-2262-44e6-b309-3f59bfc2d0f5/50c1470d54b98024091924bacb38b8877803be33.roa
Signing time:             Wed 24 Mar 2021 14:46:28 +0000
ROA not before:           Wed 24 Mar 2021 14:46:28 +0000
ROA not after:            Tue 24 Mar 2026 14:46:28 +0000
asID:                     28103
IP address blocks:        190.211.240.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 864076 (0xd2f4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b937c1111990e7b39c1f43b075333acd225a29b1
        Validity
            Not Before: Mar 24 14:46:28 2021 GMT
            Not After : Mar 24 14:46:28 2026 GMT
        Subject: CN=50c1470d54b98024091924bacb38b8877803be33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f4:22:de:dc:de:1b:26:47:e7:72:0a:37:3d:
                    e8:e7:78:36:43:c1:66:29:46:54:bb:06:9a:73:2f:
                    6c:6c:b8:50:72:25:9a:b6:59:34:13:01:22:13:74:
                    5b:0e:d5:b3:1d:89:69:92:20:a4:e5:df:3a:c7:57:
                    64:49:1e:c4:91:b0:aa:7f:f8:39:57:97:a5:0f:a9:
                    b3:7c:5b:60:5f:68:91:50:2d:ee:22:3b:a7:5c:3e:
                    8d:91:4c:1c:dc:c0:bf:30:51:bd:ef:e8:1a:cf:ac:
                    2c:24:83:84:e9:e1:77:ce:bb:22:98:c0:19:b5:ac:
                    09:c9:a8:58:76:85:67:7f:7f:c5:5f:95:9d:6d:b2:
                    bc:05:ff:6e:89:3e:4d:08:aa:a9:a5:1a:8f:08:c6:
                    39:dd:b4:97:d9:64:dc:42:54:16:00:44:10:48:8b:
                    91:e6:e2:96:90:af:88:e4:bd:43:32:da:ad:da:9b:
                    33:df:13:40:c5:98:f4:7c:a8:df:08:04:94:e6:b3:
                    39:8b:8b:58:74:c9:1f:1f:7b:1e:cf:6c:e2:cf:82:
                    91:d7:fe:95:84:98:83:2b:72:f9:f3:46:54:28:77:
                    f8:6d:9f:2a:60:1a:a8:48:df:8f:af:2f:ea:63:f2:
                    97:1e:f1:be:ab:c1:19:08:61:ce:db:dd:78:b4:a7:
                    b7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:EC:6F:85:5C:02:91:CE:BD:74:DA:41:B0:0E:3A:DE:F0:63:D8:25
            X509v3 Authority Key Identifier:
                keyid:1E:DA:A3:9E:B6:3D:C0:32:7D:77:BB:5F:91:84:2D:3E:3B:A2:51:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b937c1111990e7b39c1f43b075333acd225a29b1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a23c971f-2262-44e6-b309-3f59bfc2d0f5/50c1470d54b98024091924bacb38b8877803be33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a23c971f-2262-44e6-b309-3f59bfc2d0f5/b937c1111990e7b39c1f43b075333acd225a29b1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:57:e3:95:68:54:83:cf:d8:69:eb:04:7c:b8:09:7d:19:e4:
         08:f1:2f:78:d7:7b:6e:99:43:a8:fd:39:52:80:01:ab:38:38:
         2a:c7:b3:e0:9b:7f:87:f2:dd:4f:68:f8:dc:d7:2f:75:2e:98:
         2a:80:ee:e4:4d:de:3f:f0:3f:75:9e:fc:71:21:49:45:4a:7f:
         62:a0:31:f7:58:d7:d0:07:6d:87:04:4a:42:07:30:40:1c:b5:
         19:a5:a8:9f:aa:e3:73:3b:bd:da:61:2f:33:f9:ad:7b:0a:11:
         bb:fc:d3:5c:22:4d:a2:3b:66:f6:db:20:0e:65:6f:ec:fd:45:
         20:22:35:01:5b:4b:75:9a:ea:7c:c5:fb:f7:71:69:fb:fb:0f:
         8e:60:66:a3:cb:c3:42:9f:dd:b7:e9:3f:f6:1c:e8:6d:53:e7:
         75:8d:36:82:22:86:8c:c7:ed:91:54:73:4d:b6:9a:3c:1e:79:
         d0:36:e0:3d:88:19:b2:40:49:a1:39:27:22:e6:b4:80:51:60:
         aa:a8:39:88:76:88:4c:e1:ee:36:83:ff:17:dd:b6:97:07:a4:
         0c:c6:51:d2:6f:f9:a5:86:10:56:da:5a:4c:c1:bd:5a:cc:fc:
         ee:01:db:da:31:ae:8b:46:9d:eb:1c:3b:a4:4f:c2:15:7b:30:
         bd:65:b1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 17 12:42:54 2023 by rpki-client on console-fra.rpki-client.org