Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/752979df9657e763446eed17d3de2ee9ccf892ee.roa
File:                     752979df9657e763446eed17d3de2ee9ccf892ee.roa (raw, json)
Hash identifier:          5NeW+nYnhgcYyEQpIhI+3dvfrH1Ufi9TU9PQ2LAKp4A=
Subject key identifier:   3B:84:CD:9A:33:E7:07:21:9D:53:96:63:4A:A8:26:F3:C2:91:E9:92
Certificate issuer:       /CN=c376ce9732a7f8438a8728863d42624058e18390
Certificate serial:       108399
Authority key identifier: D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/752979df9657e763446eed17d3de2ee9ccf892ee.roa
Signing time:             Tue 13 Jul 2021 23:25:06 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Fri 24 Mar 2023 03:00:00 +0000
asID:                     18747
IP address blocks:        2802::/48 maxlen: 48
                          2802::/36 maxlen: 36
                          2802:0:47::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1082265 (0x108399)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c376ce9732a7f8438a8728863d42624058e18390
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2023 GMT
        Subject: CN=752979df9657e763446eed17d3de2ee9ccf892ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e9:94:e3:58:d3:60:14:8e:15:dd:2f:d5:45:
                    a0:49:d0:7d:24:b7:d0:54:34:2a:70:22:e7:6e:5a:
                    b6:bf:e5:73:4c:3b:a0:7b:9a:a6:43:fd:de:50:dc:
                    25:9a:87:8d:c6:73:a7:3f:51:08:dc:1f:74:3a:f4:
                    dc:05:87:ab:01:f6:58:57:52:6a:1a:e1:9d:97:67:
                    77:96:d7:23:31:b3:51:5d:43:a8:4b:51:28:2f:dd:
                    3a:a7:cd:71:82:b0:b4:77:a7:f9:84:fa:77:37:97:
                    de:67:90:0e:fd:e0:c4:a2:4a:27:99:20:42:4f:93:
                    bd:cd:49:e8:04:ad:56:fc:0b:72:5a:c3:c5:52:8d:
                    a4:cb:73:48:c4:00:30:42:bc:af:30:25:0d:97:eb:
                    b6:46:7e:28:57:3b:cc:52:7f:d7:8e:09:2e:98:d3:
                    4a:c3:28:84:3e:18:43:58:c9:07:e2:6f:aa:4d:d4:
                    d1:9d:a0:89:a9:09:36:a5:9b:19:ea:06:16:f6:2e:
                    9e:4f:b2:dd:3e:e4:13:54:94:24:25:ae:6e:95:97:
                    9e:48:87:da:77:9b:03:07:eb:b9:f8:a3:f7:6f:32:
                    35:97:a2:e3:f3:9b:08:0a:dc:80:49:56:80:d4:f9:
                    81:de:ce:ad:22:f7:f4:d9:af:bb:34:07:62:ad:0b:
                    ce:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:84:CD:9A:33:E7:07:21:9D:53:96:63:4A:A8:26:F3:C2:91:E9:92
            X509v3 Authority Key Identifier:
                keyid:D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/752979df9657e763446eed17d3de2ee9ccf892ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/c376ce9732a7f8438a8728863d42624058e18390.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2802::/36

    Signature Algorithm: sha256WithRSAEncryption
         09:95:49:16:97:03:3a:a4:6c:b6:a0:c6:fb:50:f3:9a:c6:fc:
         3e:c3:a9:39:90:02:11:47:20:82:f2:e8:63:ce:93:c6:62:c4:
         54:02:10:35:d2:2d:2e:63:7e:da:54:64:10:15:8a:9d:f5:59:
         36:5a:af:54:45:23:7c:7b:d6:bf:28:4e:88:f8:9b:85:5b:3f:
         53:98:67:2e:53:b8:96:64:e9:ff:f1:3f:45:27:6a:8e:27:44:
         fe:c1:9c:2b:3b:8d:49:52:5f:43:0e:46:be:eb:c5:e2:ee:31:
         8a:fe:5c:fd:32:b9:de:8b:c3:b3:17:de:b0:fb:18:ee:75:37:
         3e:ba:86:ec:db:f6:99:de:59:cd:b8:03:2b:0a:20:11:bd:86:
         0a:bd:a1:a5:bb:9a:9d:46:59:2e:9b:06:55:4b:e8:c0:16:1f:
         f1:04:9d:9e:51:b3:19:02:3c:65:62:c4:db:47:ad:1f:7d:c3:
         7d:40:bb:10:f6:7a:22:91:d1:86:a8:aa:0e:81:b0:2a:c1:8d:
         7c:8e:d3:79:d1:38:e8:83:ec:4d:d6:3d:58:80:e3:c5:dd:66:
         ef:20:df:6f:e5:da:ec:47:22:78:65:27:0c:bd:ec:96:85:f2:
         95:e1:2b:b0:7d:70:7e:00:74:cf:75:ec:11:86:94:05:27:51:
         72:76:fc:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:37 2023 by rpki-client on console-fra.rpki-client.org