Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/609756a35670524ebdd18631efa6418485206312.roa
File:                     609756a35670524ebdd18631efa6418485206312.roa (raw, json)
Hash identifier:          RY3aa7gDXiQXSZlQ/X+6At8nYTLglYLcrTcXpu9IFrE=
Subject key identifier:   3D:3D:47:BE:0C:1A:C4:16:BD:B4:2C:89:49:FD:C0:34:75:7C:BB:C3
Certificate issuer:       /CN=33d77efc1ab1b4b849aa3ac57cd00366ea75b677
Certificate serial:       18645C
Authority key identifier: E5:32:D8:5E:46:59:00:DA:65:B0:67:57:94:D1:50:D3:E9:F4:4D:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/609756a35670524ebdd18631efa6418485206312.roa
Signing time:             Tue 14 Jun 2022 17:25:58 +0000
ROA not before:           Tue 14 Jun 2022 03:00:00 +0000
ROA not after:            Fri 14 Jun 2024 03:00:00 +0000
asID:                     265855
IP address blocks:        2803:da20:200::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1598556 (0x18645c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33d77efc1ab1b4b849aa3ac57cd00366ea75b677
        Validity
            Not Before: Jun 14 03:00:00 2022 GMT
            Not After : Jun 14 03:00:00 2024 GMT
        Subject: CN=609756a35670524ebdd18631efa6418485206312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:93:3e:77:57:08:e0:75:a4:eb:50:77:47:ff:
                    3c:99:70:d1:a7:fe:d6:e1:48:81:3f:a0:73:1c:a1:
                    d7:c7:22:8a:6a:a9:ec:c9:73:ad:73:01:3f:cd:49:
                    d6:3c:1f:7d:4a:6d:12:8f:8b:f8:cc:c5:22:2a:70:
                    a0:39:cb:05:2d:5b:42:d6:f6:76:d8:25:fc:26:18:
                    58:fe:3c:53:68:46:dc:d3:25:7a:64:e9:d0:9f:94:
                    99:38:81:49:1c:78:28:d4:de:25:5b:5c:ea:7b:6a:
                    1f:08:59:54:c1:20:51:b3:81:32:34:bd:9d:dc:5d:
                    05:6c:83:49:c5:b8:20:77:91:c6:3c:74:e5:b2:77:
                    c1:76:b8:4d:5c:39:cf:0a:6a:fc:d7:18:ca:38:ae:
                    6b:e5:a0:e7:23:ba:a6:ff:08:f0:45:b4:b7:ea:c8:
                    08:ec:a1:6e:71:c0:6d:e0:4c:1b:e2:7b:d5:a3:2a:
                    70:4e:10:d5:c4:b5:2c:47:5d:f7:08:09:7c:b6:1c:
                    78:78:12:ee:5b:e4:01:58:9f:6c:36:ef:cc:03:8b:
                    07:1a:fa:2e:da:37:37:86:67:d3:a4:88:80:b9:fd:
                    3f:45:d2:e2:3c:de:19:ea:73:bc:11:d7:35:0e:34:
                    c3:04:46:e7:ee:51:82:22:2e:0e:75:24:13:8f:1c:
                    43:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:3D:47:BE:0C:1A:C4:16:BD:B4:2C:89:49:FD:C0:34:75:7C:BB:C3
            X509v3 Authority Key Identifier:
                keyid:E5:32:D8:5E:46:59:00:DA:65:B0:67:57:94:D1:50:D3:E9:F4:4D:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/609756a35670524ebdd18631efa6418485206312.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:da20:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         c5:31:7a:e7:45:ef:57:a5:da:dc:2a:15:5b:5f:42:c4:ad:0f:
         70:29:cc:6f:76:a5:7f:14:25:c3:60:99:bf:5c:51:28:16:1b:
         9d:81:97:a9:3b:c2:a5:f4:b7:d0:74:db:ac:bc:f4:29:d6:a6:
         79:ee:7e:c9:61:91:27:67:61:ba:38:22:de:aa:b8:93:81:3f:
         de:f7:92:05:bf:f8:bc:61:2d:97:79:87:60:07:23:18:fa:0f:
         84:1f:5b:7d:3d:00:d5:d1:50:e6:66:82:83:8e:14:80:a9:36:
         94:87:72:cf:55:48:44:7e:68:4f:14:34:94:9b:17:4a:56:2f:
         86:66:a0:cf:77:27:41:f3:f7:18:3f:ff:05:be:54:d8:98:00:
         f4:97:7f:a0:d0:16:ca:c5:cf:8e:89:0a:75:8b:ed:a0:3a:80:
         83:34:63:4e:ae:9b:d2:a5:ee:1b:77:a6:d0:89:cc:29:22:55:
         8e:ae:0c:8c:2c:4b:90:75:00:1e:5e:c7:08:9b:1a:24:4d:cf:
         53:09:2e:1f:86:f6:27:3c:46:73:85:08:de:76:ff:14:84:97:
         c9:23:b3:1d:ba:f9:01:b6:51:bc:9f:49:e6:29:39:f4:7f:9f:
         e1:74:0d:d8:8e:0b:74:e4:1e:68:fe:4d:02:7b:8c:e0:e6:86:
         a8:33:e2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-fra.rpki-client.org