Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/2eeafd5a54546edc7cc3d4295e212717169a551e.roa
File:                     2eeafd5a54546edc7cc3d4295e212717169a551e.roa (raw, json)
Hash identifier:          78zj9IE+B8psMYGUkDFq0mWbIC3GMC2H6UaSIdr0G6A=
Subject key identifier:   70:B6:A1:C3:C2:D7:63:B1:AA:90:91:3D:BD:0C:9D:14:74:66:80:3C
Certificate issuer:       /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial:       20D452
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/2eeafd5a54546edc7cc3d4295e212717169a551e.roa
Signing time:             Tue 24 Jan 2023 19:04:16 +0000
ROA not before:           Fri 19 Mar 2021 14:35:22 +0000
ROA not after:            Tue 24 Mar 2026 14:35:22 +0000
asID:                     26619
IP address blocks:        190.90.25.0/24 maxlen: 24
                          190.90.26.0/24 maxlen: 24
                          190.90.27.0/24 maxlen: 24
                          190.90.33.0/24 maxlen: 24
                          190.90.35.0/24 maxlen: 24
                          190.90.56.0/22 maxlen: 24
                          190.90.155.0/24 maxlen: 24
                          190.90.156.0/22 maxlen: 24
                          190.90.160.0/22 maxlen: 24
                          190.90.164.0/22 maxlen: 24
                          190.90.168.0/22 maxlen: 24
                          190.90.178.0/23 maxlen: 24
                          190.90.180.0/22 maxlen: 24
                          190.90.184.0/24 maxlen: 24
                          190.90.185.0/24 maxlen: 24
                          190.90.186.0/24 maxlen: 24
                          190.90.216.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2151506 (0x20d452)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
        Validity
            Not Before: Mar 19 14:35:22 2021 GMT
            Not After : Mar 24 14:35:22 2026 GMT
        Subject: CN=2eeafd5a54546edc7cc3d4295e212717169a551e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:32:d8:d0:28:71:c1:35:79:05:f2:83:16:6e:
                    1a:c2:69:31:c4:18:ba:0e:93:3a:c5:d4:ea:f2:80:
                    47:95:2b:da:0c:db:42:a1:26:65:7c:b5:c6:f8:04:
                    1c:b3:b6:71:08:d8:85:16:47:28:a1:c2:e8:1a:87:
                    68:03:d8:f2:e1:72:ed:7b:61:78:d3:b5:86:c7:a6:
                    cb:45:42:b1:43:a1:3b:45:94:c1:a5:95:70:66:8e:
                    53:b6:d9:4b:2a:d6:74:3f:f8:4d:29:fc:b1:a4:9a:
                    61:7e:be:5d:b8:15:f6:4d:55:d0:7a:4c:ac:3e:56:
                    2d:f7:f6:55:6f:56:f1:e3:e6:61:9d:e0:08:9f:be:
                    45:eb:91:ab:64:b0:8d:5b:ce:4a:82:e7:58:c6:0b:
                    e8:f6:e0:bd:52:31:47:a9:28:2e:8a:34:11:93:9f:
                    79:d0:43:35:83:15:c4:89:26:54:bb:c9:d8:8c:e3:
                    94:33:19:96:13:75:b2:36:91:1c:7f:0b:c0:96:4b:
                    2e:46:c8:4f:90:a0:65:dc:b7:c3:5a:19:f9:6d:1f:
                    3c:42:38:7b:89:82:9b:dd:b5:b3:2b:f2:68:14:a6:
                    36:e9:64:a1:16:44:26:5c:6f:51:f2:cb:e5:d6:ec:
                    f0:42:40:21:c8:1e:7f:0e:5d:88:b4:ca:b6:8d:0a:
                    4d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B6:A1:C3:C2:D7:63:B1:AA:90:91:3D:BD:0C:9D:14:74:66:80:3C
            X509v3 Authority Key Identifier:
                keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/2eeafd5a54546edc7cc3d4295e212717169a551e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.25.0-190.90.27.255
                  190.90.33.0/24
                  190.90.35.0/24
                  190.90.56.0/22
                  190.90.155.0-190.90.171.255
                  190.90.178.0-190.90.186.255
                  190.90.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:af:db:63:78:35:32:19:c4:31:87:6e:b8:03:8c:3a:c6:7d:
         cc:56:0e:6b:3d:f7:ec:12:45:52:4e:5a:a2:f3:e9:20:e9:e1:
         d2:3d:91:78:a6:93:d2:92:a4:af:c7:0c:88:40:c4:91:5b:14:
         6e:29:2f:ab:04:cf:e7:e0:0c:e8:5f:78:fb:56:29:48:0a:3d:
         a2:7a:d2:95:a0:c5:38:f3:62:c9:b5:ca:d7:43:b9:0c:cf:25:
         bd:96:35:5e:ac:51:28:0b:98:14:40:34:2e:70:01:53:fe:25:
         64:fb:96:44:4c:7e:b6:7b:12:ad:4d:63:6f:12:dc:2d:59:ed:
         84:31:57:c5:77:f9:71:50:82:c6:c6:e3:ea:98:1f:00:70:9b:
         66:7c:10:64:63:83:41:32:0d:31:71:16:18:07:b4:f1:cc:29:
         04:a5:a4:4b:69:03:87:51:b0:ed:1a:fe:50:0f:b7:94:cb:75:
         02:a4:12:9d:58:64:bb:8c:ec:e4:9d:8d:a3:5a:db:37:dd:3b:
         ea:d7:1c:08:b8:53:7f:a9:0e:d9:10:65:14:1b:8f:7d:de:55:
         41:e9:34:a9:31:8c:c9:13:5e:ff:d0:43:4d:d3:d6:8f:92:c2:
         0b:83:59:30:10:44:f7:be:5d:55:95:a7:88:c8:f7:00:96:98:
         09:35:74:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:50 2023 by rpki-client on console-ams.rpki-client.org