Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/70e30fb904e2e8381fdd147e824864129da82103.roa
File:                     70e30fb904e2e8381fdd147e824864129da82103.roa (raw, json)
Hash identifier:          YdrJVn5vgOe48VsIPslru2kkOyf9oMSaD++FXDB1Yyc=
Subject key identifier:   1E:B7:BA:24:8E:45:44:FB:BC:AE:1D:E1:EB:9A:5F:7A:FD:04:BF:A8
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       269A89
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/70e30fb904e2e8381fdd147e824864129da82103.roa
Signing time:             Wed 30 Aug 2023 17:36:35 +0000
ROA not before:           Tue 29 Aug 2023 17:36:22 +0000
ROA not after:            Sat 30 Aug 2025 17:36:22 +0000
asID:                     34991
IP address blocks:        152.204.132.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2529929 (0x269a89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Aug 29 17:36:22 2023 GMT
            Not After : Aug 30 17:36:22 2025 GMT
        Subject: CN=70e30fb904e2e8381fdd147e824864129da82103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b5:40:d5:42:f8:4b:a0:99:98:79:b3:fa:72:
                    20:15:52:b7:73:fd:ba:8a:2f:3e:a6:8b:92:6d:a3:
                    c0:6b:33:37:b2:70:6b:47:ad:dc:84:7c:7b:0a:99:
                    6e:e4:39:5a:95:f1:18:fe:3b:ab:36:9f:a2:9f:f4:
                    bf:d3:29:68:cb:eb:ae:66:c7:5a:30:6a:d9:e5:17:
                    60:b2:ca:47:66:24:55:d7:ea:df:3a:22:39:8e:b8:
                    69:aa:a8:a1:2e:d3:66:e1:ec:b8:f9:c6:52:69:40:
                    12:35:71:e0:40:5e:a1:d8:d5:e4:a3:d6:4a:40:e8:
                    c2:f8:f9:0f:9a:68:74:0b:11:57:df:b3:54:f4:64:
                    b3:bb:72:42:9c:dd:69:75:ea:19:32:b4:5d:08:d1:
                    c0:f7:d7:d9:22:a3:d3:56:63:96:34:e1:2f:5b:dd:
                    9d:2c:14:97:7f:53:32:ad:6f:af:02:75:b2:94:3b:
                    2d:30:c2:15:77:61:e6:89:93:9a:13:90:e8:da:cd:
                    f2:e2:fd:28:47:ee:e7:b6:67:93:da:29:a9:3d:35:
                    ea:2b:0e:57:04:b5:3b:96:c9:89:b6:56:33:7f:96:
                    98:5a:79:54:33:38:d4:d2:cd:34:c7:bd:b3:cf:e7:
                    87:52:a3:91:cc:89:a6:ff:cf:40:40:b5:e5:31:83:
                    0d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B7:BA:24:8E:45:44:FB:BC:AE:1D:E1:EB:9A:5F:7A:FD:04:BF:A8
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/70e30fb904e2e8381fdd147e824864129da82103.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.204.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:68:f7:81:6d:ab:9b:4b:69:6a:5f:32:e9:60:ae:09:c8:d3:
         4f:bb:e5:c2:d7:f4:2e:47:7e:5e:1c:2a:82:0a:d8:9e:5f:84:
         cf:4f:39:68:b5:2b:be:86:91:6e:25:a2:17:ef:0b:16:3e:a3:
         6d:f9:66:58:3c:9e:06:83:46:52:25:63:14:59:70:2d:1a:5a:
         dd:b9:1e:c5:85:55:c1:91:95:a8:e4:63:4c:ab:1b:d5:d4:53:
         73:45:6a:f7:cc:99:f9:02:a8:6d:43:93:04:fd:ce:f0:f7:b0:
         e0:3e:e7:c6:5e:d0:f8:1b:45:3a:00:f7:ab:ea:42:b8:d7:c0:
         35:f9:ff:20:a7:30:dd:ac:44:00:9c:b0:7d:f7:97:7b:09:75:
         f4:e2:8d:fb:bd:73:57:74:b5:74:ac:f0:de:00:8e:cd:eb:90:
         e3:09:05:61:f8:3d:73:df:99:61:c4:d4:bc:c3:69:ba:9a:85:
         50:f6:07:28:38:0e:2d:a6:a1:55:f5:d6:12:d6:f4:33:7f:b6:
         49:c4:24:da:4e:47:40:d4:bd:2f:03:41:16:57:37:cf:c6:44:
         89:bc:ad:4c:80:10:82:8e:ac:22:e4:7b:19:25:f9:2e:94:e0:
         df:33:82:c6:8d:eb:97:a8:8d:9b:c2:8b:e3:34:c6:c5:18:91:
         50:e8:08:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 19:01:12 2023 by rpki-client on console-fra.rpki-client.org