Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c0edfb24-be89-4e67-ae08-dd7edc5666ea/c26cc67402fbf9f423e543557a9f09c402054b1a.roa
File:                     c26cc67402fbf9f423e543557a9f09c402054b1a.roa (raw, json)
Hash identifier:          7Oq21d8FLDwwnPTKqMlaPC1bKNUCcSDSXqI+dhYoGwE=
Subject key identifier:   F4:FE:45:75:75:2A:EE:49:33:21:C2:B7:83:F5:C5:C1:C4:5F:60:3A
Certificate issuer:       /CN=3070426b746ffaf94407f39e1e550bba97179b09
Certificate serial:       045EC3
Authority key identifier: 4B:07:95:9B:1B:BB:5F:F3:F5:C4:7D:C6:6C:33:B9:37:3B:FC:EF:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3070426b746ffaf94407f39e1e550bba97179b09.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c0edfb24-be89-4e67-ae08-dd7edc5666ea/c26cc67402fbf9f423e543557a9f09c402054b1a.roa
Signing time:             Wed 24 Mar 2021 14:42:57 +0000
ROA not before:           Wed 24 Mar 2021 14:42:55 +0000
ROA not after:            Tue 24 Mar 2026 14:42:55 +0000
asID:                     265540
IP address blocks:        190.123.40.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 286403 (0x45ec3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3070426b746ffaf94407f39e1e550bba97179b09
        Validity
            Not Before: Mar 24 14:42:55 2021 GMT
            Not After : Mar 24 14:42:55 2026 GMT
        Subject: CN=c26cc67402fbf9f423e543557a9f09c402054b1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f6:0c:22:dc:77:b9:e0:f1:1a:cf:3a:c1:f5:
                    b1:05:10:cc:c2:df:cd:2d:96:cc:16:ce:1a:78:96:
                    0a:53:e5:dd:e1:04:c4:f4:38:c1:7e:4d:14:08:5d:
                    37:d6:24:06:50:36:fb:54:48:f3:86:ca:8d:53:c6:
                    35:39:4b:fa:62:70:93:e6:56:43:30:90:23:f2:57:
                    06:58:35:fd:66:86:f3:85:8a:80:1d:0d:85:e4:b5:
                    1e:74:2c:7e:16:9f:fc:78:bc:d1:a9:10:a5:0d:68:
                    a5:07:c3:ac:25:15:ad:41:32:18:48:be:20:3c:94:
                    93:43:d8:ab:e1:f9:75:90:76:69:a4:c1:ea:8c:51:
                    f2:1f:67:26:d9:f1:e7:6d:46:9c:c7:c4:45:e8:24:
                    14:b4:27:03:8e:56:50:19:4a:32:9c:4c:dd:b4:a7:
                    ab:cb:32:ba:8b:05:db:bc:90:58:48:c2:55:4d:04:
                    f1:dc:fe:ef:44:2c:d9:90:d7:b6:9d:40:4d:50:9e:
                    35:60:f8:5c:bb:8c:69:72:a9:59:e1:bc:c5:e9:d3:
                    74:92:49:33:16:12:e7:9d:41:72:04:71:47:1c:bb:
                    27:3e:3f:37:dc:ff:23:b8:e5:ef:ec:4d:3b:35:4c:
                    0d:be:94:da:c1:49:56:80:0c:01:07:d3:87:ab:84:
                    85:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:FE:45:75:75:2A:EE:49:33:21:C2:B7:83:F5:C5:C1:C4:5F:60:3A
            X509v3 Authority Key Identifier:
                keyid:4B:07:95:9B:1B:BB:5F:F3:F5:C4:7D:C6:6C:33:B9:37:3B:FC:EF:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3070426b746ffaf94407f39e1e550bba97179b09.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c0edfb24-be89-4e67-ae08-dd7edc5666ea/c26cc67402fbf9f423e543557a9f09c402054b1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c0edfb24-be89-4e67-ae08-dd7edc5666ea/3070426b746ffaf94407f39e1e550bba97179b09.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:2a:fd:58:52:c9:a5:f2:74:ba:35:c9:b1:c2:8a:af:e7:19:
         66:5f:d9:3d:be:0f:6a:82:0e:3a:33:72:90:71:21:58:84:eb:
         2f:0e:54:f4:5b:66:96:f3:19:e5:a3:68:98:80:32:cf:f3:b3:
         d8:d8:1a:a4:a7:c1:a4:aa:21:e5:52:61:c8:42:73:95:0f:4c:
         48:5a:71:c4:3b:39:fb:7e:3a:c3:ee:c6:a9:36:92:61:9c:c5:
         2b:02:06:ac:bc:39:0d:fc:90:27:34:8a:46:10:d9:5d:45:48:
         fa:e0:9b:20:10:c0:bc:d4:da:c5:8d:2a:b8:55:4a:80:44:6b:
         32:70:71:c3:4a:f6:24:07:ea:15:6a:c0:d8:be:7f:3e:3c:50:
         6b:a6:50:66:b4:c6:49:ab:59:f8:1d:90:c8:cc:39:da:95:8e:
         f8:1a:cf:26:57:eb:db:e5:c9:0b:a7:b2:dc:44:63:d2:46:9b:
         87:d9:03:9e:b4:0f:2f:ea:8e:fa:f1:4d:cf:9a:aa:d0:f9:50:
         c1:5d:0f:ff:4e:ce:03:65:e0:2d:7f:28:49:cc:09:9e:f7:88:
         fb:2c:5c:b4:cd:8f:0f:69:7b:c5:80:c0:00:93:26:94:68:9c:
         16:be:2c:55:43:8c:71:de:26:c4:54:f3:a4:d3:f4:80:32:b0:
         d3:09:fd:f3
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBF7DMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMw
NzA0MjZiNzQ2ZmZhZjk0NDA3ZjM5ZTFlNTUwYmJhOTcxNzliMDkwHhcNMjEwMzI0
MTQ0MjU1WhcNMjYwMzI0MTQ0MjU1WjAzMTEwLwYDVQQDEyhjMjZjYzY3NDAyZmJm
OWY0MjNlNTQzNTU3YTlmMDljNDAyMDU0YjFhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAy/YMItx3ueDxGs86wfWxBRDMwt/NLZbMFs4aeJYKU+Xd4QTE
9DjBfk0UCF031iQGUDb7VEjzhsqNU8Y1OUv6YnCT5lZDMJAj8lcGWDX9ZobzhYqA
HQ2F5LUedCx+Fp/8eLzRqRClDWilB8OsJRWtQTIYSL4gPJSTQ9ir4fl1kHZppMHq
jFHyH2cm2fHnbUacx8RF6CQUtCcDjlZQGUoynEzdtKeryzK6iwXbvJBYSMJVTQTx
3P7vRCzZkNe2nUBNUJ41YPhcu4xpcqlZ4bzF6dN0kkkzFhLnnUFyBHFHHLsnPj83
3P8juOXv7E07NUwNvpTawUlWgAwBB9OHq4SFBwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPT+RXV1Ku5JMyHCt4P1xcHEX2A6MB8GA1UdIwQYMBaAFEsHlZsbu1/z9cR9
xmwzuTc7/O8nMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzA3MDQy
NmI3NDZmZmFmOTQ0MDdmMzllMWU1NTBiYmE5NzE3OWIwOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzBlZGZiMjQtYmU4OS00ZTY3LWFlMDgtZGQ3ZWRj
NTY2NmVhL2MyNmNjNjc0MDJmYmY5ZjQyM2U1NDM1NTdhOWYwOWM0MDIwNTRiMWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jMGVkZmIyNC1iZTg5LTRlNjctYWUwOC1kZDdl
ZGM1NjY2ZWEvMzA3MDQyNmI3NDZmZmFmOTQ0MDdmMzllMWU1NTBiYmE5NzE3OWIw
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL57KDANBgkqhkiG9w0BAQsFAAOCAQEAcyr9WFLJpfJ0ujXJ
scKKr+cZZl/ZPb4PaoIOOjNykHEhWITrLw5U9FtmlvMZ5aNomIAyz/Oz2NgapKfB
pKoh5VJhyEJzlQ9MSFpxxDs5+346w+7GqTaSYZzFKwIGrLw5DfyQJzSKRhDZXUVI
+uCbIBDAvNTaxY0quFVKgERrMnBxw0r2JAfqFWrA2L5/PjxQa6ZQZrTGSatZ+B2Q
yMw52pWO+BrPJlfr2+XJC6ey3ERj0kabh9kDnrQPL+qO+vFNz5qq0PlQwV0P/07O
A2XgLX8oScwJnveI+yxctM2PD2l7xYDAAJMmlGicFr4sVUOMcd4mxFTzpNP0gDKw
0wn98w==
-----END CERTIFICATE-----
Generated at Fri Aug 18 16:48:52 2023 by rpki-client on console-fra.rpki-client.org