Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6e1048a-93ca-438a-a436-81d815ef04d1/f36a3b366f3058b22ae38c8808323561bbc4a107.roa
File:                     f36a3b366f3058b22ae38c8808323561bbc4a107.roa (raw, json)
Hash identifier:          wAN9BhLl9Z8i8XTfDOdUk3VAJvp+/V53HNeZ+oZFygQ=
Subject key identifier:   C5:F4:8F:3A:0D:B4:D6:08:69:40:C4:C8:FE:C5:4A:9A:DC:8C:05:74
Certificate issuer:       /CN=4765b8b9f74b776a4e530fc87f986c651911f727
Certificate serial:       05331A
Authority key identifier: F4:12:7B:B5:12:E1:E7:AD:72:EB:3D:00:A4:C7:53:40:07:04:38:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4765b8b9f74b776a4e530fc87f986c651911f727.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d6e1048a-93ca-438a-a436-81d815ef04d1/f36a3b366f3058b22ae38c8808323561bbc4a107.roa
Signing time:             Wed 24 Mar 2021 22:49:27 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     264754
IP address blocks:        168.194.140.0/24 maxlen: 24
                          168.194.141.0/24 maxlen: 24
                          168.194.142.0/24 maxlen: 24
                          168.194.143.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340762 (0x5331a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4765b8b9f74b776a4e530fc87f986c651911f727
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=f36a3b366f3058b22ae38c8808323561bbc4a107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a9:c8:08:7e:78:7a:18:0a:ae:98:0e:31:46:
                    53:bd:35:e1:03:91:79:c2:4f:10:be:28:9f:94:e9:
                    34:83:ed:bc:03:aa:85:6e:03:dc:60:9b:11:97:e4:
                    a3:35:fa:dc:cb:db:d8:cb:20:e0:4d:b3:c7:a9:2b:
                    1a:6c:50:5e:f5:a3:d7:b2:db:cc:c4:80:d4:07:bf:
                    8c:bb:0a:60:59:81:c0:2b:a9:02:fa:93:ff:58:42:
                    59:5d:9f:c8:ea:a7:42:d5:70:43:24:59:f0:b9:c2:
                    17:15:db:49:d4:57:58:fd:ca:98:d0:d3:84:d7:fd:
                    ab:82:7d:19:07:ea:33:31:67:06:c7:55:0c:ae:13:
                    a8:2a:e4:d8:90:db:56:44:e7:39:15:38:7f:c6:24:
                    90:ed:18:f0:18:d0:cd:7a:9e:76:94:a0:db:09:d7:
                    d0:ab:a6:38:af:44:77:c2:08:7c:45:f3:a1:a0:87:
                    7d:4c:b2:98:15:c4:41:64:d5:97:ac:b3:9f:09:9b:
                    29:cf:9b:98:dd:db:35:54:ba:db:e1:83:6e:3d:bc:
                    f8:13:8a:ff:a9:9a:ae:84:32:6d:93:4f:fc:bd:1d:
                    90:92:40:63:12:a1:aa:96:ea:54:5d:7e:c1:62:92:
                    64:db:eb:f5:8d:42:9b:82:68:81:02:e4:31:e3:44:
                    51:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F4:8F:3A:0D:B4:D6:08:69:40:C4:C8:FE:C5:4A:9A:DC:8C:05:74
            X509v3 Authority Key Identifier:
                keyid:F4:12:7B:B5:12:E1:E7:AD:72:EB:3D:00:A4:C7:53:40:07:04:38:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4765b8b9f74b776a4e530fc87f986c651911f727.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6e1048a-93ca-438a-a436-81d815ef04d1/f36a3b366f3058b22ae38c8808323561bbc4a107.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d6e1048a-93ca-438a-a436-81d815ef04d1/4765b8b9f74b776a4e530fc87f986c651911f727.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:a9:bf:5c:ea:e9:6e:00:bd:c6:17:24:40:fa:d2:99:b4:2c:
         bd:0e:5d:b5:51:33:e7:ac:07:23:c4:dd:f9:4f:85:7f:1d:a8:
         5e:6c:c1:63:be:f6:14:e9:ec:6d:a0:61:88:b1:c0:6d:f1:a8:
         a8:51:a9:44:73:00:d6:1e:20:1a:b4:18:8b:75:4b:c7:72:99:
         9f:fa:96:78:bf:3d:2c:2b:53:a1:07:8a:2f:af:40:8b:77:ad:
         b9:a0:94:73:74:b5:5e:e9:c3:87:2c:34:b7:38:e9:5b:7e:02:
         c8:f4:ad:ef:b6:16:e7:34:e8:a3:cc:30:14:2e:63:2d:64:30:
         00:61:80:3f:e7:a0:50:fe:47:ce:28:41:78:f1:f4:b8:f6:5d:
         c3:95:d8:33:54:5a:cd:73:03:a1:b6:56:b5:c1:05:5e:c0:79:
         30:82:90:b4:50:10:f3:4e:89:05:d8:bf:2d:a6:5b:62:a5:20:
         7d:83:bb:46:50:56:44:a0:ff:95:55:ce:60:13:3c:80:d7:fd:
         9e:67:78:fe:ab:45:45:83:d5:d2:9c:b8:90:92:3c:3c:04:9b:
         0c:ec:5f:3e:3b:4a:4e:30:c5:50:ca:42:3c:aa:90:63:e3:b7:
         52:96:bc:59:c6:9e:17:5a:6a:f9:64:d8:f4:4a:35:30:e4:06:
         d5:62:53:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:40 2023 by rpki-client on console-fra.rpki-client.org