Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/28a168dfb0a236689a55eed0ccc6a48541e955e6.roa
File:                     28a168dfb0a236689a55eed0ccc6a48541e955e6.roa (raw, json)
Hash identifier:          8CHnyqZS2Bo7F9QjO8gmoNsPG2ZlEhbPEUYe62dS4ik=
Subject key identifier:   4B:32:46:CA:AA:76:5C:C3:5F:C0:11:A7:4B:F7:7F:BB:3D:16:80:95
Certificate issuer:       /CN=e236fe5f884f67f2db1476db2f3bd9ee0805fd2d
Certificate serial:       1A5D5F
Authority key identifier: 95:6B:09:3F:34:C0:F4:CC:D1:CA:90:D0:AF:93:DF:A0:86:B9:D6:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e236fe5f884f67f2db1476db2f3bd9ee0805fd2d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/28a168dfb0a236689a55eed0ccc6a48541e955e6.roa
Signing time:             Thu 01 Dec 2022 21:03:33 +0000
ROA not before:           Wed 30 Nov 2022 21:00:48 +0000
ROA not after:            Sun 01 Dec 2024 21:00:48 +0000
asID:                     267799
IP address blocks:        2803:bfa0:ff00::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1727839 (0x1a5d5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e236fe5f884f67f2db1476db2f3bd9ee0805fd2d
        Validity
            Not Before: Nov 30 21:00:48 2022 GMT
            Not After : Dec  1 21:00:48 2024 GMT
        Subject: CN=28a168dfb0a236689a55eed0ccc6a48541e955e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:78:62:bc:96:82:09:30:f3:ae:4b:13:08:aa:
                    64:3c:4e:03:e8:e2:92:81:09:7c:51:e6:d0:02:31:
                    fd:cd:a4:c0:7b:94:be:54:90:2a:b4:16:98:01:38:
                    94:7c:4b:31:15:80:ba:8a:91:5f:28:cb:c9:61:89:
                    21:37:09:66:95:18:93:49:46:2d:19:fd:d0:64:53:
                    35:2e:dd:cb:6b:1c:de:7d:8b:e9:57:ba:a0:40:a1:
                    95:a7:00:52:7b:ad:60:33:f6:39:c3:c1:bc:76:49:
                    e0:c5:fe:9a:9c:9c:92:01:99:23:d6:fd:7a:8f:6e:
                    22:ea:c9:c4:12:c0:ab:60:7d:ce:2e:e3:57:57:20:
                    46:2a:07:e6:fe:c4:1b:da:fd:1a:6e:3b:c5:f9:08:
                    45:d3:73:48:9a:89:55:64:19:16:69:ed:e6:a6:37:
                    92:2c:b1:01:15:14:6d:57:3b:6d:6c:56:55:83:2d:
                    eb:d0:22:4f:b4:e2:1d:a3:83:9f:48:da:b1:83:f9:
                    94:bd:f7:36:cc:b3:35:27:66:fe:6a:bf:75:9e:73:
                    c7:ce:fd:8a:fc:90:41:a3:71:ee:5c:c5:a6:6b:15:
                    ba:85:a4:68:37:3d:b4:0b:2b:c2:aa:c1:fe:79:21:
                    55:20:2b:7f:ea:63:a7:38:31:88:83:59:92:b5:dd:
                    7e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:32:46:CA:AA:76:5C:C3:5F:C0:11:A7:4B:F7:7F:BB:3D:16:80:95
            X509v3 Authority Key Identifier:
                keyid:95:6B:09:3F:34:C0:F4:CC:D1:CA:90:D0:AF:93:DF:A0:86:B9:D6:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e236fe5f884f67f2db1476db2f3bd9ee0805fd2d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/28a168dfb0a236689a55eed0ccc6a48541e955e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a8bc4ce2-61f7-49ba-924a-eb4fcd6e0f1f/e236fe5f884f67f2db1476db2f3bd9ee0805fd2d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bfa0:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         61:f5:e8:05:76:e7:01:d4:22:51:64:7e:c3:c9:c6:73:3e:79:
         82:8d:88:a2:58:55:95:50:1a:ae:5d:dd:e6:d6:30:51:64:79:
         bc:22:ed:e3:61:b1:e9:dd:8a:2a:fc:d5:56:82:91:ac:8c:32:
         d8:d4:f3:53:0e:0a:48:d0:21:40:fa:56:55:d9:ad:dd:3a:e1:
         35:3d:8d:9b:3b:23:d1:89:dd:cb:49:84:f4:34:d7:93:e8:34:
         38:5c:12:4c:9d:67:ae:71:76:50:5d:93:4e:71:a4:b2:bc:9f:
         0f:05:d2:6e:d2:ea:c7:f0:b8:a4:7b:56:d9:a1:c7:98:d5:84:
         55:a2:7a:91:c0:64:8e:67:8f:14:e9:a1:b6:5e:2d:3c:9e:92:
         db:22:b7:ba:1a:56:cf:93:46:10:9a:e9:e9:ee:88:db:27:db:
         37:70:f5:c4:68:dd:b2:aa:ec:a7:eb:01:02:c8:0e:b7:b0:b2:
         d5:e2:46:5a:5b:cd:ad:8a:c1:2e:98:17:6c:4b:81:1f:c2:17:
         cd:6a:1c:a5:bb:25:ef:ef:ee:64:02:d1:ea:83:98:ed:3e:29:
         23:ad:5a:72:fb:8c:1f:52:68:29:d9:c0:5a:5b:5b:b8:b8:8c:
         b5:5f:bd:53:7b:70:05:83:a2:40:ec:e3:69:1c:e6:e0:c7:13:
         d9:90:57:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:50 2023 by rpki-client on console-ams.rpki-client.org