Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/d7030917bfb4db88b2f63b2a286410894014ed40.roa
File:                     d7030917bfb4db88b2f63b2a286410894014ed40.roa (raw, json)
Hash identifier:          3sgaz7URHfxo5cxbUoZH/Nzm4Lh+3ymsK3RXnXom/j4=
Subject key identifier:   84:57:8F:A2:E9:86:2A:8F:4E:58:3D:8F:BA:FA:89:83:64:DA:E2:26
Certificate issuer:       /CN=eb6de066f1c70b82f75b54d19209c0e03f1f0279
Certificate serial:       0EA08A
Authority key identifier: 76:12:49:46:59:CF:CF:F8:19:4B:DD:87:76:20:C2:55:68:E0:EA:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eb6de066f1c70b82f75b54d19209c0e03f1f0279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/d7030917bfb4db88b2f63b2a286410894014ed40.roa
Signing time:             Thu 13 May 2021 22:22:15 +0000
ROA not before:           Thu 13 May 2021 03:00:00 +0000
ROA not after:            Sat 13 May 2023 03:00:00 +0000
asID:                     27773
IP address blocks:        190.150.70.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 958602 (0xea08a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb6de066f1c70b82f75b54d19209c0e03f1f0279
        Validity
            Not Before: May 13 03:00:00 2021 GMT
            Not After : May 13 03:00:00 2023 GMT
        Subject: CN=d7030917bfb4db88b2f63b2a286410894014ed40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a3:2d:51:7a:e9:72:91:dd:9b:af:60:8f:a7:
                    cf:a2:3f:0a:c5:07:d1:a4:f8:17:32:cc:06:15:77:
                    f1:fd:c1:ab:f9:b8:ad:8b:62:e1:ef:5d:77:64:cd:
                    c6:d2:a0:8e:e3:d9:87:21:f7:12:a3:e8:6a:4f:c5:
                    37:0f:79:ee:af:7e:23:4d:d2:af:15:bd:4e:aa:95:
                    39:8b:05:4b:d3:fb:bb:77:61:77:c6:05:07:a2:5e:
                    31:05:49:4b:db:28:8b:74:b8:2f:67:b9:a7:d1:8d:
                    cc:6a:d9:11:e0:de:bc:d2:60:f5:6c:eb:93:da:e4:
                    1c:78:97:56:8d:7a:b1:2d:8e:9b:cd:f3:a6:45:07:
                    1b:5e:03:88:1b:9c:df:5f:93:f3:bc:3e:54:85:03:
                    c7:a6:52:b4:c2:2d:d6:a5:79:7b:30:d8:56:30:24:
                    15:57:cc:e4:a8:27:c1:1a:ba:68:13:ac:f4:9f:18:
                    43:ac:09:1f:3d:e9:f3:4d:10:ab:0c:14:f4:2b:d0:
                    18:27:a3:00:28:cd:d2:2c:21:05:2b:d1:75:a1:95:
                    22:bc:d8:4e:31:23:c8:7b:91:bf:06:e2:9b:d6:02:
                    79:8c:8d:91:44:c2:42:5e:93:ca:cc:f2:b2:b9:1e:
                    c9:4b:42:69:25:ab:b3:a2:44:19:e0:10:c5:d0:f7:
                    49:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:57:8F:A2:E9:86:2A:8F:4E:58:3D:8F:BA:FA:89:83:64:DA:E2:26
            X509v3 Authority Key Identifier:
                keyid:76:12:49:46:59:CF:CF:F8:19:4B:DD:87:76:20:C2:55:68:E0:EA:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eb6de066f1c70b82f75b54d19209c0e03f1f0279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/d7030917bfb4db88b2f63b2a286410894014ed40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/eb6de066f1c70b82f75b54d19209c0e03f1f0279.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.150.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:db:d6:ac:15:35:fb:99:87:c3:a7:3f:11:0d:fb:5d:2c:03:
         6e:77:91:f0:d9:c0:c3:59:9f:e9:66:37:3a:3d:99:4d:29:22:
         2e:77:89:38:53:b5:91:43:03:bc:36:eb:d1:be:59:df:84:c8:
         d9:fd:23:df:7d:a9:7a:6c:3b:e8:f9:7f:67:99:36:40:57:72:
         bb:bc:d7:57:ed:e5:6a:e5:29:75:8e:8a:ff:19:3c:f9:07:68:
         64:b1:07:67:4d:9d:f4:5f:d1:fd:8d:8f:4e:71:57:97:f2:ba:
         fa:5a:72:00:53:1f:50:05:d5:08:39:dc:64:a9:f3:70:da:5f:
         9a:14:42:27:f2:21:e1:dd:61:e7:78:a9:89:67:2c:db:80:23:
         6b:71:44:17:58:92:9a:bb:5d:ce:a0:16:e1:2a:f8:56:c3:03:
         a5:25:ed:57:ca:f9:60:1f:ae:a0:79:86:e4:ed:70:d1:79:58:
         b6:35:85:fe:d8:83:2e:d2:d2:d5:7e:d0:6b:4f:a2:dd:0a:f6:
         5e:02:59:95:e1:04:75:48:c9:6e:13:54:35:d7:44:d6:f8:5c:
         4b:18:7c:e1:52:3c:7f:d6:d0:e7:79:bf:2c:50:c8:ec:8c:dd:
         f5:9f:c8:03:e7:a4:bd:57:26:d2:a2:87:b8:b8:9c:68:0f:cb:
         39:f1:eb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:56 2023 by rpki-client on console-ams.rpki-client.org