Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c35a6c7f-6b17-4317-91e5-bd872fb0c19a/5126e3007917b237d7d71c51a864b6ca45d29baf.roa
File:                     5126e3007917b237d7d71c51a864b6ca45d29baf.roa (raw, json)
Hash identifier:          rFBhPYzVuWpnUC8sCaxTfxcGaq415RIWQyS95UdkM48=
Subject key identifier:   CD:D0:01:2D:B0:B5:2E:DC:51:CD:BD:E7:79:E7:7B:16:6E:99:B7:6B
Certificate issuer:       /CN=415bbdadc090f33ec878e16eb6264e70c552a90c
Certificate serial:       0DB78F
Authority key identifier: 75:66:62:AA:0A:9F:9C:45:99:93:29:65:92:C3:1F:6A:6F:23:CB:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/415bbdadc090f33ec878e16eb6264e70c552a90c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c35a6c7f-6b17-4317-91e5-bd872fb0c19a/5126e3007917b237d7d71c51a864b6ca45d29baf.roa
Signing time:             Wed 24 Mar 2021 14:41:14 +0000
ROA not before:           Wed 24 Mar 2021 14:41:13 +0000
ROA not after:            Tue 24 Mar 2026 14:41:13 +0000
asID:                     27947
IP address blocks:        186.33.148.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 898959 (0xdb78f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=415bbdadc090f33ec878e16eb6264e70c552a90c
        Validity
            Not Before: Mar 24 14:41:13 2021 GMT
            Not After : Mar 24 14:41:13 2026 GMT
        Subject: CN=5126e3007917b237d7d71c51a864b6ca45d29baf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:72:2c:d6:16:f4:d9:21:72:fb:36:49:43:68:
                    cb:a7:7a:5c:62:56:6a:c8:65:82:7b:d3:fe:f5:12:
                    a3:0d:40:e5:99:d2:88:48:1a:a7:e9:7e:ac:4c:ba:
                    d1:9e:1f:35:80:ea:18:1b:29:0b:30:cb:3b:0e:af:
                    27:6b:13:7a:54:af:a5:2d:11:b4:4d:82:e5:3e:4a:
                    89:e0:e9:7d:45:0a:43:bb:85:92:e5:79:a6:49:7a:
                    f6:72:2d:5b:1d:1c:f7:0b:b5:ef:84:04:da:3a:47:
                    34:8b:71:6b:eb:84:53:4d:b4:e9:1e:63:b0:90:7c:
                    6e:fc:df:c6:d8:9e:64:20:67:2f:6c:e9:7a:79:42:
                    31:6f:49:61:ca:a4:59:27:75:a5:93:9c:cb:96:4e:
                    ae:62:c5:af:16:68:71:ea:d3:32:95:2a:a7:88:c3:
                    b0:f8:53:c1:45:30:38:5c:65:e5:29:ee:ae:9f:25:
                    53:14:1d:2b:91:ff:42:c8:46:39:bd:17:cb:b5:de:
                    27:17:98:43:6f:13:9d:49:7a:58:03:f6:bb:70:73:
                    3b:89:87:29:ca:7a:f7:1e:42:4f:bc:36:c5:1b:98:
                    5e:18:02:1e:5a:d7:c5:65:fa:14:17:ff:f0:e7:ac:
                    c2:48:77:50:e8:cd:69:eb:df:9f:32:f7:bc:7d:9b:
                    98:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D0:01:2D:B0:B5:2E:DC:51:CD:BD:E7:79:E7:7B:16:6E:99:B7:6B
            X509v3 Authority Key Identifier:
                keyid:75:66:62:AA:0A:9F:9C:45:99:93:29:65:92:C3:1F:6A:6F:23:CB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/415bbdadc090f33ec878e16eb6264e70c552a90c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c35a6c7f-6b17-4317-91e5-bd872fb0c19a/5126e3007917b237d7d71c51a864b6ca45d29baf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c35a6c7f-6b17-4317-91e5-bd872fb0c19a/415bbdadc090f33ec878e16eb6264e70c552a90c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.33.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:0e:25:3c:0b:ed:45:e3:29:0f:d8:a0:be:2d:26:d0:9d:80:
         07:ab:f7:da:61:71:77:30:40:9f:97:33:a5:2d:f4:2e:ac:5f:
         5d:43:b8:34:0f:47:db:5b:34:84:59:0b:78:1c:e7:50:ba:9c:
         c3:92:be:4c:02:a9:c0:a6:d3:80:ea:e3:18:c8:da:e2:ec:34:
         ab:bf:da:e7:f8:96:bc:fb:ef:46:f4:f3:53:4e:9d:b0:67:c5:
         13:ff:06:76:f0:d3:57:ef:20:c6:69:9d:77:bd:c2:a9:04:e6:
         84:d4:87:5d:b5:df:26:46:2b:e5:9f:40:92:ab:6d:65:ef:be:
         83:13:66:32:33:27:5a:02:52:c6:c5:fe:b3:2e:61:9b:6c:0e:
         73:24:26:de:27:48:b5:24:ea:44:97:29:a4:c0:47:59:87:6e:
         80:cc:c3:af:f4:f5:e9:7c:14:17:3e:7f:3a:7e:97:3a:ff:12:
         8b:a4:fe:56:d4:09:b7:3d:81:1c:ba:33:6d:31:72:69:80:16:
         47:5a:aa:1a:00:d1:05:3a:0d:05:15:99:f5:79:d1:97:82:04:
         95:3a:8f:5a:1c:32:69:40:b2:9f:36:3e:05:b2:f2:4b:d9:96:
         c5:51:d1:b2:76:c2:67:13:83:a4:80:44:c9:f3:cf:9f:8c:ee:
         18:8c:fc:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 17:34:07 2023 by rpki-client on console-fra.rpki-client.org