Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b727f0ec-821c-443e-b4c0-f38a083b33ca/f71226082f58dcbaa341c061bd7f481bbbb73a81.roa
File:                     f71226082f58dcbaa341c061bd7f481bbbb73a81.roa (raw, json)
Hash identifier:          DbmI8Lw7jaEpaEzxi+aO4bRxSBgadnf4VcnMlBdmc6k=
Subject key identifier:   B9:9A:77:BE:79:BA:B6:F7:76:4E:C3:90:F5:9C:1A:F9:8D:EE:B2:FF
Certificate issuer:       /CN=6e4a182506cc3d6396e00aa2873b9f3c87963395
Certificate serial:       213176
Authority key identifier: FC:AE:D6:FE:15:E0:50:9A:08:BB:73:77:2C:E4:D9:28:F4:5D:16:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e4a182506cc3d6396e00aa2873b9f3c87963395.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b727f0ec-821c-443e-b4c0-f38a083b33ca/f71226082f58dcbaa341c061bd7f481bbbb73a81.roa
Signing time:             Fri 02 Jun 2023 04:00:28 +0000
ROA not before:           Thu 01 Jun 2023 04:00:27 +0000
ROA not after:            Mon 02 Jun 2025 04:00:27 +0000
asID:                     6140
IP address blocks:        200.14.34.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2175350 (0x213176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e4a182506cc3d6396e00aa2873b9f3c87963395
        Validity
            Not Before: Jun  1 04:00:27 2023 GMT
            Not After : Jun  2 04:00:27 2025 GMT
        Subject: CN=f71226082f58dcbaa341c061bd7f481bbbb73a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:71:1e:55:f1:d1:cf:79:fd:6e:7d:81:54:8f:
                    6f:82:d3:17:8f:6c:3d:c3:10:c1:43:66:bf:2d:ec:
                    47:f5:0c:7c:bd:08:a1:03:dd:b0:d2:f5:f6:7c:27:
                    13:50:57:3a:7c:e3:2a:6a:cc:94:f5:c9:d8:b8:8e:
                    05:dc:05:d8:99:b8:f7:98:b6:2d:69:e9:23:89:61:
                    62:26:f3:06:cf:17:38:d6:b6:ef:c2:18:47:a3:6d:
                    8c:98:39:2d:da:d8:7e:1d:03:4c:7c:47:37:06:9b:
                    63:ba:2e:09:c3:01:4e:7f:b4:07:5d:26:a7:22:8c:
                    49:9e:39:37:8e:db:65:be:73:7c:20:e6:d0:47:23:
                    c7:2f:ce:e1:c5:9a:b9:9a:b5:ff:a5:e6:9a:da:35:
                    1f:a8:40:cb:26:81:5f:21:26:f7:eb:7f:6b:51:45:
                    a3:4e:0b:c5:c1:b1:34:c2:37:2d:e8:38:e8:68:2e:
                    94:cf:91:24:eb:96:6d:01:2d:05:8f:b1:dc:7a:14:
                    2c:c6:f1:43:52:75:c3:9b:eb:b0:9e:0c:65:b4:95:
                    32:49:58:22:a6:ee:af:2e:1a:10:77:99:dd:16:a5:
                    d7:36:c2:ac:c2:69:6c:da:2e:00:46:c4:99:fb:b7:
                    1a:1c:1e:3d:52:8b:a4:bd:a7:28:81:03:35:33:dc:
                    32:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:9A:77:BE:79:BA:B6:F7:76:4E:C3:90:F5:9C:1A:F9:8D:EE:B2:FF
            X509v3 Authority Key Identifier:
                keyid:FC:AE:D6:FE:15:E0:50:9A:08:BB:73:77:2C:E4:D9:28:F4:5D:16:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e4a182506cc3d6396e00aa2873b9f3c87963395.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b727f0ec-821c-443e-b4c0-f38a083b33ca/f71226082f58dcbaa341c061bd7f481bbbb73a81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b727f0ec-821c-443e-b4c0-f38a083b33ca/6e4a182506cc3d6396e00aa2873b9f3c87963395.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:a3:70:93:aa:33:00:0f:fc:fe:a8:cf:21:c6:53:c9:d6:c3:
         c9:85:71:9c:ea:66:3e:75:64:70:5b:41:30:5d:12:a7:0a:6e:
         76:55:8e:e8:9e:b5:2f:91:85:45:4a:7d:85:c7:ad:74:fa:ee:
         36:c4:bf:97:d0:22:7b:ad:66:ec:e5:12:25:1d:e3:c0:ec:f7:
         b5:3c:97:7a:f6:a8:83:98:84:1f:49:d0:94:c1:cc:d9:3b:20:
         29:6d:05:e8:af:17:93:56:2a:ca:38:25:f6:aa:43:55:eb:cf:
         f2:b6:a4:2e:e8:e2:67:e8:81:35:c8:73:84:0b:fe:18:e1:73:
         39:22:37:3a:91:b7:9d:2d:0b:88:17:53:5a:7e:d6:ce:ab:1c:
         cf:33:13:69:c9:84:5c:53:44:33:95:b3:21:2e:41:12:bc:44:
         a0:1c:06:bf:90:55:7a:5a:57:7a:46:b1:72:14:09:4d:55:33:
         a4:b4:67:30:05:d4:4a:77:78:4b:21:89:6f:d0:92:69:84:01:
         a8:2b:a3:d2:99:31:05:51:83:54:73:8d:ca:ef:40:7f:16:de:
         6c:f3:e7:87:e1:9f:a7:41:53:ff:98:ec:99:f4:fd:75:fb:1e:
         e4:80:74:27:22:3c:e7:48:70:59:03:18:66:82:ff:ee:6d:70:
         03:8c:f3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:52 2023 by rpki-client on console-ams.rpki-client.org