Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/d46c42b6d33a47b04ca8d2d4f31740c6342c9cf9.roa
File:                     d46c42b6d33a47b04ca8d2d4f31740c6342c9cf9.roa (raw, json)
Hash identifier:          JOjn046VshrNCYADxYsHGxSDsMiYFzohCkJ7alyXGjA=
Subject key identifier:   96:45:B9:55:01:2A:58:FD:A5:2F:ED:0B:59:69:4C:D1:58:A2:E3:97
Certificate issuer:       /CN=a5db578ddaaedcf4375740e85f5f51db4e193706
Certificate serial:       0D4F12
Authority key identifier: 77:12:68:55:B2:AC:ED:4F:18:E8:4D:88:E8:D2:AF:63:B0:18:27:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5db578ddaaedcf4375740e85f5f51db4e193706.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/d46c42b6d33a47b04ca8d2d4f31740c6342c9cf9.roa
Signing time:             Wed 24 Mar 2021 14:41:43 +0000
ROA not before:           Wed 24 Mar 2021 14:41:42 +0000
ROA not after:            Tue 24 Mar 2026 14:41:42 +0000
asID:                     22869
IP address blocks:        138.117.142.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 872210 (0xd4f12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5db578ddaaedcf4375740e85f5f51db4e193706
        Validity
            Not Before: Mar 24 14:41:42 2021 GMT
            Not After : Mar 24 14:41:42 2026 GMT
        Subject: CN=d46c42b6d33a47b04ca8d2d4f31740c6342c9cf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:60:a8:b8:f9:0e:77:98:fe:3c:64:d8:c4:4e:
                    b2:14:5b:a6:e0:a5:30:e2:c6:af:b9:24:a5:e2:ce:
                    06:de:44:e3:81:0e:1e:76:ba:f8:3d:25:ca:c6:58:
                    08:61:3a:64:18:8f:94:f3:5d:f1:05:45:61:c6:a5:
                    53:d2:ec:52:c2:04:21:4f:90:46:e6:c8:64:87:d6:
                    da:fc:69:71:59:aa:c5:43:9f:0b:29:40:c7:b7:61:
                    58:95:e0:ee:fe:36:15:b4:f9:c0:79:64:31:fc:8d:
                    f3:f8:c9:04:f9:7a:33:a1:20:5c:5d:57:90:75:aa:
                    56:e5:db:cb:53:bd:d7:7f:ab:1a:12:a8:e2:ee:0e:
                    aa:66:b4:de:a4:b1:2b:b6:38:6b:15:c9:76:d6:27:
                    93:57:d1:88:7f:0d:9e:e0:da:9f:fb:e7:9b:ff:1a:
                    8f:a3:36:43:e9:93:85:1e:32:ce:06:00:fe:31:8a:
                    59:9b:03:35:3b:88:e1:b5:5e:bb:6a:39:a4:58:6b:
                    7d:03:81:d7:cf:96:df:82:ec:1b:c9:72:59:0a:fc:
                    5f:f0:35:40:c1:c5:d5:73:a7:21:58:31:42:63:77:
                    a7:a7:62:bb:d9:f0:28:a3:36:1d:56:5a:66:f9:ee:
                    28:bb:c2:93:b6:47:1a:ed:19:cc:58:70:59:03:06:
                    82:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:45:B9:55:01:2A:58:FD:A5:2F:ED:0B:59:69:4C:D1:58:A2:E3:97
            X509v3 Authority Key Identifier:
                keyid:77:12:68:55:B2:AC:ED:4F:18:E8:4D:88:E8:D2:AF:63:B0:18:27:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5db578ddaaedcf4375740e85f5f51db4e193706.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/d46c42b6d33a47b04ca8d2d4f31740c6342c9cf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b343a245-7eaf-4955-90fa-8e6d6fd43ab8/a5db578ddaaedcf4375740e85f5f51db4e193706.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:04:24:6d:08:ab:b7:99:f6:46:b0:4c:35:7f:17:6e:ee:d6:
         30:c0:e0:6e:a1:e9:72:4b:27:56:e3:e2:fc:05:6d:92:73:4c:
         ca:0d:47:cf:d2:be:d9:9c:a7:fb:5a:d2:8d:0b:dd:31:5d:58:
         8d:42:37:b9:0c:8d:da:58:79:e2:1d:e8:60:3a:10:06:08:c2:
         26:52:5b:7d:4c:4a:85:7d:c8:c5:26:69:9f:cb:6c:0b:df:f2:
         55:a0:1c:af:df:76:5e:6c:86:d9:2d:47:4b:ff:5d:70:7c:06:
         f4:75:76:c4:94:a4:02:aa:af:99:87:b9:c7:30:88:3b:00:99:
         3f:f3:7a:f7:9b:43:ff:f3:c2:22:fe:08:42:2b:46:10:f5:eb:
         af:4e:77:b2:df:4e:e9:70:77:8e:20:e7:8d:10:ec:8c:b0:5f:
         dc:50:77:33:f8:9e:d1:26:8b:80:64:0e:57:26:f8:32:d6:ff:
         31:c8:0e:3e:22:a0:f2:b2:cd:8a:1d:c2:ce:44:70:fa:1a:b0:
         5c:84:31:76:1a:89:e9:fa:7c:22:b2:fe:e0:2e:c9:1c:88:7a:
         cc:a4:f6:40:f0:dd:f1:37:66:18:16:48:7d:5b:d1:48:c0:2d:
         1b:4f:56:ce:f4:72:37:0b:8b:ab:89:17:72:14:f9:4d:60:41:
         f6:78:ef:0c
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDU8SMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE1
ZGI1NzhkZGFhZWRjZjQzNzU3NDBlODVmNWY1MWRiNGUxOTM3MDYwHhcNMjEwMzI0
MTQ0MTQyWhcNMjYwMzI0MTQ0MTQyWjAzMTEwLwYDVQQDEyhkNDZjNDJiNmQzM2E0
N2IwNGNhOGQyZDRmMzE3NDBjNjM0MmM5Y2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAn2CouPkOd5j+PGTYxE6yFFum4KUw4savuSSl4s4G3kTjgQ4e
drr4PSXKxlgIYTpkGI+U813xBUVhxqVT0uxSwgQhT5BG5shkh9ba/GlxWarFQ58L
KUDHt2FYleDu/jYVtPnAeWQx/I3z+MkE+XozoSBcXVeQdapW5dvLU73Xf6saEqji
7g6qZrTepLErtjhrFcl21ieTV9GIfw2e4Nqf++eb/xqPozZD6ZOFHjLOBgD+MYpZ
mwM1O4jhtV67ajmkWGt9A4HXz5bfguwbyXJZCvxf8DVAwcXVc6chWDFCY3enp2K7
2fAoozYdVlpm+e4ou8KTtkca7RnMWHBZAwaCDQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJZFuVUBKlj9pS/tC1lpTNFYouOXMB8GA1UdIwQYMBaAFHcSaFWyrO1PGOhN
iOjSr2OwGCeCMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTVkYjU3
OGRkYWFlZGNmNDM3NTc0MGU4NWY1ZjUxZGI0ZTE5MzcwNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjM0M2EyNDUtN2VhZi00OTU1LTkwZmEtOGU2ZDZm
ZDQzYWI4L2Q0NmM0MmI2ZDMzYTQ3YjA0Y2E4ZDJkNGYzMTc0MGM2MzQyYzljZjku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iMzQzYTI0NS03ZWFmLTQ5NTUtOTBmYS04ZTZk
NmZkNDNhYjgvYTVkYjU3OGRkYWFlZGNmNDM3NTc0MGU4NWY1ZjUxZGI0ZTE5Mzcw
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIp1jjANBgkqhkiG9w0BAQsFAAOCAQEAUAQkbQirt5n2RrBM
NX8Xbu7WMMDgbqHpcksnVuPi/AVtknNMyg1Hz9K+2Zyn+1rSjQvdMV1YjUI3uQyN
2lh54h3oYDoQBgjCJlJbfUxKhX3IxSZpn8tsC9/yVaAcr992XmyG2S1HS/9dcHwG
9HV2xJSkAqqvmYe5xzCIOwCZP/N695tD//PCIv4IQitGEPXrr053st9O6XB3jiDn
jRDsjLBf3FB3M/ie0SaLgGQOVyb4Mtb/McgOPiKg8rLNih3CzkRw+hqwXIQxdhqJ
6fp8IrL+4C7JHIh6zKT2QPDd8TdmGBZIfVvRSMAtG09WzvRyNwuLq4kXchT5TWBB
9njvDA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:37 2023 by rpki-client on console-fra.rpki-client.org