Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e09b0492-6996-4814-ac96-4f9cce1bf241/04e77ede3adde1738ce0355cb5d16ef43a48e9dd.roa
File:                     04e77ede3adde1738ce0355cb5d16ef43a48e9dd.roa (raw, json)
Hash identifier:          rT1VnQqwYE52e/ctvRdQW71rNFp0cc2vAvzGtvJT0w8=
Subject key identifier:   8D:0E:A5:B3:CC:84:00:A8:C3:EA:A6:FB:B1:63:50:07:09:93:40:8C
Certificate issuer:       /CN=cd3c6cc0b111e1c19749d72c35803c56e03114ce
Certificate serial:       0CDAA1
Authority key identifier: 75:2A:B0:64:A7:73:C2:50:BD:5F:28:17:2E:11:57:4A:26:E7:82:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cd3c6cc0b111e1c19749d72c35803c56e03114ce.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e09b0492-6996-4814-ac96-4f9cce1bf241/04e77ede3adde1738ce0355cb5d16ef43a48e9dd.roa
Signing time:             Wed 24 Mar 2021 14:37:28 +0000
ROA not before:           Wed 24 Mar 2021 14:37:28 +0000
ROA not after:            Tue 24 Mar 2026 14:37:28 +0000
asID:                     52408
IP address blocks:        186.2.240.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 842401 (0xcdaa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd3c6cc0b111e1c19749d72c35803c56e03114ce
        Validity
            Not Before: Mar 24 14:37:28 2021 GMT
            Not After : Mar 24 14:37:28 2026 GMT
        Subject: CN=04e77ede3adde1738ce0355cb5d16ef43a48e9dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:05:ea:c7:3c:c2:f0:5c:6e:5e:4d:61:88:d4:
                    63:bc:36:67:be:27:5e:cd:64:a3:75:86:b4:0e:f5:
                    45:f5:c6:d9:07:98:2d:eb:4f:36:f3:da:9b:a0:3e:
                    37:67:94:b9:2c:14:50:e5:46:71:18:5f:9b:7f:26:
                    17:63:c9:02:93:e0:bb:a0:90:c4:0f:5d:68:ae:23:
                    fc:a5:a5:da:0b:f5:f5:94:eb:69:31:31:f4:ab:b2:
                    8c:19:d1:30:d7:71:78:df:60:54:e7:8f:6d:5f:68:
                    31:b2:e1:d9:e5:c2:bd:63:48:f0:d2:66:6b:16:30:
                    9b:54:a6:6f:4a:a0:2e:c8:85:fd:2d:6a:2c:10:f5:
                    d9:64:7e:22:59:41:fb:9b:f0:91:47:99:c0:d5:a0:
                    53:f2:1d:46:2f:65:3f:3c:b2:cc:b0:25:45:95:47:
                    a7:0f:4b:69:11:5b:76:b7:d7:d8:b9:33:90:01:38:
                    f2:76:5c:2e:1d:92:2f:16:1e:77:5d:6f:86:9d:96:
                    8c:15:77:f6:76:3f:d4:bb:3c:31:77:51:f8:04:c6:
                    28:c0:3c:8e:99:52:f1:db:54:3b:3d:a9:d1:eb:30:
                    84:e1:7b:d2:39:df:87:63:f6:26:46:66:16:fc:e6:
                    b5:85:4c:ef:d3:07:c2:0c:91:8c:db:08:83:ef:ac:
                    53:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:0E:A5:B3:CC:84:00:A8:C3:EA:A6:FB:B1:63:50:07:09:93:40:8C
            X509v3 Authority Key Identifier:
                keyid:75:2A:B0:64:A7:73:C2:50:BD:5F:28:17:2E:11:57:4A:26:E7:82:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cd3c6cc0b111e1c19749d72c35803c56e03114ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e09b0492-6996-4814-ac96-4f9cce1bf241/04e77ede3adde1738ce0355cb5d16ef43a48e9dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e09b0492-6996-4814-ac96-4f9cce1bf241/cd3c6cc0b111e1c19749d72c35803c56e03114ce.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.2.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:b1:0f:92:84:a5:7b:c7:ae:90:bd:75:ec:27:a6:83:46:1f:
         9b:f9:e4:66:bc:61:b7:8f:3c:74:1f:8e:df:fd:5d:7f:7d:1b:
         59:0c:d9:96:c5:c7:32:b3:fa:de:07:2d:0a:e0:24:7a:00:22:
         c8:2d:7c:a0:14:36:a1:66:19:3d:f4:55:86:7f:da:c1:11:3e:
         ee:7d:32:99:49:70:71:38:66:7e:1f:b7:3e:40:46:c7:97:aa:
         0d:e3:39:b4:84:be:99:7a:1b:d9:55:ef:e0:4f:71:2c:82:a2:
         bc:1f:f4:50:56:12:97:1a:43:f9:e9:dc:28:db:17:51:99:d3:
         b1:41:c1:0a:5f:54:e9:97:ac:52:d7:1d:9e:47:dc:b0:5a:3b:
         59:36:7f:f3:61:59:0f:21:09:57:c6:f9:4b:c9:fb:2b:e3:b3:
         c4:ea:c7:e8:f3:18:e4:8a:6d:7d:8b:73:56:d3:88:d4:51:55:
         5b:73:4c:16:b8:f6:33:a3:13:54:9d:d8:ec:d6:50:eb:e8:ae:
         79:33:51:01:6e:af:c4:83:77:9f:95:63:7d:09:13:47:10:b9:
         04:b5:5d:b2:57:3d:3e:27:f0:5d:9a:17:cc:82:8b:9b:a7:ad:
         b3:83:b4:c0:ff:2a:58:a4:2b:85:52:2e:01:0c:59:f2:16:54:
         79:e8:40:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 5 02:13:12 2023 by rpki-client on console-fra.rpki-client.org