Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c8800a5a-c6dc-4e4c-a5b1-2075bb27ccf6/d37d8e043d209a1ab06fafb058c4ac9d02c77238.roa
File:                     d37d8e043d209a1ab06fafb058c4ac9d02c77238.roa (raw, json)
Hash identifier:          sGJ+s9eGT/k6C59d425WzcJfnE8ZUYBri+6AB4GNcvc=
Subject key identifier:   BA:62:7C:34:13:FC:02:E0:FE:85:CF:EB:79:72:60:BF:1C:DD:1B:52
Certificate issuer:       /CN=6c5554005c92cb61f0d4f1fea13c41cb42dcc3ba
Certificate serial:       10FFEC
Authority key identifier: 2D:25:1A:17:C5:E6:DB:70:86:E8:5B:F4:F5:72:7C:12:ED:23:B7:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c5554005c92cb61f0d4f1fea13c41cb42dcc3ba.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c8800a5a-c6dc-4e4c-a5b1-2075bb27ccf6/d37d8e043d209a1ab06fafb058c4ac9d02c77238.roa
Signing time:             Mon 18 Oct 2021 16:06:57 +0000
ROA not before:           Mon 18 Oct 2021 03:00:00 +0000
ROA not after:            Wed 18 Oct 2023 03:00:00 +0000
asID:                     27888
IP address blocks:        201.238.208.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1114092 (0x10ffec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c5554005c92cb61f0d4f1fea13c41cb42dcc3ba
        Validity
            Not Before: Oct 18 03:00:00 2021 GMT
            Not After : Oct 18 03:00:00 2023 GMT
        Subject: CN=d37d8e043d209a1ab06fafb058c4ac9d02c77238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:11:b5:8e:6e:ad:5d:03:88:c7:24:9f:41:05:
                    35:61:66:77:da:37:00:87:c6:7a:b3:7e:03:60:f8:
                    57:54:c4:b9:e4:78:ff:38:e1:9b:d7:0c:fd:2b:0e:
                    34:13:8c:5f:e3:14:6f:5f:ab:ee:e8:e8:ff:66:d8:
                    07:7b:2f:8a:60:ff:67:4d:9d:97:2a:ce:10:af:08:
                    08:59:de:94:98:d9:06:42:45:e0:61:e0:fc:07:b9:
                    a6:9d:84:0d:e7:6d:29:46:f3:b6:a1:d5:94:1e:ed:
                    75:bf:50:70:a1:b9:e2:2e:06:9c:df:36:ab:65:47:
                    14:7f:48:6c:c3:b2:3c:32:60:ea:74:53:84:ec:5d:
                    24:95:50:06:d0:b4:56:8b:d5:2a:a4:64:7d:48:dd:
                    04:bb:c1:32:50:08:95:07:ac:84:92:f1:73:05:f2:
                    1d:c2:1e:76:d4:e7:88:16:df:6f:fc:78:8f:cf:e8:
                    3e:f7:c4:f4:b9:04:ec:ae:80:45:bb:71:96:88:cb:
                    54:ea:ae:55:3e:e3:c5:cc:cf:fa:ef:00:78:fb:a0:
                    42:41:d0:6a:ce:2f:24:2d:49:6c:59:01:be:ea:42:
                    94:67:a7:f9:5f:77:0b:82:65:e2:46:68:0f:43:b6:
                    7a:08:d4:58:fc:d3:a6:a4:44:d7:8a:df:5e:4b:17:
                    e4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:62:7C:34:13:FC:02:E0:FE:85:CF:EB:79:72:60:BF:1C:DD:1B:52
            X509v3 Authority Key Identifier:
                keyid:2D:25:1A:17:C5:E6:DB:70:86:E8:5B:F4:F5:72:7C:12:ED:23:B7:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c5554005c92cb61f0d4f1fea13c41cb42dcc3ba.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c8800a5a-c6dc-4e4c-a5b1-2075bb27ccf6/d37d8e043d209a1ab06fafb058c4ac9d02c77238.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c8800a5a-c6dc-4e4c-a5b1-2075bb27ccf6/6c5554005c92cb61f0d4f1fea13c41cb42dcc3ba.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.238.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:99:92:0e:f4:9f:a0:f0:86:af:36:3a:c2:c4:2a:33:dd:c6:
         da:7e:43:2d:aa:9d:e2:53:bc:13:88:7f:a0:b9:95:a6:9b:59:
         6e:22:de:12:a3:79:00:40:fa:72:7b:0b:fd:c5:d2:3e:a1:e6:
         c1:af:74:68:c0:53:ef:2e:58:a1:8d:69:01:75:80:94:d2:77:
         22:a1:6c:24:27:2a:68:96:5e:98:0e:80:c9:b6:60:cd:67:a8:
         a7:2d:a8:08:11:bf:a5:89:0e:17:7c:36:05:f6:a6:cd:ac:c2:
         2a:32:eb:17:22:2a:0e:ff:ae:bb:f7:9e:d8:36:39:df:e6:2c:
         ae:80:cf:97:fd:57:1b:a8:cf:3b:a9:35:e6:fa:94:b9:7f:fe:
         70:3d:49:48:7f:de:f5:d9:a2:05:01:75:03:f9:9c:de:ca:4c:
         d0:62:9e:fd:f4:4a:56:12:b1:54:4e:e1:65:b8:06:ce:e0:f8:
         cc:e1:81:e7:93:8c:09:3b:e5:49:ae:4d:9f:4e:bc:df:16:bf:
         f6:4e:e2:a1:0a:63:65:92:59:23:18:15:dc:21:e5:30:0c:64:
         42:4a:f5:09:82:7a:73:0c:61:3b:02:69:ec:7d:75:35:dd:47:
         68:08:a7:98:e0:8a:02:d4:bb:9e:b5:29:bc:87:00:2f:ff:f1:
         5b:99:0b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 17 08:12:03 2023 by rpki-client on console-fra.rpki-client.org