Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d541744d-d9dd-416e-b948-564b83c8d833/9e40db3053ff8928b9c8360af4bd1c8ad9d587a9.roa
File:                     9e40db3053ff8928b9c8360af4bd1c8ad9d587a9.roa (raw, json)
Hash identifier:          e+MXc7SaP5S13V7FAGJtWS1OmodRjgg1Ck4FXeZvIBM=
Subject key identifier:   BF:12:29:AD:BB:97:AD:A3:2D:7D:12:EA:3A:E1:07:7C:F4:E1:2F:4E
Certificate issuer:       /CN=e69db0dddc072dab05b76f666b2b150d51ad28d1
Certificate serial:       0D374D
Authority key identifier: B3:E7:FA:2E:50:D1:99:E0:6D:83:A0:5F:4E:58:DE:04:B3:40:88:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e69db0dddc072dab05b76f666b2b150d51ad28d1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d541744d-d9dd-416e-b948-564b83c8d833/9e40db3053ff8928b9c8360af4bd1c8ad9d587a9.roa
Signing time:             Wed 24 Mar 2021 14:46:36 +0000
ROA not before:           Wed 24 Mar 2021 14:46:36 +0000
ROA not after:            Tue 24 Mar 2026 14:46:36 +0000
asID:                     264635
IP address blocks:        132.255.208.0/22 maxlen: 24
                          167.249.20.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 866125 (0xd374d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e69db0dddc072dab05b76f666b2b150d51ad28d1
        Validity
            Not Before: Mar 24 14:46:36 2021 GMT
            Not After : Mar 24 14:46:36 2026 GMT
        Subject: CN=9e40db3053ff8928b9c8360af4bd1c8ad9d587a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:28:93:8a:72:62:59:2a:24:98:78:ad:8b:f1:
                    16:0b:02:4b:32:8c:26:0f:8e:a0:eb:cd:17:e0:dc:
                    c1:d0:80:65:7f:e7:f2:8c:1e:14:1b:52:14:b2:27:
                    c3:be:2b:11:2e:e6:c1:0b:60:94:19:25:c6:3c:c8:
                    98:c3:6f:ed:41:07:ba:eb:8f:21:ed:29:eb:64:7e:
                    39:61:4b:f6:66:58:82:43:5e:26:d5:b0:5c:c2:b6:
                    1b:05:6c:28:f8:a1:fe:54:5b:c8:29:c5:34:f4:ae:
                    12:3b:b3:83:1a:fa:70:a5:07:8f:10:0f:41:3a:02:
                    24:f5:e1:b0:3d:f5:27:59:45:39:1b:3a:1b:ff:a8:
                    47:a6:a3:15:af:35:13:ec:a7:fe:75:38:68:ea:a0:
                    38:81:0b:de:47:cc:0a:0c:42:d4:9c:96:41:92:30:
                    31:d7:e0:a9:b6:fe:40:b5:59:32:6d:bc:d5:79:67:
                    e2:25:f7:a7:18:73:b7:f9:67:a6:dd:f4:8c:f5:b4:
                    56:16:3a:3a:46:52:0b:e9:55:d2:df:df:a9:ce:d5:
                    67:6b:de:b4:bc:ea:a2:e0:4c:6b:de:b1:d7:c0:e2:
                    42:24:cf:d9:d9:4d:25:4e:e9:14:a4:30:e0:44:8b:
                    2c:52:e8:d5:05:bc:e5:89:7c:86:6e:8e:8a:3b:35:
                    67:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:12:29:AD:BB:97:AD:A3:2D:7D:12:EA:3A:E1:07:7C:F4:E1:2F:4E
            X509v3 Authority Key Identifier:
                keyid:B3:E7:FA:2E:50:D1:99:E0:6D:83:A0:5F:4E:58:DE:04:B3:40:88:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e69db0dddc072dab05b76f666b2b150d51ad28d1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d541744d-d9dd-416e-b948-564b83c8d833/9e40db3053ff8928b9c8360af4bd1c8ad9d587a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d541744d-d9dd-416e-b948-564b83c8d833/e69db0dddc072dab05b76f666b2b150d51ad28d1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.208.0/22
                  167.249.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:d5:1e:4e:19:88:ae:d2:0a:0b:3d:cb:90:f1:3a:30:3e:5c:
         7c:fa:48:bf:79:2f:d9:1a:16:c3:51:36:a9:d7:a6:1e:eb:5b:
         f1:0c:b1:e1:7e:9a:a2:b1:fa:99:9e:ec:91:33:e3:66:17:bb:
         e1:b3:e1:ad:f3:aa:6a:f7:de:a6:2c:c0:f9:9b:37:6e:aa:22:
         36:01:c8:3f:9f:7e:4e:dc:50:b6:35:ef:a8:44:81:50:33:27:
         64:e3:2a:bd:17:8f:3b:1d:fa:47:08:d4:f9:d9:13:7a:54:a1:
         6a:9c:be:87:89:f8:01:e3:a0:20:cc:a3:8f:89:a9:01:33:e4:
         9b:62:d3:64:57:ef:49:94:a0:22:4e:d1:49:f7:34:e3:68:e8:
         cf:29:6a:13:7a:e8:3d:e9:5c:99:4e:a3:50:b3:91:20:e3:2e:
         c6:79:85:d8:9d:3c:91:31:c6:16:93:a6:a6:78:c8:7d:b4:6c:
         fa:31:67:3d:27:b5:c3:2a:e0:2b:61:3e:eb:35:f2:a4:3b:c3:
         71:83:26:01:1d:e0:73:0a:fe:6b:0b:d9:2a:32:aa:af:82:29:
         eb:f6:6e:fd:1b:5a:40:f4:fc:fd:fa:1d:71:63:ee:26:1e:d9:
         35:25:97:81:ba:03:00:75:96:6c:79:ab:7c:1f:a0:eb:48:49:
         3d:03:b5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 25 06:13:43 2023 by rpki-client on console-fra.rpki-client.org