Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/eaa7b0ce5b085a979495818d631feb693682d311.roa
File:                     eaa7b0ce5b085a979495818d631feb693682d311.roa (raw, json)
Hash identifier:          Wd6i0bO9QdbTHaF/f/lYWrL2/dUrkK7IQyXYAGa7jn0=
Subject key identifier:   DF:5C:53:D3:DF:34:52:8C:CC:F6:D9:A0:DD:B8:BF:23:3F:CD:75:5A
Certificate issuer:       /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial:       0EC11B
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/eaa7b0ce5b085a979495818d631feb693682d311.roa
Signing time:             Tue 11 May 2021 06:06:41 +0000
ROA not before:           Tue 11 May 2021 03:00:00 +0000
ROA not after:            Thu 11 May 2023 03:00:00 +0000
asID:                     262589
IP address blocks:        179.1.5.0/24 maxlen: 24
                          179.1.11.0/24 maxlen: 24
                          179.1.13.0/24 maxlen: 24
                          179.1.91.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 966939 (0xec11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
        Validity
            Not Before: May 11 03:00:00 2021 GMT
            Not After : May 11 03:00:00 2023 GMT
        Subject: CN=eaa7b0ce5b085a979495818d631feb693682d311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ab:a5:ba:cd:d2:90:d6:75:23:e5:15:d6:12:
                    e8:c4:fb:24:ec:7f:9b:cc:19:13:91:19:e9:4a:e5:
                    7c:3f:09:da:31:af:e5:62:5c:f8:27:22:2f:ab:f9:
                    63:06:64:41:b6:3f:b3:61:4c:71:e0:ff:83:63:fe:
                    6b:cf:7d:c6:d6:0f:70:9c:e9:bb:88:bc:99:f6:13:
                    e3:e3:3e:d0:cc:ef:01:2a:c0:91:6e:13:7b:0f:b2:
                    80:55:e8:45:31:e9:65:7c:0a:8e:f0:ab:8a:ab:c4:
                    fc:51:5b:ea:16:11:e1:19:ab:87:44:be:18:35:8d:
                    d5:61:56:86:0b:d1:9f:c3:9f:a5:02:88:8f:09:5c:
                    9f:d6:dc:bc:07:68:c6:f4:6f:3f:1b:72:ff:6c:59:
                    55:13:e7:da:16:15:e9:11:ba:6b:92:36:31:19:ab:
                    a8:eb:73:5d:3d:00:3d:7e:a0:61:b3:e4:00:2f:7d:
                    b8:50:9d:d6:72:11:e5:bc:26:02:ed:d3:19:5b:25:
                    d1:4c:49:96:9b:50:73:b8:2e:7c:55:07:4c:41:c6:
                    0b:7a:1f:ec:b5:31:5e:26:c5:87:5d:e7:b2:94:15:
                    e5:72:4f:a8:13:ae:96:3e:aa:e9:65:9a:24:36:3c:
                    36:db:78:ca:41:de:dd:77:4a:28:b4:f9:84:6a:c7:
                    46:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:5C:53:D3:DF:34:52:8C:CC:F6:D9:A0:DD:B8:BF:23:3F:CD:75:5A
            X509v3 Authority Key Identifier:
                keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/eaa7b0ce5b085a979495818d631feb693682d311.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.5.0/24
                  179.1.11.0/24
                  179.1.13.0/24
                  179.1.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:ac:2e:c3:2c:e8:ff:26:68:ed:e4:cc:46:cf:b6:cf:f5:9b:
         3a:f9:c3:6a:b1:c2:ce:c2:f2:7f:56:18:c2:02:6a:3f:76:7a:
         d0:d1:30:9f:46:53:8b:e7:4a:1e:5a:79:9e:79:f0:13:ad:28:
         5e:83:7c:fc:f5:ef:da:73:69:56:12:b7:45:1e:e0:c8:24:80:
         4e:b3:f9:89:17:29:9c:f7:ad:bc:04:cf:cb:d5:3a:a0:ea:45:
         6e:a3:a6:6b:bf:f6:3a:b2:6d:44:1e:03:5d:9b:d8:38:6d:08:
         a7:86:fe:d6:01:05:06:79:3c:f4:ca:1d:13:7e:96:12:d8:da:
         c4:36:32:45:c8:45:18:a1:4c:6e:e5:d6:f6:df:27:76:2c:b1:
         19:5d:2c:b7:8f:3b:6f:8a:f8:8c:a2:11:d0:96:31:15:c2:eb:
         d6:fe:23:d2:da:00:42:22:93:60:67:58:e5:1d:9b:29:0f:85:
         f2:95:16:4b:6c:0b:2d:73:bf:e2:05:33:f9:63:80:49:e8:f1:
         e9:e3:d9:72:96:db:97:17:1c:25:5a:ec:59:8a:31:fc:62:e7:
         93:f0:58:c8:6f:32:8e:50:9d:06:b7:d1:d9:95:5d:e0:16:9f:
         e2:a6:f3:28:1b:0d:c8:bb:c2:d0:28:3a:c0:01:f0:de:b9:55:
         dc:de:13:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:50 2023 by rpki-client on console-ams.rpki-client.org