Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/dd9aa11814d79586a06bc0f4eeff966136d1656f.roa
File:                     dd9aa11814d79586a06bc0f4eeff966136d1656f.roa (raw, json)
Hash identifier:          EXXzsRXzj/Ld3mLUB6vx6r5e3lnDFMbMmLY4yC8t73A=
Subject key identifier:   84:C1:B3:F6:4F:66:DD:8B:0D:C1:0B:54:E4:55:0A:31:3E:FD:0B:52
Certificate issuer:       /CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
Certificate serial:       0C58
Authority key identifier: D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/dd9aa11814d79586a06bc0f4eeff966136d1656f.roa
Signing time:             Fri 04 Jun 2021 02:31:14 +0000
ROA not before:           Thu 03 Jun 2021 03:00:00 +0000
ROA not after:            Sat 03 Jun 2023 03:00:00 +0000
asID:                     263833
IP address blocks:        138.255.171.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3160 (0xc58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
        Validity
            Not Before: Jun  3 03:00:00 2021 GMT
            Not After : Jun  3 03:00:00 2023 GMT
        Subject: CN=dd9aa11814d79586a06bc0f4eeff966136d1656f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a6:09:7f:73:e4:51:06:13:8f:51:05:4d:ac:
                    5b:cc:49:af:49:f5:bd:68:70:07:85:1a:93:78:9b:
                    7e:d1:79:e0:17:4d:6f:02:aa:93:f3:69:41:c3:d5:
                    b4:78:b1:24:4e:72:cb:0c:07:42:da:9c:5a:b8:cc:
                    4b:8b:a2:92:d8:89:03:24:18:82:51:e7:db:5a:ae:
                    69:6b:dc:14:ff:c4:01:e4:16:32:6f:f6:1f:69:ff:
                    2f:8a:5b:04:9b:68:b8:e2:91:d0:ed:2e:5f:8d:60:
                    2e:d5:ed:53:21:e0:ec:b5:b9:63:b5:d2:77:20:97:
                    89:ca:45:dc:bf:ed:b1:43:bd:5b:8c:61:4c:d0:40:
                    ba:64:15:b5:98:9e:5a:30:6c:a5:db:bc:5b:ea:0e:
                    cb:83:76:f7:be:cf:df:5e:0a:66:50:f2:27:8b:fc:
                    7e:29:f0:31:85:f3:f2:f2:1d:c5:b8:23:12:44:4b:
                    6a:ba:a4:35:1c:10:d4:55:ff:92:f6:56:79:a4:19:
                    fd:4b:c2:e5:c1:ac:3a:6a:46:da:69:49:9a:67:70:
                    bb:62:75:20:9a:70:19:da:39:17:90:b3:ba:71:09:
                    fd:6b:a7:3e:1b:c5:03:3f:18:f1:52:80:06:e5:d7:
                    6a:4e:84:a6:7f:5c:90:c2:81:a5:38:4a:95:2b:88:
                    be:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C1:B3:F6:4F:66:DD:8B:0D:C1:0B:54:E4:55:0A:31:3E:FD:0B:52
            X509v3 Authority Key Identifier:
                keyid:D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/dd9aa11814d79586a06bc0f4eeff966136d1656f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:b4:89:6d:56:82:11:5a:0d:e1:99:27:93:b7:5c:31:59:74:
         fa:ed:26:78:b0:09:37:e0:12:7f:dd:22:85:bd:f3:f1:78:27:
         72:9b:a3:9c:0c:37:f1:b3:d3:be:3c:13:1c:8d:e1:9d:41:d4:
         d0:65:16:89:59:cf:75:08:55:0c:2d:52:19:7e:b7:15:7a:32:
         b3:08:39:d3:88:91:58:5a:0d:c1:d0:ad:15:08:04:6b:16:1d:
         92:d9:62:df:81:ce:98:93:5c:45:64:31:d1:ab:6b:51:d1:6d:
         59:6e:89:a4:a2:82:8a:d2:4b:3f:84:be:73:33:ab:aa:b9:40:
         01:0c:72:ff:7c:38:6a:e2:25:91:a9:e5:fd:dc:14:a2:d3:ae:
         bd:77:b8:20:6c:13:1e:b9:7c:37:1d:59:42:35:34:86:5c:c9:
         60:fd:fb:e0:cd:e8:92:b0:c6:6d:d2:e8:7a:41:0b:31:7d:e8:
         3c:ee:7b:f1:ff:ae:dd:1b:33:cc:f2:5c:84:4e:2a:52:f0:a7:
         dd:94:19:77:2b:6b:18:6c:46:55:6e:54:da:c8:00:1f:ec:c8:
         b7:a5:6a:a8:da:10:f1:4e:e9:c0:e9:0d:21:8d:03:73:8a:9b:
         06:83:b7:fb:c9:ec:bf:0e:a8:96:05:27:99:db:70:6a:f5:02:
         22:e5:99:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:55 2023 by rpki-client on console-ams.rpki-client.org