Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c35a6c7f-6b17-4317-91e5-bd872fb0c19a/0205c79189d0f7570e8cacce3aaeccc0a85b3303.roa
File:                     0205c79189d0f7570e8cacce3aaeccc0a85b3303.roa (raw, json)
Hash identifier:          6Qn4knRd+bbwRojTkMMkbdZ2xSADyBjk9yeczXaQ5Q0=
Subject key identifier:   3A:9E:E4:B8:AB:CF:FD:6C:6B:81:0B:7D:EE:D1:26:5C:85:D1:8D:4C
Certificate issuer:       /CN=415bbdadc090f33ec878e16eb6264e70c552a90c
Certificate serial:       0DB868
Authority key identifier: 75:66:62:AA:0A:9F:9C:45:99:93:29:65:92:C3:1F:6A:6F:23:CB:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/415bbdadc090f33ec878e16eb6264e70c552a90c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c35a6c7f-6b17-4317-91e5-bd872fb0c19a/0205c79189d0f7570e8cacce3aaeccc0a85b3303.roa
Signing time:             Wed 24 Mar 2021 14:41:14 +0000
ROA not before:           Wed 24 Mar 2021 14:41:13 +0000
ROA not after:            Tue 24 Mar 2026 14:41:13 +0000
asID:                     19169
IP address blocks:        186.33.148.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 899176 (0xdb868)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=415bbdadc090f33ec878e16eb6264e70c552a90c
        Validity
            Not Before: Mar 24 14:41:13 2021 GMT
            Not After : Mar 24 14:41:13 2026 GMT
        Subject: CN=0205c79189d0f7570e8cacce3aaeccc0a85b3303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:8c:2b:b7:85:32:bb:3a:e8:e3:21:3e:6b:fd:
                    5b:d2:c1:10:d1:84:f5:d7:75:67:db:8f:8c:88:68:
                    b4:13:e2:e4:4c:18:b7:fe:e6:9e:bf:c0:2d:1a:3f:
                    67:7e:65:96:02:b2:e2:7c:2e:3d:93:a8:5b:40:d8:
                    eb:0d:69:7b:92:5f:0e:6d:a2:7d:3f:fe:17:ed:cc:
                    61:d4:aa:78:7e:1e:91:66:27:b3:35:90:f3:59:ab:
                    90:d2:9a:6d:05:5a:08:59:fd:49:73:04:23:bc:85:
                    7e:f3:9c:3d:4d:f4:7e:d7:ec:23:6b:e4:0f:9f:fc:
                    96:3a:df:1e:09:c6:da:b9:b7:ff:04:97:bb:d2:c3:
                    83:48:3e:fc:83:4a:34:20:10:7d:c6:a0:f0:4d:29:
                    28:c5:f3:0f:bf:b7:4d:42:56:58:a9:f6:50:ea:6e:
                    9a:a0:62:c8:d5:bd:bd:b3:74:83:b5:e7:33:41:9d:
                    ca:7c:87:ed:e4:c6:c0:b7:8f:20:74:d8:5b:3e:17:
                    fa:d8:c3:2b:42:09:d0:83:12:77:fc:36:a7:13:b8:
                    50:2a:b2:b5:41:d3:d2:d5:b3:1e:6f:7a:ac:fa:38:
                    3e:6d:63:e7:9d:a5:10:61:7c:86:59:71:33:5f:cb:
                    2f:d7:cc:84:53:ee:e3:07:02:cf:24:0b:4c:23:b2:
                    de:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:9E:E4:B8:AB:CF:FD:6C:6B:81:0B:7D:EE:D1:26:5C:85:D1:8D:4C
            X509v3 Authority Key Identifier:
                keyid:75:66:62:AA:0A:9F:9C:45:99:93:29:65:92:C3:1F:6A:6F:23:CB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/415bbdadc090f33ec878e16eb6264e70c552a90c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c35a6c7f-6b17-4317-91e5-bd872fb0c19a/0205c79189d0f7570e8cacce3aaeccc0a85b3303.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c35a6c7f-6b17-4317-91e5-bd872fb0c19a/415bbdadc090f33ec878e16eb6264e70c552a90c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.33.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:32:bc:7b:4e:72:c7:be:90:cb:1c:92:7f:8c:7a:38:e4:e1:
         9f:a8:5e:9c:a6:74:b0:6a:62:ae:87:5b:7b:10:e1:b3:99:fe:
         2b:7f:5c:28:58:56:ce:fa:aa:22:e8:2a:04:b8:1e:b1:bf:93:
         f9:e5:f8:88:20:83:41:a9:ff:de:36:75:c8:42:15:e6:ee:00:
         2b:a6:f8:d5:3d:0c:32:d9:94:73:92:18:74:22:d2:54:56:b9:
         f6:e1:9d:0b:13:59:df:61:ba:72:a8:3f:5b:dd:1f:1f:2f:93:
         71:d6:13:63:d3:a6:47:3d:4e:3b:8d:7f:40:da:40:69:ee:50:
         0d:9f:71:36:73:f7:c1:30:a8:24:c4:a2:7b:90:d6:ce:21:2c:
         e8:78:e1:c4:ac:df:9b:28:ef:12:77:9d:00:ca:91:5b:f8:14:
         39:3c:e8:ea:2e:c7:15:90:00:de:d2:71:f9:f0:a3:7c:91:e0:
         f8:bd:32:cc:d4:82:4e:30:d0:bf:c3:97:e5:bf:00:0b:43:63:
         20:81:e8:a5:3b:7a:ac:c2:9a:cc:85:93:d8:16:87:15:92:6b:
         b9:db:87:8f:73:e6:e1:59:3d:bc:2d:4b:00:19:bb:28:e8:9d:
         27:4f:d0:a0:67:10:e3:ba:24:5a:29:2a:6e:fc:dd:db:f0:70:
         79:f2:35:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 17:34:07 2023 by rpki-client on console-fra.rpki-client.org