Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b727f0ec-821c-443e-b4c0-f38a083b33ca/9b7e5797fcbc1905ee2ccb62057aa3a9b7c21ca5.roa
File:                     9b7e5797fcbc1905ee2ccb62057aa3a9b7c21ca5.roa (raw, json)
Hash identifier:          4sWpoD2E2hoPONaHIcE/lJe0sAwgU/QOc0jLZl00kNM=
Subject key identifier:   C6:88:F2:52:4D:2B:04:70:86:F7:1F:A2:32:02:D5:A5:A0:26:07:83
Certificate issuer:       /CN=6e4a182506cc3d6396e00aa2873b9f3c87963395
Certificate serial:       0D79FD
Authority key identifier: FC:AE:D6:FE:15:E0:50:9A:08:BB:73:77:2C:E4:D9:28:F4:5D:16:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e4a182506cc3d6396e00aa2873b9f3c87963395.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b727f0ec-821c-443e-b4c0-f38a083b33ca/9b7e5797fcbc1905ee2ccb62057aa3a9b7c21ca5.roa
Signing time:             Wed 24 Mar 2021 14:39:17 +0000
ROA not before:           Wed 24 Mar 2021 14:39:17 +0000
ROA not after:            Tue 24 Mar 2026 14:39:17 +0000
asID:                     3549
IP address blocks:        200.14.34.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 883197 (0xd79fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e4a182506cc3d6396e00aa2873b9f3c87963395
        Validity
            Not Before: Mar 24 14:39:17 2021 GMT
            Not After : Mar 24 14:39:17 2026 GMT
        Subject: CN=9b7e5797fcbc1905ee2ccb62057aa3a9b7c21ca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:45:d2:ad:29:55:0a:d6:64:5d:a0:14:6c:36:
                    26:a6:35:b2:4e:cb:44:60:d1:b7:cd:b0:aa:91:2a:
                    40:29:a8:4d:e9:88:b2:21:4c:c3:3b:27:aa:37:91:
                    e1:7c:5a:bb:89:a1:fd:43:51:66:94:c3:35:32:f9:
                    9a:ed:62:8e:bc:cc:46:88:99:ef:4a:e3:dc:78:fa:
                    22:6b:84:38:a2:52:2d:60:f8:4c:8c:37:b3:76:34:
                    f3:72:ff:e3:8b:de:a5:ce:a1:cd:cb:00:75:02:1f:
                    a0:72:55:58:03:2d:1c:c9:76:82:3d:ee:30:a7:8d:
                    1a:4f:26:09:90:23:54:b9:45:64:e2:12:01:54:73:
                    95:51:b8:a0:c3:d6:bf:bd:b7:33:f7:c6:10:b0:81:
                    89:a9:d0:ad:c7:43:4b:c7:2e:cd:31:79:7e:0b:3f:
                    3b:d5:58:35:c3:56:a6:38:14:32:c6:62:52:53:52:
                    e5:26:9f:24:ca:5b:66:8c:0b:28:1c:d1:52:ea:d7:
                    35:5f:45:9c:74:61:1c:e1:43:c2:1c:56:5d:04:e5:
                    5c:3d:76:0d:01:db:83:73:11:2a:40:ae:fd:db:74:
                    d6:03:78:7a:69:ba:f2:57:a9:af:2b:30:46:43:f5:
                    e8:99:fc:b1:92:5b:ac:8a:34:93:cf:11:25:03:9d:
                    bb:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:88:F2:52:4D:2B:04:70:86:F7:1F:A2:32:02:D5:A5:A0:26:07:83
            X509v3 Authority Key Identifier:
                keyid:FC:AE:D6:FE:15:E0:50:9A:08:BB:73:77:2C:E4:D9:28:F4:5D:16:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e4a182506cc3d6396e00aa2873b9f3c87963395.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b727f0ec-821c-443e-b4c0-f38a083b33ca/9b7e5797fcbc1905ee2ccb62057aa3a9b7c21ca5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b727f0ec-821c-443e-b4c0-f38a083b33ca/6e4a182506cc3d6396e00aa2873b9f3c87963395.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:a3:d2:8e:aa:1d:2c:15:1d:88:f6:b0:70:7b:eb:ed:e2:f7:
         cf:5e:db:4b:38:30:ae:0d:8c:32:69:1e:af:20:f0:50:0a:4c:
         1d:e5:1d:f1:ea:d4:4d:5e:16:e3:7e:9f:62:cf:76:1e:1e:e9:
         24:49:b8:b0:52:9a:14:41:37:5f:ec:0d:9d:af:7f:45:56:92:
         c8:6e:c8:9d:88:3e:81:0b:f1:6b:84:e3:ff:66:36:d3:3d:c6:
         16:cc:f1:47:66:69:1d:80:5e:bf:d1:92:06:b2:96:d5:dc:59:
         0b:ea:b7:60:39:f2:37:b5:b4:ac:54:6e:28:cc:d4:9e:65:18:
         5a:7d:17:cc:cc:70:98:1b:4b:ee:d8:96:45:c1:b1:ca:1e:c8:
         a2:33:d5:89:d2:18:d1:26:d7:fa:47:74:2b:4c:54:2d:7d:70:
         d2:42:00:0c:99:07:20:b5:1f:c0:b4:8b:d1:67:bc:18:3a:19:
         b8:8c:1a:0a:b5:bb:f1:77:0b:b8:ff:af:9a:36:99:9a:32:ea:
         c3:32:dd:fa:8a:8a:fe:67:9f:68:65:1d:37:be:f0:2d:65:03:
         b6:33:10:99:cc:de:1a:f3:95:a2:6a:f4:d3:18:e4:81:35:05:
         2c:50:2d:5c:c0:38:68:49:2e:91:d8:76:94:75:38:31:d1:46:
         47:88:23:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:51 2023 by rpki-client on console-ams.rpki-client.org