Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/abfc8c28-2a1b-4820-8a2d-8dc079802132/58f544d41d878e9de7b57ece0e4aa3928738baa6.roa
File:                     58f544d41d878e9de7b57ece0e4aa3928738baa6.roa (raw, json)
Hash identifier:          wYPDpIaNUJZDt18KORaivUGU5XoCubjyEzpiAU2tepQ=
Subject key identifier:   04:F0:B7:43:E3:DA:1A:87:7E:15:3F:90:E7:77:B0:1C:AF:14:3E:9C
Certificate issuer:       /CN=63333df328424e1d0ca2ddcff0cfc829ea44b7a1
Certificate serial:       0C8AFE
Authority key identifier: FD:59:37:71:8E:92:A1:AE:60:2C:14:23:71:FE:AA:B4:AD:6B:8B:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63333df328424e1d0ca2ddcff0cfc829ea44b7a1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/abfc8c28-2a1b-4820-8a2d-8dc079802132/58f544d41d878e9de7b57ece0e4aa3928738baa6.roa
Signing time:             Wed 24 Mar 2021 14:41:18 +0000
ROA not before:           Wed 24 Mar 2021 14:41:18 +0000
ROA not after:            Tue 24 Mar 2026 14:41:18 +0000
asID:                     61468
IP address blocks:        192.207.244.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 822014 (0xc8afe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63333df328424e1d0ca2ddcff0cfc829ea44b7a1
        Validity
            Not Before: Mar 24 14:41:18 2021 GMT
            Not After : Mar 24 14:41:18 2026 GMT
        Subject: CN=58f544d41d878e9de7b57ece0e4aa3928738baa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b1:26:6e:5a:37:6f:e0:e8:36:78:a7:61:5e:
                    f3:cf:f5:b9:b8:f1:2c:a9:c1:ed:12:52:54:6a:96:
                    c5:e0:9a:d3:30:ef:7d:cc:2e:07:b1:45:16:72:3b:
                    ba:ff:63:4f:d5:ef:35:b2:15:9f:0a:2d:c6:f4:4e:
                    0a:68:dd:a1:21:0e:01:af:a9:12:83:83:35:ba:31:
                    c4:d9:ea:5f:d9:cb:60:f1:7a:7f:e6:cc:fe:d1:15:
                    66:8b:69:2b:84:05:f4:ab:b8:ae:c1:2b:18:81:bd:
                    99:19:5c:0c:49:3b:22:b9:c2:0e:17:70:f0:58:12:
                    c0:19:c3:dc:1c:90:dd:cf:8e:ff:5b:e5:56:02:b8:
                    f1:9a:41:de:c8:49:7e:22:3f:51:96:32:02:9f:8c:
                    46:90:9f:77:38:74:84:ec:ac:98:96:94:7a:d6:e5:
                    f5:8e:d5:92:24:33:41:21:8a:46:8a:a1:7d:fd:10:
                    be:c1:8f:8b:5f:25:26:db:5d:ec:6e:25:c8:34:96:
                    b9:85:63:26:47:6b:8d:33:7d:84:d8:a0:4f:72:e1:
                    55:4b:14:b0:34:12:31:0b:f7:50:6d:fd:94:38:6d:
                    26:20:8f:dc:d2:f6:32:f4:a1:d8:86:d3:58:22:30:
                    6f:ee:c9:83:30:48:50:ba:b3:28:4f:e4:ab:76:53:
                    c1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F0:B7:43:E3:DA:1A:87:7E:15:3F:90:E7:77:B0:1C:AF:14:3E:9C
            X509v3 Authority Key Identifier:
                keyid:FD:59:37:71:8E:92:A1:AE:60:2C:14:23:71:FE:AA:B4:AD:6B:8B:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63333df328424e1d0ca2ddcff0cfc829ea44b7a1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/abfc8c28-2a1b-4820-8a2d-8dc079802132/58f544d41d878e9de7b57ece0e4aa3928738baa6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/abfc8c28-2a1b-4820-8a2d-8dc079802132/63333df328424e1d0ca2ddcff0cfc829ea44b7a1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.207.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:3c:8d:5f:41:ab:48:2a:80:04:47:e7:ad:5c:38:d5:fd:ad:
         35:9a:98:99:c7:7e:3b:44:76:06:65:ef:4f:5f:dd:c2:8e:84:
         e7:3f:f0:4d:fd:b9:b9:8a:98:cf:c2:1c:d5:44:d1:2d:4f:ea:
         a7:24:15:00:55:88:b6:78:5a:1e:92:77:61:7b:e5:14:60:8a:
         2e:ca:e2:f2:eb:54:24:45:e0:57:99:15:b7:c9:b0:06:4f:ed:
         95:31:fb:64:a0:ae:51:20:0f:a1:3a:fb:46:63:23:bc:8e:37:
         82:2d:c9:71:3c:b4:c1:2d:86:f8:b8:61:c2:31:13:ad:2d:eb:
         63:da:62:74:c2:be:2d:74:ef:8d:2c:d7:86:e5:11:c3:66:d6:
         f1:02:11:5e:67:6d:6d:5c:86:30:48:9c:f7:20:1c:3f:25:eb:
         67:0d:46:df:e8:e2:d6:84:35:5b:66:8b:af:69:35:31:89:66:
         69:80:43:fa:99:98:30:b8:5e:44:56:6f:e7:8b:79:ee:4b:6a:
         4a:d8:2d:d6:2c:99:34:b6:3f:d8:f8:90:10:15:d3:ed:31:38:
         dd:b6:22:2a:4e:20:1e:82:61:c4:3a:93:dd:6f:cc:3d:10:61:
         16:ff:7d:ef:67:d3:a4:be:ab:2d:4c:11:99:7b:66:75:67:88:
         09:1b:54:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 00:14:22 2024 by rpki-client on console-fra.rpki-client.org