Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/be59f4be-0a7f-40b5-b84d-7e78e5124d99/25bb7efee35cb232c98e8520c469251c5fe543d7.roa
File:                     25bb7efee35cb232c98e8520c469251c5fe543d7.roa (raw, json)
Hash identifier:          IvNWTaIC2vFw4ffcSzBw9/ObYiIvoqivbtKipFhndf8=
Subject key identifier:   F2:54:05:CF:BA:53:2E:42:B7:F0:4C:6E:D7:52:E2:D9:89:D7:02:BD
Certificate issuer:       /CN=cb6445348fda58c2a60a9db541fbbec77e7a759a
Certificate serial:       091489
Authority key identifier: A6:9A:E2:37:BB:C1:29:63:A9:3F:84:A2:28:27:19:E2:79:D4:AA:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb6445348fda58c2a60a9db541fbbec77e7a759a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/be59f4be-0a7f-40b5-b84d-7e78e5124d99/25bb7efee35cb232c98e8520c469251c5fe543d7.roa
Signing time:             Wed 22 Sep 2021 14:40:46 +0000
ROA not before:           Wed 22 Sep 2021 03:00:00 +0000
ROA not after:            Fri 22 Sep 2023 03:00:00 +0000
asID:                     263230
IP address blocks:        179.0.224.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 595081 (0x91489)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb6445348fda58c2a60a9db541fbbec77e7a759a
        Validity
            Not Before: Sep 22 03:00:00 2021 GMT
            Not After : Sep 22 03:00:00 2023 GMT
        Subject: CN=25bb7efee35cb232c98e8520c469251c5fe543d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0a:ef:d5:01:b8:6c:cf:dc:57:98:60:5c:06:
                    09:b2:77:cd:3f:37:ac:90:13:ba:c8:0b:25:67:dd:
                    af:5f:84:a9:4e:e2:89:05:40:87:a6:0b:42:8a:96:
                    97:c2:69:73:1d:23:b4:2b:57:98:84:5f:51:35:d8:
                    8e:92:65:3b:fd:c3:2d:b3:a5:cc:48:28:0f:ab:b1:
                    eb:81:16:fe:5b:99:ca:d4:25:cf:2d:86:89:5a:92:
                    64:fb:bc:a5:ad:4a:26:1f:31:70:58:7b:9d:3d:2a:
                    ac:0f:54:68:df:34:a1:49:d9:49:c5:11:e0:1a:75:
                    a9:72:cb:58:c0:91:84:63:97:11:30:00:5c:de:58:
                    9c:68:ae:e7:95:00:1e:67:aa:1a:6a:0b:82:42:10:
                    1b:bb:76:27:8b:03:80:c5:4c:f7:55:fe:e5:c0:62:
                    99:99:64:20:ce:dd:37:66:fb:f8:cc:13:f1:7e:90:
                    52:f3:d8:d7:a3:73:65:71:e6:ec:d7:13:96:a1:04:
                    93:a7:b3:12:f0:e1:e5:3a:d1:9c:05:09:24:f0:4e:
                    aa:00:97:f2:8f:f5:bb:0a:98:b0:0b:4e:bf:02:db:
                    b6:31:ca:5d:fd:7f:5b:95:55:34:f2:e2:56:50:63:
                    c7:f5:5f:1f:6f:fb:70:0e:0c:2d:a8:30:bf:9f:14:
                    88:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:54:05:CF:BA:53:2E:42:B7:F0:4C:6E:D7:52:E2:D9:89:D7:02:BD
            X509v3 Authority Key Identifier:
                keyid:A6:9A:E2:37:BB:C1:29:63:A9:3F:84:A2:28:27:19:E2:79:D4:AA:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb6445348fda58c2a60a9db541fbbec77e7a759a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/be59f4be-0a7f-40b5-b84d-7e78e5124d99/25bb7efee35cb232c98e8520c469251c5fe543d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/be59f4be-0a7f-40b5-b84d-7e78e5124d99/cb6445348fda58c2a60a9db541fbbec77e7a759a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         24:39:ba:ac:40:4f:08:d5:7d:1d:67:58:1a:6d:58:c0:0b:c0:
         59:9c:08:e3:04:d0:42:0f:02:62:58:54:e8:4a:d2:8d:d9:52:
         c4:cc:8f:32:54:12:1e:f7:83:77:77:fc:20:42:53:2a:88:be:
         5c:4c:c4:5f:22:08:34:cf:0c:b8:5c:59:aa:b8:24:0b:61:aa:
         57:61:4c:33:2e:75:d1:55:9d:df:42:4f:94:4a:a6:9d:a0:18:
         26:9f:c9:d5:14:7f:88:74:b3:52:1e:aa:a9:03:04:8a:f0:0e:
         91:be:60:5a:3c:06:df:15:a7:c2:fc:22:9a:98:cf:ae:81:f7:
         84:f6:4e:3c:77:ec:0f:28:60:de:b9:6f:0e:82:78:0b:ae:bc:
         bc:a0:79:68:cc:e8:0b:c0:f9:c3:00:01:bb:f6:3d:ba:cc:e0:
         77:75:f4:3d:af:57:6b:ae:7c:7d:a9:5b:6e:f7:4a:30:e7:dd:
         01:3a:e5:21:cf:c0:13:ad:82:48:07:92:5e:61:73:6d:0a:33:
         ec:25:32:2a:8d:ec:f6:20:7f:96:4f:2d:88:0a:b3:96:58:59:
         f7:c5:08:29:66:d6:1c:b7:a4:12:5f:e7:fb:68:dc:f5:48:ab:
         ef:90:52:e6:bf:6c:2d:6b:b0:b0:1f:63:5c:85:b8:4f:c7:8f:
         81:13:ed:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 09:03:08 2023 by rpki-client on console-fra.rpki-client.org