Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dfd4c813-f4df-43b0-8b8c-099a23165c19/fefb4c5b3e10a37185f131f6ff574b590ea5c3cf.roa
File:                     fefb4c5b3e10a37185f131f6ff574b590ea5c3cf.roa (raw, json)
Hash identifier:          hqK1qPwq8ZlxeodRPuFScQyCa4KJGsih3ARQBG3px28=
Subject key identifier:   F1:AE:12:D7:47:74:F8:3B:35:87:4A:82:E8:F9:98:3B:74:C8:8F:A4
Certificate issuer:       /CN=2f73b11b6421d4c69f5c483a691c61750df15993
Certificate serial:       19DDFB
Authority key identifier: FB:00:E1:23:EA:69:29:26:10:5B:CF:F8:69:91:67:78:B2:69:98:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2f73b11b6421d4c69f5c483a691c61750df15993.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dfd4c813-f4df-43b0-8b8c-099a23165c19/fefb4c5b3e10a37185f131f6ff574b590ea5c3cf.roa
Signing time:             Mon 08 Aug 2022 21:11:53 +0000
ROA not before:           Mon 08 Aug 2022 21:09:16 +0000
ROA not after:            Thu 08 Aug 2024 21:09:16 +0000
asID:                     16509
IP address blocks:        2801:178:e10::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 21 Feb 2024 01:24:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1695227 (0x19ddfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f73b11b6421d4c69f5c483a691c61750df15993
        Validity
            Not Before: Aug  8 21:09:16 2022 GMT
            Not After : Aug  8 21:09:16 2024 GMT
        Subject: CN=fefb4c5b3e10a37185f131f6ff574b590ea5c3cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d3:fa:bc:81:4f:6f:18:0a:85:68:d3:57:62:
                    cd:80:f3:f4:c2:1f:c2:fc:56:c9:6d:b2:c8:b1:aa:
                    de:6e:79:00:07:18:62:b1:ea:be:42:ec:78:c7:8e:
                    dc:bc:3f:19:b8:6a:fa:97:83:3a:b1:f0:5a:b7:0e:
                    4b:ab:16:c6:b3:02:36:7c:6d:44:3c:f4:b2:3d:bf:
                    bc:e0:e0:3c:bf:fa:66:98:80:fd:e9:39:d2:63:79:
                    5a:a5:8b:c2:7a:53:87:95:82:11:ab:29:f1:f8:1c:
                    88:4c:38:b5:7f:99:c9:36:c0:4a:9b:7b:b1:d1:33:
                    6e:8d:b3:19:05:62:9d:de:d1:c3:5a:33:c1:12:b5:
                    78:ba:6b:3e:a0:73:c1:11:e2:82:37:81:df:35:72:
                    c3:ed:fd:8f:16:34:8c:e3:9c:10:0d:85:6c:37:b6:
                    32:af:ae:20:ae:b5:00:d0:cc:b3:4f:71:c7:02:a9:
                    d8:3c:fc:28:77:78:3f:81:83:96:fe:da:69:04:53:
                    be:b4:28:c6:87:f7:cf:8d:2a:cd:d9:c9:05:b5:63:
                    68:27:ab:1e:25:1d:30:2d:5d:83:5a:e1:24:9e:c1:
                    0f:a0:d1:79:93:52:8e:90:d2:71:0e:16:c5:a3:86:
                    fc:d4:2a:ed:8c:4b:c0:ca:2a:70:21:ac:55:9d:e1:
                    2a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:AE:12:D7:47:74:F8:3B:35:87:4A:82:E8:F9:98:3B:74:C8:8F:A4
            X509v3 Authority Key Identifier:
                keyid:FB:00:E1:23:EA:69:29:26:10:5B:CF:F8:69:91:67:78:B2:69:98:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2f73b11b6421d4c69f5c483a691c61750df15993.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dfd4c813-f4df-43b0-8b8c-099a23165c19/fefb4c5b3e10a37185f131f6ff574b590ea5c3cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dfd4c813-f4df-43b0-8b8c-099a23165c19/2f73b11b6421d4c69f5c483a691c61750df15993.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:178:e10::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:f3:58:6f:c6:81:ac:21:fe:3e:22:11:6e:64:23:fd:4d:18:
         e7:c2:86:bb:57:bb:af:9b:68:1b:98:b4:f8:33:2f:e8:ae:8d:
         5b:64:77:6b:37:7a:69:32:b5:53:4c:7d:e5:8d:1b:16:61:df:
         70:df:3a:c4:b0:bf:a0:e4:bb:00:89:73:a4:16:1f:3f:34:93:
         64:10:89:34:97:1b:55:b4:21:e1:7b:ac:f4:ee:99:99:9d:37:
         fb:48:2b:5d:28:4d:1c:55:09:5e:53:68:36:40:63:7e:0a:db:
         7e:68:ed:2a:ef:40:fc:b2:58:23:26:57:79:78:d7:14:5e:88:
         1f:43:70:09:31:c3:36:18:98:79:8c:7b:82:14:16:ac:b3:8b:
         5b:88:17:36:36:46:03:08:81:ba:87:4c:1b:ab:cb:15:1c:49:
         10:6a:9b:03:d7:af:92:3f:1f:5f:a3:4b:d7:67:40:9b:f5:8f:
         2c:56:8a:2a:9c:67:04:16:cb:af:71:7d:d6:b2:36:52:94:b9:
         fd:68:ac:f9:93:d4:be:35:c2:e3:95:db:7c:20:b6:f5:2e:28:
         59:cf:e2:85:55:56:e5:32:b3:3d:94:1a:c3:21:51:6a:5c:f8:
         5d:ac:8e:0f:d8:e8:85:8f:87:33:ab:da:de:1c:3f:fa:91:62:
         ff:90:81:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 21 03:03:57 2024 by rpki-client on console-fra.rpki-client.org