Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d3b3d224-8c50-47a4-886a-013809ff714c/0a6e0039234d10ca21d6bc843c0ace22f249ed9d.roa
File:                     0a6e0039234d10ca21d6bc843c0ace22f249ed9d.roa (raw, json)
Hash identifier:          hI7qlgsX2DLPGUDYBndW1OTqriobVhRyxnlJB21689g=
Subject key identifier:   02:73:50:E7:85:21:10:13:54:A5:53:0C:59:D0:04:7C:D3:75:7C:27
Certificate issuer:       /CN=53a84133ecea8791e075c28348a5c7805616cc52
Certificate serial:       09A832
Authority key identifier: F0:CE:25:08:5E:0B:77:74:7C:54:A9:C3:77:59:4F:4C:D7:AD:AC:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53a84133ecea8791e075c28348a5c7805616cc52.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d3b3d224-8c50-47a4-886a-013809ff714c/0a6e0039234d10ca21d6bc843c0ace22f249ed9d.roa
Signing time:             Tue 25 Apr 2023 21:44:46 +0000
ROA not before:           Mon 24 Apr 2023 21:44:46 +0000
ROA not after:            Fri 25 Apr 2025 21:44:46 +0000
asID:                     271998
IP address blocks:        131.72.139.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 632882 (0x9a832)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53a84133ecea8791e075c28348a5c7805616cc52
        Validity
            Not Before: Apr 24 21:44:46 2023 GMT
            Not After : Apr 25 21:44:46 2025 GMT
        Subject: CN=0a6e0039234d10ca21d6bc843c0ace22f249ed9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b9:d4:4e:43:f5:60:bf:9f:b8:55:b9:75:29:
                    fe:ce:99:a1:c4:a3:5f:28:4d:68:52:0d:94:7e:f7:
                    54:ac:db:ec:1d:ad:6e:74:53:55:b7:0f:7f:79:c1:
                    33:73:33:9c:ca:9d:75:e6:36:1e:0c:54:93:c2:a5:
                    b9:a1:61:56:e7:dd:3d:6a:d8:15:bd:38:74:35:b2:
                    e1:d1:e5:fb:45:7e:ad:8c:39:ae:9b:37:73:da:65:
                    11:58:6d:f8:bb:ea:39:e6:da:b3:09:b6:a0:08:ad:
                    c5:2d:6a:a4:49:96:d9:48:21:6b:dc:4d:cc:d7:c6:
                    a8:95:d9:ab:8b:84:25:17:1a:2f:ed:67:88:4c:5b:
                    47:ce:fa:bf:b0:c7:77:8f:a0:c4:98:e5:3a:a1:6f:
                    8c:e8:5b:cb:db:17:88:3a:e4:17:60:f3:0b:c2:d2:
                    7c:cd:94:b5:c4:45:56:a1:30:74:ee:51:97:d5:02:
                    66:94:09:9c:2b:85:d7:cf:6c:cc:7a:df:9a:51:bc:
                    53:8b:52:d6:c5:3b:b8:27:1a:c6:9b:bf:42:ce:d3:
                    f6:3f:b8:2b:64:a2:49:b9:6a:da:71:89:83:bb:a5:
                    3f:54:38:22:f7:35:84:25:bd:06:ac:e7:ae:9c:99:
                    ba:a9:4c:a0:17:f4:1e:0f:a6:f6:ba:31:57:4a:18:
                    a3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:73:50:E7:85:21:10:13:54:A5:53:0C:59:D0:04:7C:D3:75:7C:27
            X509v3 Authority Key Identifier:
                keyid:F0:CE:25:08:5E:0B:77:74:7C:54:A9:C3:77:59:4F:4C:D7:AD:AC:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53a84133ecea8791e075c28348a5c7805616cc52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d3b3d224-8c50-47a4-886a-013809ff714c/0a6e0039234d10ca21d6bc843c0ace22f249ed9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d3b3d224-8c50-47a4-886a-013809ff714c/53a84133ecea8791e075c28348a5c7805616cc52.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:28:b2:d9:8a:1b:55:2e:02:5f:7a:e9:38:ad:73:a2:6b:cc:
         be:c3:ce:1f:3a:7f:5b:40:16:f6:fc:de:e2:52:af:dc:d0:b6:
         3f:3b:90:b6:85:87:19:b4:ba:48:9e:ef:4c:d3:e6:f2:ce:8c:
         63:5a:87:d0:97:21:e7:3a:93:45:e8:95:91:d9:4d:42:00:66:
         ab:d0:7a:12:c3:cc:5a:75:80:dc:16:d3:b9:a5:b6:ea:81:10:
         4b:41:2d:62:3e:0f:86:9c:74:aa:4d:cd:0c:a6:d6:93:72:ef:
         6d:d3:fb:fc:cd:50:f2:4f:40:af:2f:0a:93:b2:81:d4:39:60:
         da:ce:9a:a2:1a:4d:16:00:ec:50:57:23:5c:74:bb:54:2f:b2:
         56:70:22:0b:31:5c:8d:00:9e:e5:d3:44:8e:54:d7:f5:f9:37:
         09:fa:a4:6c:9f:06:d8:20:14:77:27:54:51:b0:85:2b:7a:a7:
         b6:c1:68:be:a9:50:00:5b:cd:0f:22:8f:ce:96:e4:51:ae:3e:
         3b:2a:3a:1e:98:2a:19:99:30:2e:31:b3:ea:51:ee:d1:43:99:
         90:b3:23:38:b5:61:41:b7:02:fe:4e:9a:23:37:b6:87:5e:7d:
         8c:a1:68:01:61:60:e4:08:14:57:5d:ff:52:a2:6e:d0:4d:72:
         59:ce:36:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 29 17:42:10 2023 by rpki-client on console-ams.rpki-client.org