Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d01c6eda-23d9-490c-9a8e-d2e0d6832109/1616a781e20997269be8f462cd64647311c6ca57.roa
File:                     1616a781e20997269be8f462cd64647311c6ca57.roa (raw, json)
Hash identifier:          pyUAkQOTT7j52WpJ6zkrABuOaIqwWvRdQNL4Qg3Ya9U=
Subject key identifier:   49:8D:91:D9:43:F8:61:67:B5:85:48:B0:DA:D7:90:A4:C1:7A:CC:96
Certificate issuer:       /CN=20cb7e1dbb3f418ec3ba7a98320aee5815bdb815
Certificate serial:       1A638E
Authority key identifier: 5B:74:A0:72:2D:D3:0E:96:7E:83:EE:23:74:B7:27:F7:0C:E9:29:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cb7e1dbb3f418ec3ba7a98320aee5815bdb815.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d01c6eda-23d9-490c-9a8e-d2e0d6832109/1616a781e20997269be8f462cd64647311c6ca57.roa
Signing time:             Wed 05 Jul 2023 16:05:38 +0000
ROA not before:           Tue 04 Jul 2023 16:05:38 +0000
ROA not after:            Sat 05 Jul 2025 16:05:38 +0000
asID:                     64127
IP address blocks:        167.249.28.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1729422 (0x1a638e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20cb7e1dbb3f418ec3ba7a98320aee5815bdb815
        Validity
            Not Before: Jul  4 16:05:38 2023 GMT
            Not After : Jul  5 16:05:38 2025 GMT
        Subject: CN=1616a781e20997269be8f462cd64647311c6ca57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8a:82:0f:eb:aa:47:c7:fc:88:f4:55:8f:23:
                    6a:08:1f:74:7b:b2:08:da:05:0c:b2:3d:21:92:28:
                    19:55:4e:cb:f9:cb:99:4d:b5:4a:18:1f:83:67:e5:
                    87:e3:d2:6f:69:83:11:e2:ff:22:e6:35:7f:b7:ab:
                    96:2f:15:0d:6e:ce:6f:a8:9b:aa:91:92:44:08:ad:
                    47:c8:bd:54:01:bc:6a:53:31:a2:3f:16:1b:c9:05:
                    70:f8:d2:47:d9:46:26:24:36:9b:c8:81:a7:20:80:
                    e6:08:6a:43:84:0b:99:e6:15:e5:5a:5c:64:69:a5:
                    95:ac:b3:48:72:d8:9f:e6:cf:14:6f:8e:b4:11:8d:
                    35:66:e1:21:fc:5d:29:02:34:fe:ba:e9:27:4e:75:
                    bd:1a:98:e9:b1:f6:dc:bb:ad:17:71:0e:9a:25:23:
                    ed:e9:42:a2:37:d0:ce:3a:f9:e6:fa:63:34:d0:88:
                    03:27:b8:0c:23:ac:a7:86:cf:5e:18:fd:c4:c3:c7:
                    26:2f:44:ec:90:ed:81:3d:bb:f6:ae:6d:c7:b2:2d:
                    b0:73:6a:8f:e8:a2:b9:8e:30:74:26:13:ce:15:31:
                    dc:31:a7:9d:40:9f:fc:62:5b:5e:fa:f1:bf:4e:75:
                    94:bd:90:e9:4b:2d:35:74:5c:57:26:19:13:2d:59:
                    ce:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:8D:91:D9:43:F8:61:67:B5:85:48:B0:DA:D7:90:A4:C1:7A:CC:96
            X509v3 Authority Key Identifier:
                keyid:5B:74:A0:72:2D:D3:0E:96:7E:83:EE:23:74:B7:27:F7:0C:E9:29:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cb7e1dbb3f418ec3ba7a98320aee5815bdb815.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d01c6eda-23d9-490c-9a8e-d2e0d6832109/1616a781e20997269be8f462cd64647311c6ca57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d01c6eda-23d9-490c-9a8e-d2e0d6832109/20cb7e1dbb3f418ec3ba7a98320aee5815bdb815.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:3f:7e:ae:14:5c:e3:6e:cd:cc:e6:24:fa:25:0c:cc:5d:71:
         1e:64:1a:0a:3d:b9:4f:0f:fd:42:af:6b:ff:eb:0e:07:65:3c:
         55:5d:4b:44:17:b3:f0:c1:e5:40:31:c6:d1:ab:71:4b:5e:7f:
         c2:4a:8f:a0:17:5d:22:44:ce:e7:17:b8:6b:e8:21:10:47:2e:
         8e:e0:99:4a:07:af:8b:f1:85:79:0e:3a:c5:9b:2b:a7:ce:d4:
         2c:35:33:1b:ee:ab:a6:cb:71:86:d5:b0:20:f5:38:f7:24:ec:
         b4:b3:8f:6e:10:1b:9f:72:58:5a:cb:61:cc:95:06:37:d7:66:
         23:93:69:40:dd:70:2f:55:b9:54:dd:7f:02:5d:e2:bd:6e:9d:
         be:97:85:ce:8c:e3:c1:a0:86:c6:c9:c3:62:43:24:4a:21:a6:
         8f:53:c0:c1:3a:d2:84:6d:33:d0:47:f5:8f:1b:e7:fb:d9:62:
         3b:5c:62:32:24:04:35:ac:e4:72:c0:c0:c0:ea:81:b6:5e:82:
         b3:8b:62:ed:93:d2:47:1d:44:c5:98:70:f7:14:ff:fd:b1:d2:
         1c:c2:4d:d2:20:e8:50:ba:17:04:99:19:c4:cf:3d:d3:31:a9:
         04:52:b2:bc:f2:34:13:ee:c6:2c:c0:f1:cc:87:20:24:e7:08:
         77:13:62:fb
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGmOOMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDIw
Y2I3ZTFkYmIzZjQxOGVjM2JhN2E5ODMyMGFlZTU4MTViZGI4MTUwHhcNMjMwNzA0
MTYwNTM4WhcNMjUwNzA1MTYwNTM4WjAzMTEwLwYDVQQDEygxNjE2YTc4MWUyMDk5
NzI2OWJlOGY0NjJjZDY0NjQ3MzExYzZjYTU3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtIqCD+uqR8f8iPRVjyNqCB90e7II2gUMsj0hkigZVU7L+cuZ
TbVKGB+DZ+WH49JvaYMR4v8i5jV/t6uWLxUNbs5vqJuqkZJECK1HyL1UAbxqUzGi
PxYbyQVw+NJH2UYmJDabyIGnIIDmCGpDhAuZ5hXlWlxkaaWVrLNIctif5s8Ub460
EY01ZuEh/F0pAjT+uuknTnW9Gpjpsfbcu60XcQ6aJSPt6UKiN9DOOvnm+mM00IgD
J7gMI6ynhs9eGP3Ew8cmL0TskO2BPbv2rm3Hsi2wc2qP6KK5jjB0JhPOFTHcMaed
QJ/8Ylte+vG/TnWUvZDpSy01dFxXJhkTLVnOcwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFEmNkdlD+GFntYVIsNrXkKTBesyWMB8GA1UdIwQYMBaAFFt0oHIt0w6WfoPu
I3S3J/cM6SlcMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjBjYjdl
MWRiYjNmNDE4ZWMzYmE3YTk4MzIwYWVlNTgxNWJkYjgxNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDAxYzZlZGEtMjNkOS00OTBjLTlhOGUtZDJlMGQ2
ODMyMTA5LzE2MTZhNzgxZTIwOTk3MjY5YmU4ZjQ2MmNkNjQ2NDczMTFjNmNhNTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kMDFjNmVkYS0yM2Q5LTQ5MGMtOWE4ZS1kMmUw
ZDY4MzIxMDkvMjBjYjdlMWRiYjNmNDE4ZWMzYmE3YTk4MzIwYWVlNTgxNWJkYjgx
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKf5HDANBgkqhkiG9w0BAQsFAAOCAQEALj9+rhRc427NzOYk
+iUMzF1xHmQaCj25Tw/9Qq9r/+sOB2U8VV1LRBez8MHlQDHG0atxS15/wkqPoBdd
IkTO5xe4a+ghEEcujuCZSgevi/GFeQ46xZsrp87ULDUzG+6rpstxhtWwIPU49yTs
tLOPbhAbn3JYWsthzJUGN9dmI5NpQN1wL1W5VN1/Al3ivW6dvpeFzozjwaCGxsnD
YkMkSiGmj1PAwTrShG0z0Ef1jxvn+9liO1xiMiQENazkcsDAwOqBtl6Cs4ti7ZPS
Rx1ExZhw9xT//bHSHMJN0iDoULoXBJkZxM890zGpBFKyvPI0E+7GLMDxzIcgJOcI
dxNi+w==
-----END CERTIFICATE-----
Generated at Mon Dec 4 15:09:53 2023 by rpki-client on console-fra.rpki-client.org