Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b4237b89-f403-4fd5-81da-10f21f8985a8/7564f4c122384c5f879cbad2e717a906ea481c74.roa
File:                     7564f4c122384c5f879cbad2e717a906ea481c74.roa (raw, json)
Hash identifier:          bdwS7B7BcX19UqzruFxhOOqKymNEP+BB+mApu9dqkgw=
Subject key identifier:   A9:69:D7:B9:A3:A3:B4:FC:1C:CC:94:F2:BC:2F:FD:53:23:CC:C8:B5
Certificate issuer:       /CN=50f2e353c2a1af3e7924280fa2d8603c1b56e309
Certificate serial:       7D9E
Authority key identifier: EF:42:53:48:AE:B0:A1:9C:3C:58:57:E7:9F:89:B4:9C:0F:9A:40:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/50f2e353c2a1af3e7924280fa2d8603c1b56e309.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b4237b89-f403-4fd5-81da-10f21f8985a8/7564f4c122384c5f879cbad2e717a906ea481c74.roa
Signing time:             Sat 04 Jun 2022 04:00:52 +0000
ROA not before:           Sat 04 Jun 2022 03:00:00 +0000
ROA not after:            Tue 04 Jun 2024 03:00:00 +0000
asID:                     271848
IP address blocks:        177.22.254.0/23 maxlen: 23
                          187.49.10.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32158 (0x7d9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50f2e353c2a1af3e7924280fa2d8603c1b56e309
        Validity
            Not Before: Jun  4 03:00:00 2022 GMT
            Not After : Jun  4 03:00:00 2024 GMT
        Subject: CN=7564f4c122384c5f879cbad2e717a906ea481c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a1:a9:98:de:f2:75:24:be:99:9d:c6:9a:52:
                    89:ff:ba:7f:4b:85:93:27:05:89:96:5b:81:40:67:
                    e1:b4:34:84:2b:60:74:42:2b:b4:fb:e1:51:b1:5b:
                    98:15:ed:07:b6:84:48:96:3e:aa:c8:61:23:ba:35:
                    22:6d:53:f6:c2:99:79:a5:7d:86:63:f5:17:1e:6b:
                    19:0b:2c:30:16:e4:06:c6:91:f8:d9:ce:c1:56:66:
                    a6:5e:98:09:11:64:cf:aa:78:2a:d9:89:56:94:74:
                    4c:dc:bc:97:8f:90:80:31:8c:d2:41:19:73:d1:d6:
                    8c:ff:40:23:b2:37:5e:0e:23:e4:c7:2f:77:b5:31:
                    d3:6a:a9:ae:3b:d8:fa:3a:03:28:83:c4:3a:09:44:
                    e0:27:d1:90:f6:98:c7:49:19:24:f9:ce:dd:63:b5:
                    ef:80:48:de:4b:84:10:42:4f:ee:42:99:ca:55:45:
                    12:ff:03:ae:55:46:1a:64:51:74:b5:a9:c9:a8:07:
                    86:32:bb:55:de:86:62:06:39:0c:14:82:7e:6b:60:
                    eb:e3:32:a0:9a:44:84:b5:94:f5:ad:b9:84:98:97:
                    15:06:fa:ea:ed:a4:6f:fb:09:5a:94:46:e3:d9:7a:
                    74:1b:e7:1d:12:23:94:88:cf:88:f0:ab:ba:1d:8c:
                    28:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:69:D7:B9:A3:A3:B4:FC:1C:CC:94:F2:BC:2F:FD:53:23:CC:C8:B5
            X509v3 Authority Key Identifier:
                keyid:EF:42:53:48:AE:B0:A1:9C:3C:58:57:E7:9F:89:B4:9C:0F:9A:40:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/50f2e353c2a1af3e7924280fa2d8603c1b56e309.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b4237b89-f403-4fd5-81da-10f21f8985a8/7564f4c122384c5f879cbad2e717a906ea481c74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b4237b89-f403-4fd5-81da-10f21f8985a8/50f2e353c2a1af3e7924280fa2d8603c1b56e309.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.254.0/23
                  187.49.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:fb:58:ee:69:f6:83:dc:10:a3:5a:10:96:1d:ea:66:99:75:
         a0:a5:c4:23:31:ac:ec:43:ce:95:ef:da:ed:ee:1f:0a:fd:13:
         61:9a:3d:27:2f:3a:74:4b:3a:6d:b3:91:05:18:3c:e5:a5:d5:
         f0:ed:2c:ff:e8:1a:f7:ba:2b:2c:01:b0:7b:51:ea:8b:ad:1c:
         0d:40:56:61:5e:24:1d:1c:7b:a8:15:2e:3d:64:5a:b7:b2:c8:
         d9:bd:7f:f1:22:27:bb:ef:d7:dd:d4:0d:5e:db:9c:6c:b4:42:
         20:42:1c:da:de:03:cc:12:e5:67:ed:3a:8c:ee:34:b5:32:6a:
         d7:0a:7f:21:14:1e:04:d4:86:59:3f:05:6e:6b:90:52:89:8a:
         23:11:64:fb:58:25:e4:60:7f:ed:b9:b8:cc:4a:b7:00:10:a0:
         96:4f:55:f3:8d:3f:e4:20:1a:12:29:79:9f:ae:11:36:7c:aa:
         17:7f:a6:ee:f8:63:a5:04:7b:64:99:9c:51:bc:cf:ea:44:f8:
         c0:c4:11:c4:92:54:2e:34:f2:d3:0a:4b:1c:d9:17:49:e6:a7:
         c9:f4:62:dc:73:2e:cb:65:0f:ba:90:a5:cd:2e:6e:73:6c:b6:
         16:7d:16:a8:82:bb:8b:6f:7d:cb:af:ee:51:33:fb:11:03:d3:
         fc:0b:cb:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:51 2023 by rpki-client on console-ams.rpki-client.org