Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/fb3666ae02c42df096f1c6bbbd2ffda07d03175a.roa
File:                     fb3666ae02c42df096f1c6bbbd2ffda07d03175a.roa (raw, json)
Hash identifier:          Cm/zrvcHJmizlvBzDflEuq0HAyFmt8GrHcQw55ZOCxM=
Subject key identifier:   B8:19:28:9F:0D:8E:FB:0C:9C:80:47:4B:64:DD:C1:2A:5F:19:6D:3E
Certificate issuer:       /CN=fdfd425584dd260c812e3b649911e7753efa8f09
Certificate serial:       16F736
Authority key identifier: BC:F5:81:9E:28:15:EE:F8:BE:E8:42:19:6B:B5:90:7D:B3:EB:60:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fdfd425584dd260c812e3b649911e7753efa8f09.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/fb3666ae02c42df096f1c6bbbd2ffda07d03175a.roa
Signing time:             Thu 28 Apr 2022 14:50:49 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     264819
IP address blocks:        170.80.140.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1505078 (0x16f736)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdfd425584dd260c812e3b649911e7753efa8f09
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=fb3666ae02c42df096f1c6bbbd2ffda07d03175a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ec:f7:dc:86:2e:20:d2:49:03:07:b0:14:49:
                    08:6d:32:a9:13:cb:c7:82:8e:2c:88:81:cb:f1:72:
                    ec:71:c6:d1:bc:70:89:44:91:a8:b2:e8:b2:c1:b2:
                    f2:0e:d5:92:8e:f5:4a:8b:c7:94:4f:ed:92:45:8a:
                    0f:9e:9f:4f:26:59:13:47:17:90:ea:fd:7a:e9:00:
                    72:a9:06:69:13:8a:df:4e:d2:f7:60:27:12:ce:a6:
                    cd:28:d1:4e:9a:a0:c0:93:d5:e8:e2:b0:f2:a0:db:
                    7a:cd:84:53:a1:8d:f9:47:6f:8b:75:56:7d:3a:99:
                    6a:8f:8b:22:76:3f:49:c7:d8:86:c6:78:d7:b1:9f:
                    75:b8:4b:b5:6d:dc:dd:82:c8:a5:70:d5:5e:05:31:
                    dd:dc:d5:08:e2:61:b8:31:12:e8:e4:50:46:2d:ba:
                    7d:0b:14:2b:36:9d:9c:11:bf:ee:8e:bd:51:c0:63:
                    5b:f2:cf:92:99:05:a8:ce:5a:16:ce:a6:b1:f9:05:
                    ea:55:3e:4a:71:19:65:c5:80:a1:80:f4:d5:69:17:
                    6a:4a:14:5d:54:e3:27:af:40:3d:22:a0:34:1b:0c:
                    5b:4b:5a:f7:94:10:05:d5:9d:e7:ba:fb:a3:13:bc:
                    26:1b:b4:d9:97:9b:ad:48:5f:91:b0:64:de:cb:08:
                    b1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:19:28:9F:0D:8E:FB:0C:9C:80:47:4B:64:DD:C1:2A:5F:19:6D:3E
            X509v3 Authority Key Identifier:
                keyid:BC:F5:81:9E:28:15:EE:F8:BE:E8:42:19:6B:B5:90:7D:B3:EB:60:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fdfd425584dd260c812e3b649911e7753efa8f09.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/fb3666ae02c42df096f1c6bbbd2ffda07d03175a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/be672872-770a-4d65-bcbb-055878abd1de/fdfd425584dd260c812e3b649911e7753efa8f09.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:85:94:b8:c8:15:44:05:64:92:5d:da:37:87:2f:3b:ae:61:
         8c:a5:20:56:7a:3b:62:4f:e0:e9:6c:eb:b6:c2:45:16:ba:fe:
         e2:f7:d6:c2:59:a8:09:f9:62:db:b4:c0:6f:83:9e:5a:7a:0c:
         78:d2:e6:e0:3d:b8:8d:8c:44:e3:36:3b:76:94:49:8b:a8:41:
         1e:23:86:8d:44:df:6d:a5:7f:3f:3f:4c:ad:8b:a6:4e:2c:85:
         3f:db:6e:6a:f6:40:95:45:ca:7a:dc:00:fd:66:ee:85:fb:24:
         11:74:fc:d2:6d:fd:af:8f:da:d2:72:ab:92:05:a5:cb:b2:79:
         88:4f:59:1e:68:3b:8a:b8:e4:b0:9c:90:c7:71:fd:f9:19:bc:
         d4:2d:63:62:fd:8b:42:08:ec:d8:f4:b9:79:bc:90:1b:c2:0a:
         e2:a8:b0:8a:cf:5d:ad:e2:94:4b:04:19:bc:bc:38:a9:12:f4:
         e5:c0:c2:49:14:5b:1f:cf:b6:73:5b:a9:07:b1:3b:8d:a7:9d:
         2c:aa:3f:e5:6e:e6:46:39:59:57:14:4d:8d:b3:d1:4a:64:62:
         d4:a9:87:46:d4:26:b4:45:3f:cb:5c:5e:4d:d4:8c:05:19:22:
         64:15:b9:8e:30:af:c8:fd:84:00:ca:0f:a9:20:1a:2b:4b:06:
         e3:11:a7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:52 2023 by rpki-client on console-ams.rpki-client.org