Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b727f0ec-821c-443e-b4c0-f38a083b33ca/e15988153713717680e05fd7cbd6c15fb2461126.roa
File:                     e15988153713717680e05fd7cbd6c15fb2461126.roa (raw, json)
Hash identifier:          EYm6f062mboer3T9SleydqqgDJJ48cpSh/jprYnidnk=
Subject key identifier:   FA:BD:EE:B8:56:6B:BA:EA:6A:14:7A:57:C2:44:25:38:5E:2C:F8:73
Certificate issuer:       /CN=6e4a182506cc3d6396e00aa2873b9f3c87963395
Certificate serial:       0D7D45
Authority key identifier: FC:AE:D6:FE:15:E0:50:9A:08:BB:73:77:2C:E4:D9:28:F4:5D:16:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e4a182506cc3d6396e00aa2873b9f3c87963395.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b727f0ec-821c-443e-b4c0-f38a083b33ca/e15988153713717680e05fd7cbd6c15fb2461126.roa
Signing time:             Wed 24 Mar 2021 14:39:17 +0000
ROA not before:           Wed 24 Mar 2021 14:39:17 +0000
ROA not after:            Tue 24 Mar 2026 14:39:17 +0000
asID:                     6140
IP address blocks:        200.14.34.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 884037 (0xd7d45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e4a182506cc3d6396e00aa2873b9f3c87963395
        Validity
            Not Before: Mar 24 14:39:17 2021 GMT
            Not After : Mar 24 14:39:17 2026 GMT
        Subject: CN=e15988153713717680e05fd7cbd6c15fb2461126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3f:ee:0b:8a:53:99:60:3f:b3:e5:cc:82:64:
                    b4:4e:8c:a5:5e:10:ca:da:0a:5c:f8:de:2f:0d:78:
                    c5:f2:51:bc:ad:da:0d:cb:d0:c5:26:ad:e1:bf:fe:
                    30:10:88:39:71:6b:72:8d:d6:97:a9:ab:5f:24:eb:
                    ba:b3:28:31:9f:6f:16:43:89:a2:f4:26:93:bf:e3:
                    54:cf:c2:f1:89:d2:5d:28:e9:d4:87:8e:b3:2f:41:
                    e3:de:13:d5:15:82:b0:b4:79:80:a7:04:70:2c:a1:
                    58:a7:ed:d6:9b:04:79:35:bc:3e:9f:72:67:d1:df:
                    2d:7f:31:c6:14:a4:fe:aa:f4:6d:9c:9d:1b:2c:9c:
                    7b:ef:48:8d:e9:46:9c:b0:05:da:61:2a:00:b4:52:
                    58:e1:c5:87:98:d8:a0:a9:80:89:03:6e:5e:df:03:
                    c4:d9:7c:13:cc:b4:f9:98:ad:04:a5:19:eb:84:2f:
                    a2:c3:74:7e:06:db:da:d8:48:e7:75:56:e5:cf:8f:
                    b1:1a:ad:d3:14:a6:80:ec:8c:df:ed:7c:44:2b:0c:
                    71:61:78:2a:48:06:68:40:40:06:f1:e4:d8:a2:1a:
                    35:79:72:a0:d9:35:a6:81:73:23:fd:4e:c0:4f:ae:
                    bb:96:36:e2:13:a7:bb:46:bd:30:c6:44:3a:08:ad:
                    14:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:BD:EE:B8:56:6B:BA:EA:6A:14:7A:57:C2:44:25:38:5E:2C:F8:73
            X509v3 Authority Key Identifier:
                keyid:FC:AE:D6:FE:15:E0:50:9A:08:BB:73:77:2C:E4:D9:28:F4:5D:16:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e4a182506cc3d6396e00aa2873b9f3c87963395.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b727f0ec-821c-443e-b4c0-f38a083b33ca/e15988153713717680e05fd7cbd6c15fb2461126.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b727f0ec-821c-443e-b4c0-f38a083b33ca/6e4a182506cc3d6396e00aa2873b9f3c87963395.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:0d:45:fb:43:db:ed:99:c3:83:fc:41:ee:4b:db:5e:61:0b:
         a4:c6:8c:f0:80:b7:5f:53:9e:eb:86:fd:5e:01:62:49:56:f9:
         95:d5:bc:fe:2a:ad:67:89:4e:1a:07:ef:3a:ea:5d:1f:a3:0e:
         cb:b2:ff:f7:c8:c9:8f:94:fb:6b:91:68:74:e1:1c:0f:40:ed:
         29:35:f1:8b:10:ae:08:22:50:69:25:ce:5e:e0:6d:41:7c:ae:
         69:99:8c:a7:22:32:a7:87:20:6e:f0:83:0f:58:45:20:a3:62:
         e5:30:e1:d6:ff:f6:f2:c1:97:11:8b:3c:5a:41:1a:57:0a:82:
         03:0c:e3:e0:49:a5:b8:c5:73:14:c2:8f:09:35:43:21:5c:bc:
         0a:43:2b:b7:1a:8c:7b:cf:50:69:6a:45:6f:82:25:0a:94:cc:
         53:5d:a1:f1:6d:a3:8c:5b:24:c9:0f:c8:16:51:95:cf:b6:80:
         20:33:9b:4b:0e:6d:4c:a9:1b:8f:1a:21:ad:61:ed:99:74:2d:
         55:f5:fd:4f:b2:0b:ee:1b:9d:c3:21:79:62:7f:16:08:5d:6d:
         25:be:99:6a:28:bc:d0:7d:f1:65:c4:e0:fb:94:2c:f3:8f:74:
         b1:af:49:54:57:a6:cd:8d:dd:4d:36:4c:0b:9b:c5:e2:fd:7d:
         ca:b6:af:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:37 2023 by rpki-client on console-fra.rpki-client.org