Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/5dd1fd39ee38e68fdd66fe534eccea147a6ce127.roa
File:                     5dd1fd39ee38e68fdd66fe534eccea147a6ce127.roa (raw, json)
Hash identifier:          VpYvQhUEAQ6YVJUBm3osBWYQG9446azYqNqia78u3vE=
Subject key identifier:   01:50:B0:6B:AA:8B:3D:8F:6C:E6:1A:42:EF:CC:D3:45:94:E8:9D:30
Certificate issuer:       /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial:       1F77AF
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/5dd1fd39ee38e68fdd66fe534eccea147a6ce127.roa
Signing time:             Tue 17 Jan 2023 23:39:58 +0000
ROA not before:           Thu 29 Apr 2021 03:00:00 +0000
ROA not after:            Thu 11 May 2023 03:00:00 +0000
asID:                     262589
IP address blocks:        179.1.0.0/21 maxlen: 24
                          179.1.8.0/21 maxlen: 24
                          179.1.16.0/20 maxlen: 24
                          179.1.32.0/20 maxlen: 24
                          179.1.48.0/20 maxlen: 24
                          179.1.64.0/20 maxlen: 24
                          179.1.80.0/20 maxlen: 24
                          179.1.92.0/22 maxlen: 24
                          179.1.96.0/20 maxlen: 24
                          179.1.112.0/20 maxlen: 24
                          179.1.128.0/20 maxlen: 24
                          179.1.192.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2062255 (0x1f77af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
        Validity
            Not Before: Apr 29 03:00:00 2021 GMT
            Not After : May 11 03:00:00 2023 GMT
        Subject: CN=5dd1fd39ee38e68fdd66fe534eccea147a6ce127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bd:a0:78:7f:20:9d:59:3e:0a:76:f2:a6:cb:
                    eb:c4:2c:95:6f:3b:c0:28:83:86:7a:1b:de:bc:1a:
                    b8:73:20:5b:30:0d:7b:4b:05:1f:f3:25:7c:d6:ff:
                    f8:19:cc:b2:e2:6e:16:28:fd:d7:66:b5:f2:0b:30:
                    69:70:f2:ea:6e:d6:20:aa:07:28:b4:6e:0e:bc:20:
                    34:ca:5d:f7:b7:0a:6c:03:d5:b6:5e:13:c5:30:20:
                    87:e3:16:5d:12:71:d6:ce:90:65:7d:b7:d2:fc:65:
                    e0:c4:39:92:37:16:c4:16:6b:97:3e:49:dc:5c:be:
                    fd:79:ea:da:95:be:91:a5:89:b0:82:35:ed:13:b7:
                    45:64:be:73:09:fc:14:a5:0d:d0:82:ff:33:df:87:
                    55:96:fa:cf:f3:00:2a:0a:47:b4:85:2f:a7:0b:83:
                    f3:b3:36:9a:ad:0e:0f:28:4b:91:82:ba:82:e0:96:
                    32:0c:ce:e7:b1:3b:bf:2d:4f:0b:b1:27:f7:cc:c4:
                    a1:25:a6:51:fb:36:91:63:c4:ce:ff:ab:6b:bd:93:
                    e8:8f:26:23:eb:bf:3f:d5:4d:99:81:cc:8b:f7:dd:
                    2c:54:0d:36:e0:18:30:fa:00:1a:dd:da:a8:7a:67:
                    80:5e:15:59:ec:d0:8e:04:0c:ae:b4:78:47:aa:07:
                    dd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:50:B0:6B:AA:8B:3D:8F:6C:E6:1A:42:EF:CC:D3:45:94:E8:9D:30
            X509v3 Authority Key Identifier:
                keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/5dd1fd39ee38e68fdd66fe534eccea147a6ce127.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.0.0-179.1.143.255
                  179.1.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         29:e6:9b:41:3d:8f:d6:45:d2:d8:2c:88:61:7d:c2:57:d1:49:
         63:0e:5b:54:41:86:2b:a4:1a:98:70:bc:cb:98:43:b1:0f:69:
         a5:9e:5b:26:d7:85:25:de:28:d6:0a:bf:ca:ab:48:86:7e:8d:
         f0:d6:11:21:d7:2f:c1:29:30:9b:5b:ef:e8:14:1c:35:a1:c0:
         51:8e:56:20:5a:78:d3:a8:4f:a0:2d:51:c4:22:16:88:86:c6:
         e9:01:42:ff:7a:1f:fa:31:03:2e:b5:30:10:47:24:8e:e7:4d:
         d2:03:b6:62:f5:fd:a2:08:11:e1:cb:db:2c:31:d1:f6:88:27:
         c0:c0:c3:6c:b9:5a:f2:1e:b9:74:c7:5f:77:22:14:f8:53:d4:
         13:20:f3:2e:8e:e2:5d:7e:4d:8b:96:1c:f4:ee:c2:4f:85:c5:
         fd:8a:5a:7d:64:4a:1c:1d:c4:e6:b9:d5:f6:4e:dd:43:3e:ff:
         5e:12:e4:a4:c8:b6:ee:7c:7a:c0:c6:3b:87:0e:f1:67:0f:58:
         18:ea:93:d7:0f:7f:38:d1:4a:03:34:c3:ba:fb:93:2e:d4:24:
         a5:09:b8:c6:e8:cc:67:7a:3d:a5:22:3f:94:c4:af:fe:b4:a4:
         13:65:e9:a7:1f:69:f7:6b:1c:c0:58:9d:af:08:8a:df:4c:77:
         9f:78:15:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:50 2023 by rpki-client on console-ams.rpki-client.org