Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bb1f8f43-c52e-4042-a968-4a8d65895e94/25c55a9edaf14ec6ac3ebd29f0f2ee9f8f050ff2.roa
File:                     25c55a9edaf14ec6ac3ebd29f0f2ee9f8f050ff2.roa (raw, json)
Hash identifier:          CPjwXjQoFu9xRS1D0kghwK/2EImmB19+aZ+ke2DaYFc=
Subject key identifier:   07:7E:53:45:E8:5E:77:EF:2B:DD:F9:BC:A2:F9:20:40:E7:12:C5:67
Certificate issuer:       /CN=c1b8d6c6be85be3113453cd65ec60c702005902e
Certificate serial:       05ED9C
Authority key identifier: 8C:87:14:08:62:62:2F:0E:FC:CB:38:70:9A:77:23:B5:D5:54:59:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1b8d6c6be85be3113453cd65ec60c702005902e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bb1f8f43-c52e-4042-a968-4a8d65895e94/25c55a9edaf14ec6ac3ebd29f0f2ee9f8f050ff2.roa
Signing time:             Wed 24 Mar 2021 14:31:31 +0000
ROA not before:           Wed 24 Mar 2021 14:31:31 +0000
ROA not after:            Tue 24 Mar 2026 14:31:31 +0000
asID:                     270005
IP address blocks:        187.102.240.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 388508 (0x5ed9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1b8d6c6be85be3113453cd65ec60c702005902e
        Validity
            Not Before: Mar 24 14:31:31 2021 GMT
            Not After : Mar 24 14:31:31 2026 GMT
        Subject: CN=25c55a9edaf14ec6ac3ebd29f0f2ee9f8f050ff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:13:c8:ad:51:c5:79:f9:f5:82:b8:79:9e:a8:
                    c6:aa:7e:ae:91:1b:c4:1b:35:0a:cd:6a:54:cc:7a:
                    0b:7b:97:6c:29:e3:00:c0:7a:9c:a9:93:f2:30:c9:
                    dc:d4:d7:38:14:72:3f:35:db:82:fe:96:4f:a4:8b:
                    68:1f:7f:f5:54:36:58:3f:b0:b0:f8:ca:33:db:67:
                    6c:01:e0:ca:62:f5:d5:88:2b:32:62:22:01:c6:bd:
                    02:4b:0f:83:6f:c5:5b:fe:c2:54:79:38:1c:f2:96:
                    d9:fb:8a:be:8d:22:5b:f2:3d:06:f0:9e:5a:21:68:
                    3b:36:fe:d5:16:28:1e:c9:08:8e:0f:86:65:f0:83:
                    33:96:69:82:50:5d:71:b5:46:99:a0:10:76:c5:7e:
                    c6:1e:5a:d7:0a:ae:a7:ea:df:96:64:58:5d:33:3c:
                    c3:d9:3c:0c:93:f6:78:70:ea:1b:c4:47:ee:70:96:
                    2c:6e:40:93:b3:79:0b:5d:95:b4:ab:c0:f5:cd:6c:
                    8e:b7:b9:93:fb:56:84:67:12:10:9a:b4:5b:57:bb:
                    98:8a:6c:01:e8:e7:ba:2b:8f:60:48:1e:93:17:f1:
                    06:4e:9a:9a:4a:aa:a0:07:b0:ff:4d:0f:31:87:6c:
                    f7:1e:32:59:a3:ef:57:f2:ea:bc:d0:1d:e7:9b:38:
                    4e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:7E:53:45:E8:5E:77:EF:2B:DD:F9:BC:A2:F9:20:40:E7:12:C5:67
            X509v3 Authority Key Identifier:
                keyid:8C:87:14:08:62:62:2F:0E:FC:CB:38:70:9A:77:23:B5:D5:54:59:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1b8d6c6be85be3113453cd65ec60c702005902e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bb1f8f43-c52e-4042-a968-4a8d65895e94/25c55a9edaf14ec6ac3ebd29f0f2ee9f8f050ff2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bb1f8f43-c52e-4042-a968-4a8d65895e94/c1b8d6c6be85be3113453cd65ec60c702005902e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:22:35:12:3d:ff:31:96:46:5d:8a:0b:39:1c:7a:c3:78:7a:
         90:4d:14:47:a4:43:24:c6:a5:73:92:22:a6:e2:22:f5:45:a4:
         73:c4:2e:c0:9c:bf:b1:8e:ae:39:00:c7:16:0c:f0:15:cd:51:
         53:a4:2f:c5:69:a3:d2:34:a3:60:27:dc:e6:a3:a9:58:c4:a7:
         04:0e:ea:a5:04:b2:e9:b8:7d:90:f6:90:f6:ae:20:d0:a2:13:
         97:35:9d:15:91:1e:0f:1f:41:7e:6c:65:31:4d:d2:ca:e8:ad:
         1f:f6:63:a2:44:20:0d:37:e5:ff:59:b0:99:19:2d:d1:56:09:
         49:b5:ef:54:53:8d:ae:c0:ab:a6:e1:d5:96:29:eb:61:26:ea:
         aa:1f:62:cf:64:a6:5f:43:82:2d:c5:6d:56:a4:48:25:29:1e:
         5a:86:2a:b2:fb:55:74:a8:d5:eb:90:d0:fa:78:68:5b:40:3b:
         9f:86:f9:a4:79:1f:05:57:89:73:6b:ca:19:d8:2c:b7:4f:af:
         be:88:1a:0b:f7:7b:5a:a5:92:a9:64:53:c8:ed:d8:4d:43:1b:
         bd:a5:49:5f:a0:c3:0c:cb:ea:8b:e9:42:57:10:04:ed:b9:7a:
         a5:b9:30:ad:4f:cd:fa:f6:f9:44:11:8b:73:be:92:9f:f4:fd:
         6d:9e:fc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:52 2023 by rpki-client on console-ams.rpki-client.org