Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e3160561-571e-4e6c-a376-e6932ed2f3ba/b85b075e5657a280a7bbc9c6fa45c414888dcd69.roa
File:                     b85b075e5657a280a7bbc9c6fa45c414888dcd69.roa (raw, json)
Hash identifier:          Sv8p5Hi087D0fg/Aif49sFri9nvGBMalW0TKTDHSJ0w=
Subject key identifier:   C5:F4:91:5A:06:A3:5F:FB:BD:9B:28:45:A9:D9:98:D2:2E:38:53:9B
Certificate issuer:       /CN=74935393919dd2a404caa7ccadf12085d19ef35d
Certificate serial:       0E3BC5
Authority key identifier: 5E:D2:1A:5E:C3:72:12:AF:DA:1B:4A:34:2F:5F:76:B5:2D:DC:07:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74935393919dd2a404caa7ccadf12085d19ef35d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e3160561-571e-4e6c-a376-e6932ed2f3ba/b85b075e5657a280a7bbc9c6fa45c414888dcd69.roa
Signing time:             Wed 24 Mar 2021 14:32:23 +0000
ROA not before:           Wed 24 Mar 2021 14:32:23 +0000
ROA not after:            Tue 24 Mar 2026 14:32:23 +0000
asID:                     264669
IP address blocks:        168.90.252.0/23 maxlen: 23
                          168.90.254.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 932805 (0xe3bc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74935393919dd2a404caa7ccadf12085d19ef35d
        Validity
            Not Before: Mar 24 14:32:23 2021 GMT
            Not After : Mar 24 14:32:23 2026 GMT
        Subject: CN=b85b075e5657a280a7bbc9c6fa45c414888dcd69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d8:78:61:c8:82:19:c1:49:a5:9a:ad:bc:2e:
                    95:8b:cb:46:b3:69:77:88:15:78:7e:df:09:fe:22:
                    f8:0a:31:bc:cb:05:5c:ad:00:c8:9d:e0:56:b7:f2:
                    77:b0:3e:bd:c8:1d:72:62:cb:97:95:f7:3a:6c:07:
                    27:2f:fb:ce:d1:3a:8e:e7:18:c0:9f:72:a2:6e:f4:
                    28:90:cf:48:25:f8:5b:7c:cf:50:60:7a:61:e5:00:
                    ff:36:76:91:41:2f:76:53:c0:95:ca:69:62:39:7c:
                    c4:b5:c6:28:d2:77:14:90:b6:aa:06:23:af:f3:e4:
                    6f:19:e6:91:10:f6:3c:ec:68:0b:dd:5a:c4:79:6e:
                    0b:34:69:99:71:55:62:c2:cc:db:b1:10:d3:a9:1d:
                    07:16:4b:9c:fa:cf:09:fe:c3:22:11:2b:5a:d5:b1:
                    04:3a:7e:f5:a6:67:68:f9:75:4b:a6:de:62:67:89:
                    b5:f4:59:a7:a1:94:ae:a8:bb:18:bd:76:33:05:58:
                    e3:55:9d:7d:28:39:3a:b3:75:2f:ea:95:9b:0c:f7:
                    76:48:db:2b:46:b7:26:d6:e3:fc:3c:ed:4d:40:b6:
                    c5:95:53:c5:ce:59:d2:9f:b5:e6:8b:f4:b6:27:f4:
                    75:c9:bc:a0:de:77:ad:37:3f:9a:b2:9e:69:90:88:
                    a6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F4:91:5A:06:A3:5F:FB:BD:9B:28:45:A9:D9:98:D2:2E:38:53:9B
            X509v3 Authority Key Identifier:
                keyid:5E:D2:1A:5E:C3:72:12:AF:DA:1B:4A:34:2F:5F:76:B5:2D:DC:07:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74935393919dd2a404caa7ccadf12085d19ef35d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e3160561-571e-4e6c-a376-e6932ed2f3ba/b85b075e5657a280a7bbc9c6fa45c414888dcd69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e3160561-571e-4e6c-a376-e6932ed2f3ba/74935393919dd2a404caa7ccadf12085d19ef35d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.252.0-168.90.254.255

    Signature Algorithm: sha256WithRSAEncryption
         76:97:ae:e1:8d:ef:11:bd:b3:98:f1:00:79:12:ed:d7:e7:30:
         43:3b:01:8a:10:78:f8:e6:b5:26:fe:05:1e:0b:81:94:76:35:
         80:6a:18:f0:a1:0b:ee:d6:5e:f3:66:24:dc:c8:77:1d:7a:7a:
         af:e9:43:ce:ba:09:95:6c:69:25:1f:fe:44:f4:dc:ef:2d:11:
         eb:1b:e8:e2:a3:eb:ea:5c:db:4f:03:d9:05:1f:73:89:cc:63:
         6c:9f:df:16:dc:fc:5d:b5:33:0e:f4:16:8e:0d:80:37:29:d0:
         9c:6f:70:71:45:26:ba:42:d6:4c:d8:38:12:9d:fc:f2:70:a1:
         49:38:0b:41:82:06:51:95:b9:bc:69:66:be:b4:2d:97:1e:12:
         83:19:e5:48:cd:b9:67:27:e1:35:b8:eb:ad:87:6e:f9:ac:62:
         fe:67:8e:60:35:ff:28:97:de:d0:aa:c1:fb:a9:71:fe:7e:f7:
         25:87:d8:96:88:8e:a1:a8:13:20:8f:e3:7e:07:f5:b7:32:4d:
         f0:e1:13:0d:bb:a0:12:14:f7:8e:97:db:55:aa:11:c7:ca:0a:
         41:06:67:f6:ad:10:a2:71:bd:09:5d:c3:fd:16:70:dd:9a:cb:
         08:9e:9e:2a:69:32:8e:14:1f:b7:bb:ff:c1:14:22:f1:46:d2:
         1f:2c:bd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:42 2023 by rpki-client on console-fra.rpki-client.org