Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/22898de30088ddced77c591177cb7344d7a5c270.roa
File:                     22898de30088ddced77c591177cb7344d7a5c270.roa (raw, json)
Hash identifier:          8RbOMA9H8Bn4sK/R3ktgzeRQF+15ioTtnAVLR3cycQA=
Subject key identifier:   E4:52:28:F1:02:EF:E8:8A:2B:AC:68:30:4E:0F:D0:51:3D:2E:E3:C1
Certificate issuer:       /CN=9469fb387befc96f019d014c6e5234d0955553a9
Certificate serial:       015B6A
Authority key identifier: 0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/22898de30088ddced77c591177cb7344d7a5c270.roa
Signing time:             Sun 14 Nov 2021 15:04:36 +0000
ROA not before:           Sun 14 Nov 2021 03:00:00 +0000
ROA not after:            Tue 14 Nov 2023 03:00:00 +0000
asID:                     27866
IP address blocks:        201.217.36.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88938 (0x15b6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9469fb387befc96f019d014c6e5234d0955553a9
        Validity
            Not Before: Nov 14 03:00:00 2021 GMT
            Not After : Nov 14 03:00:00 2023 GMT
        Subject: CN=22898de30088ddced77c591177cb7344d7a5c270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6d:23:75:62:01:b1:3a:ed:c8:24:aa:2f:46:
                    5e:97:4d:b3:5d:03:ad:35:fe:5c:c9:c0:46:3d:3e:
                    92:28:b8:0e:c4:06:92:06:43:dc:a2:96:18:5d:af:
                    a0:a1:f3:16:66:ee:95:24:ad:b8:e2:69:7e:23:6e:
                    9c:36:95:01:4b:8e:ac:73:ea:43:02:57:d3:11:8f:
                    9b:26:21:3a:87:5e:88:cd:0e:55:29:00:ab:8c:c3:
                    9d:66:f3:9b:41:09:a4:cd:c8:3b:62:04:1e:64:52:
                    99:fe:ed:3b:88:dc:d9:bb:54:58:24:14:da:1f:56:
                    a5:d8:17:b7:a2:c0:a4:02:c3:40:44:30:1d:4e:23:
                    ff:f0:30:40:f5:46:fa:9f:38:ab:f9:e9:65:6f:e8:
                    68:15:1d:cd:e9:90:08:c2:9b:0f:65:5d:81:55:fe:
                    bf:fd:b5:d9:38:c3:c3:c1:8a:ea:ee:81:25:b0:d1:
                    ea:02:4e:61:ea:4e:c5:28:ad:b1:6c:4a:54:62:5a:
                    bb:21:d5:38:45:2f:f9:d1:15:e6:b0:04:9f:ef:11:
                    60:4d:2c:c1:19:c7:ad:31:06:35:2d:1e:4a:f0:bf:
                    8c:06:12:2d:f1:6c:21:84:85:b8:62:c2:93:8b:06:
                    66:13:54:86:26:ce:21:de:f4:b8:3b:2a:7b:e8:6c:
                    63:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:52:28:F1:02:EF:E8:8A:2B:AC:68:30:4E:0F:D0:51:3D:2E:E3:C1
            X509v3 Authority Key Identifier:
                keyid:0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/22898de30088ddced77c591177cb7344d7a5c270.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/9469fb387befc96f019d014c6e5234d0955553a9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:ba:93:6c:e8:07:c3:08:74:d7:cf:0d:38:fb:c1:92:9c:c1:
         92:fb:48:fa:e2:a9:0f:ed:33:01:f6:fc:f3:21:20:73:d4:38:
         a4:07:5b:ed:7c:e9:44:a5:db:4e:9f:ce:6d:52:12:37:c2:e0:
         03:08:58:1c:11:d4:c0:51:8c:5f:ae:3a:62:66:a7:b7:35:57:
         d2:9c:f7:da:fc:58:3d:f1:89:59:49:60:39:22:c1:fe:4f:92:
         f7:93:a2:67:4e:5d:82:17:22:55:4c:c4:ac:eb:53:5b:ab:c2:
         75:26:e3:ff:1f:2a:1c:72:13:15:f9:83:3a:94:d0:90:e7:65:
         4a:d0:3f:ab:a0:69:14:32:ef:e4:24:37:fc:3e:c3:02:8b:f1:
         b7:8e:45:3e:01:8d:52:8f:92:5b:09:f3:08:ca:75:ba:f7:75:
         11:12:68:f5:a6:7f:1c:94:7e:e2:09:4f:1d:b8:1f:c6:1c:11:
         0a:b9:2b:b1:8f:01:78:82:07:95:5f:79:89:78:d4:d8:b8:46:
         93:fc:5e:ca:b8:5a:30:ad:95:c7:da:81:d4:24:82:ba:8f:3a:
         68:34:5d:9d:79:c2:c2:f7:da:49:67:31:05:47:81:37:4f:0d:
         e0:f9:98:2c:03:c0:36:94:76:7a:b6:c5:12:87:e1:aa:16:a1:
         2f:a3:a4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:42 2023 by rpki-client on console-fra.rpki-client.org