Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b47efe98-5f57-4c06-ac1d-c9f961d9d521/c7fe0ba2aad0156ef1da12327e5ce139cfbe2dd4.roa
File:                     c7fe0ba2aad0156ef1da12327e5ce139cfbe2dd4.roa (raw, json)
Hash identifier:          ilo7FTXgPlK1WU6+qEv4Tj4SrQmLhj65k1hIf3otNoM=
Subject key identifier:   AD:78:1F:EF:7A:09:5C:4E:C4:A2:30:9B:D9:36:E6:D5:45:73:E8:92
Certificate issuer:       /CN=e54bc3956d81b33eb49bda17274b51fc9913ebd7
Certificate serial:       0E42
Authority key identifier: 67:B4:8A:CD:94:C0:43:ED:CE:84:A5:BE:6E:74:16:77:1C:6A:3A:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e54bc3956d81b33eb49bda17274b51fc9913ebd7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b47efe98-5f57-4c06-ac1d-c9f961d9d521/c7fe0ba2aad0156ef1da12327e5ce139cfbe2dd4.roa
Signing time:             Mon 28 Mar 2022 13:30:19 +0000
ROA not before:           Mon 28 Mar 2022 03:00:00 +0000
ROA not after:            Thu 28 Mar 2024 03:00:00 +0000
asID:                     52507
IP address blocks:        168.197.251.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 27 Mar 2024 08:30:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3650 (0xe42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e54bc3956d81b33eb49bda17274b51fc9913ebd7
        Validity
            Not Before: Mar 28 03:00:00 2022 GMT
            Not After : Mar 28 03:00:00 2024 GMT
        Subject: CN=c7fe0ba2aad0156ef1da12327e5ce139cfbe2dd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:dd:b4:a6:5a:c3:50:0f:76:84:3c:37:36:b9:
                    6b:47:63:4c:e8:7e:90:68:42:81:0b:49:dc:eb:7d:
                    61:76:42:eb:90:c6:6e:00:e2:a2:70:1a:13:92:79:
                    b9:45:9f:aa:6d:9a:4d:f1:d0:d5:79:be:e4:33:ab:
                    e0:d4:f0:59:54:e7:d0:e8:7e:f9:a3:35:01:da:7b:
                    aa:b5:25:2b:d7:cb:b4:65:12:a7:4e:8e:f5:6a:65:
                    a8:14:fc:83:97:a5:63:b4:80:c9:46:0d:9c:0a:ec:
                    9b:77:97:0f:52:e1:a6:da:f6:a4:89:1f:86:88:82:
                    46:3e:80:92:18:27:bb:51:9c:96:6f:b0:fb:59:8a:
                    ea:12:c6:b9:60:e2:22:75:6f:a8:2f:98:c8:4a:b6:
                    4a:ee:46:82:4b:c7:26:bd:36:88:f9:b6:e2:12:94:
                    d2:46:94:d6:9c:ee:72:3c:f9:c7:0d:f1:78:21:e1:
                    00:67:ee:20:d8:dc:ed:11:ba:18:5b:88:3b:79:46:
                    85:36:96:b0:76:33:31:f5:d8:0a:f7:76:35:aa:33:
                    b8:9c:bc:6b:e2:19:43:88:1f:1d:cc:30:4d:03:b1:
                    5f:4c:8e:9f:81:d5:29:d8:80:7d:e0:44:2e:a6:47:
                    d2:a8:23:70:b5:38:62:9b:43:31:7f:ce:38:d8:55:
                    cc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:78:1F:EF:7A:09:5C:4E:C4:A2:30:9B:D9:36:E6:D5:45:73:E8:92
            X509v3 Authority Key Identifier:
                keyid:67:B4:8A:CD:94:C0:43:ED:CE:84:A5:BE:6E:74:16:77:1C:6A:3A:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e54bc3956d81b33eb49bda17274b51fc9913ebd7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b47efe98-5f57-4c06-ac1d-c9f961d9d521/c7fe0ba2aad0156ef1da12327e5ce139cfbe2dd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b47efe98-5f57-4c06-ac1d-c9f961d9d521/e54bc3956d81b33eb49bda17274b51fc9913ebd7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:aa:e8:4c:b1:7b:65:b5:80:5b:c4:05:93:a7:11:4f:4d:70:
         75:e6:ea:51:eb:b1:e1:b9:ea:89:d8:ec:2d:86:e1:d1:8c:ba:
         64:53:7e:38:93:5d:4b:59:00:8d:d1:d4:33:db:5e:2c:b5:0f:
         d8:c1:50:6e:c4:e3:dc:f0:40:8d:0f:ca:d4:55:11:4f:e7:3e:
         7b:e3:00:4c:27:61:0e:32:24:54:2e:f4:cf:37:2c:ef:16:0a:
         13:4d:43:e9:de:69:cd:f3:3c:05:7e:78:f3:5e:84:a2:cb:47:
         17:c5:37:1c:9e:7f:fb:05:ec:9a:4f:7d:97:fb:4b:e3:51:69:
         9a:eb:85:f9:63:0c:c7:a0:8c:6f:2a:0f:58:8a:70:a2:c6:46:
         6f:bb:35:b4:5b:de:e2:ab:a3:91:6e:96:f2:8b:b7:c9:30:d3:
         36:fa:9c:46:d3:73:79:f7:f1:95:c5:a2:3d:cf:35:16:58:a5:
         9b:c5:22:44:b8:df:94:0e:eb:4e:15:91:dc:54:e2:73:07:57:
         77:38:0f:04:9f:0c:76:c8:3b:08:9d:16:ab:5e:a1:5d:90:28:
         d6:a5:25:b7:b7:2c:2d:f7:4f:35:6d:8b:2c:d2:6d:a6:1b:42:
         1b:66:50:ea:19:52:34:5a:12:07:ab:df:07:c3:0d:e6:93:1a:
         90:38:fa:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 12:24:08 2024 by rpki-client on console-ams.rpki-client.org