Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d01c6eda-23d9-490c-9a8e-d2e0d6832109/7eee65102749196ef4a524d4c582a79a38961aa2.roa
File:                     7eee65102749196ef4a524d4c582a79a38961aa2.roa (raw, json)
Hash identifier:          XxRPnawqO47iRW08Z+rrVgdSJbSTlDH++lTIzm2vjMI=
Subject key identifier:   AE:67:3C:4E:33:5B:40:49:49:9A:17:F7:4C:F9:1D:10:BF:FF:E4:73
Certificate issuer:       /CN=20cb7e1dbb3f418ec3ba7a98320aee5815bdb815
Certificate serial:       0A26B0
Authority key identifier: 5B:74:A0:72:2D:D3:0E:96:7E:83:EE:23:74:B7:27:F7:0C:E9:29:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cb7e1dbb3f418ec3ba7a98320aee5815bdb815.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d01c6eda-23d9-490c-9a8e-d2e0d6832109/7eee65102749196ef4a524d4c582a79a38961aa2.roa
Signing time:             Wed 29 Sep 2021 14:33:23 +0000
ROA not before:           Wed 29 Sep 2021 03:00:00 +0000
ROA not after:            Fri 29 Sep 2023 03:00:00 +0000
asID:                     64127
IP address blocks:        167.249.28.0/23 maxlen: 24
                          167.249.30.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 665264 (0xa26b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20cb7e1dbb3f418ec3ba7a98320aee5815bdb815
        Validity
            Not Before: Sep 29 03:00:00 2021 GMT
            Not After : Sep 29 03:00:00 2023 GMT
        Subject: CN=7eee65102749196ef4a524d4c582a79a38961aa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d6:b9:7e:84:e4:96:98:bc:d7:25:1d:89:a1:
                    8c:4b:a6:01:cc:1c:f1:82:6a:69:c9:f2:79:fc:15:
                    36:c6:52:0b:45:86:05:25:e7:59:5f:2e:26:fa:b7:
                    00:7a:6b:9d:af:37:0e:4d:08:86:3f:8b:3a:72:9c:
                    dd:86:70:42:bf:57:9d:e8:16:75:c1:5c:17:f2:c6:
                    a2:a2:6f:4f:f0:a9:bb:3a:c9:00:96:6e:61:1c:d0:
                    a7:46:e1:be:51:94:b3:9d:f3:3b:83:62:80:7a:d7:
                    bf:a7:2e:ae:6a:4e:ec:9f:c5:fd:fb:dc:e3:c9:d7:
                    2f:a6:7a:3d:8c:1b:01:27:f5:5e:64:96:9a:69:0f:
                    bc:f8:98:41:63:97:45:da:61:57:57:44:b7:14:de:
                    90:11:ea:de:44:30:d1:df:34:5e:9e:c5:29:00:48:
                    51:b5:58:e3:d2:cd:14:c5:91:11:97:6d:a2:12:84:
                    f4:69:79:af:18:26:8c:81:c2:69:b8:c3:cb:12:e1:
                    cf:5a:b1:b1:01:0e:7d:79:43:7c:a7:6d:91:6c:06:
                    e3:c0:ea:69:5f:c7:af:e7:a8:2f:81:6e:18:a5:30:
                    94:66:26:95:91:79:5c:a1:c0:7a:03:a9:1a:90:bf:
                    78:2c:7c:f3:c1:9e:72:06:f7:74:82:4c:aa:7f:b2:
                    c8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:67:3C:4E:33:5B:40:49:49:9A:17:F7:4C:F9:1D:10:BF:FF:E4:73
            X509v3 Authority Key Identifier:
                keyid:5B:74:A0:72:2D:D3:0E:96:7E:83:EE:23:74:B7:27:F7:0C:E9:29:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cb7e1dbb3f418ec3ba7a98320aee5815bdb815.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d01c6eda-23d9-490c-9a8e-d2e0d6832109/7eee65102749196ef4a524d4c582a79a38961aa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d01c6eda-23d9-490c-9a8e-d2e0d6832109/20cb7e1dbb3f418ec3ba7a98320aee5815bdb815.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.28.0-167.249.30.255

    Signature Algorithm: sha256WithRSAEncryption
         51:f7:31:95:0d:90:e9:83:0d:62:4d:7c:04:cc:bc:2d:a7:82:
         03:43:79:a3:0b:2b:c3:4b:65:41:e5:90:c0:0e:5f:53:9e:e3:
         37:af:8c:12:2a:4d:51:12:61:d3:a2:5d:6f:39:89:a8:13:9d:
         04:b1:d5:91:8a:53:d1:0d:fb:7f:06:d6:e6:da:8e:a0:06:9d:
         28:a1:4a:af:ac:90:a6:51:06:bd:ff:1b:f6:3a:1c:10:88:91:
         3c:43:d6:fd:f2:4b:ce:7f:f1:95:1b:af:3b:9d:be:24:07:f7:
         f9:69:da:21:88:d8:d8:09:62:b3:e8:0f:bd:60:f0:71:c6:9a:
         2f:4e:7a:3a:f6:c0:cd:75:f0:d2:bd:61:17:03:42:f0:4f:ec:
         f0:13:4b:4e:8d:64:09:a7:80:cc:18:37:7c:a3:cf:a7:b5:da:
         5b:31:a9:e5:19:e3:c6:3d:dd:dc:6f:7f:a7:cc:9b:83:fd:07:
         e9:9b:3b:9e:7b:d6:ba:71:b3:f6:22:dd:d4:09:8f:99:b0:21:
         fa:83:92:d1:0e:67:6e:a1:a4:07:48:e4:bc:0a:64:b3:e6:a0:
         40:ce:e6:ec:a5:89:60:ab:08:9a:1a:14:1b:61:13:39:24:93:
         20:a6:5b:cd:c8:72:11:b3:5a:63:4e:cb:39:bf:8a:d7:80:a3:
         f4:17:b6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:40 2023 by rpki-client on console-fra.rpki-client.org