Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/c259641da583082e632f85c0c4916645a61ffa31.roa
File:                     c259641da583082e632f85c0c4916645a61ffa31.roa (raw, json)
Hash identifier:          0ZqYamM5WGc6ZjIRT+Wv3xqbKK0TYO6MEn5iBW7oq1o=
Subject key identifier:   83:07:78:CB:81:FB:F9:A3:B2:53:F0:EB:74:6C:6B:FC:63:3D:B5:F3
Certificate issuer:       /CN=9469fb387befc96f019d014c6e5234d0955553a9
Certificate serial:       0155FD
Authority key identifier: 0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/c259641da583082e632f85c0c4916645a61ffa31.roa
Signing time:             Sun 14 Nov 2021 15:01:50 +0000
ROA not before:           Sun 14 Nov 2021 03:00:00 +0000
ROA not after:            Tue 14 Nov 2023 03:00:00 +0000
asID:                     27866
IP address blocks:        201.217.28.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87549 (0x155fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9469fb387befc96f019d014c6e5234d0955553a9
        Validity
            Not Before: Nov 14 03:00:00 2021 GMT
            Not After : Nov 14 03:00:00 2023 GMT
        Subject: CN=c259641da583082e632f85c0c4916645a61ffa31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:12:01:e5:10:70:3c:b7:0f:17:b3:b3:44:f8:
                    d9:83:52:fe:d3:2c:b6:6f:20:6b:e2:28:52:33:02:
                    96:66:64:0c:ea:99:9a:31:6f:ce:40:12:de:80:05:
                    c4:23:7a:ed:bd:0e:7b:21:f2:06:bb:85:bf:8f:82:
                    e3:98:68:a1:c1:f4:04:58:fc:1f:c1:7d:4f:3e:f3:
                    0d:00:44:9d:95:46:b8:0e:05:cd:44:a7:83:b2:cb:
                    d1:c9:a1:c7:0e:58:41:b6:68:87:4e:47:d0:66:1e:
                    61:d6:4d:0e:cd:b9:70:60:20:7f:32:cf:db:35:58:
                    29:29:4c:48:55:b7:ec:a0:9c:dc:bf:96:a9:de:34:
                    25:06:1b:8a:03:15:bb:b4:67:83:43:c9:73:3a:77:
                    d7:49:3a:45:be:1e:79:c5:42:01:67:6d:04:30:3d:
                    a7:44:df:44:4d:30:3d:8a:a4:b8:db:00:69:63:eb:
                    28:a4:f6:1b:47:65:99:59:68:3e:06:51:d5:c1:b7:
                    8a:f4:90:a8:55:df:8d:76:73:60:a8:43:0b:f7:31:
                    af:bb:d9:f7:cd:fb:14:9b:e1:f9:df:10:c0:8c:5b:
                    fc:a9:be:0d:98:36:8c:68:73:d9:51:ce:81:a6:b6:
                    fb:fb:a1:75:aa:19:53:38:a2:50:d9:ea:d5:a6:e8:
                    5d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:07:78:CB:81:FB:F9:A3:B2:53:F0:EB:74:6C:6B:FC:63:3D:B5:F3
            X509v3 Authority Key Identifier:
                keyid:0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/c259641da583082e632f85c0c4916645a61ffa31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/9469fb387befc96f019d014c6e5234d0955553a9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:47:97:b7:ee:8f:9b:9a:b3:1b:d5:f1:77:59:4b:80:e7:88:
         8d:6a:c5:f7:d1:25:0f:f6:74:9d:ee:9f:a6:de:0a:ce:29:67:
         e9:f4:ad:85:f5:c1:1a:ce:a9:33:57:1d:50:9e:82:5d:78:36:
         a3:08:64:0b:5a:fa:fd:c0:fe:06:35:d1:00:d6:6f:21:4b:07:
         94:b4:03:1a:be:d5:cf:e5:f2:47:29:0a:b2:87:3b:75:21:23:
         f3:fe:d9:de:37:7a:a8:65:d5:0b:42:65:2b:2f:82:46:d2:ec:
         22:79:57:27:fc:80:4f:5e:61:f6:cd:40:b4:22:5c:bc:91:14:
         8f:22:72:ac:96:c3:e3:14:db:e3:5e:f1:77:3b:9d:b1:3c:b1:
         a6:15:9b:34:75:51:c6:04:e5:33:4f:f6:d1:b8:35:04:f4:85:
         2a:56:1d:29:4a:e1:82:74:5b:b1:39:7a:87:ae:80:24:96:0a:
         e2:25:ef:9d:68:76:c4:c7:a8:ac:66:af:36:e1:71:22:ef:84:
         59:94:d2:2f:c1:c4:8f:6a:2e:f3:d1:50:b1:ed:0d:15:e9:8f:
         d8:f7:05:5b:b9:b0:5d:c2:21:28:81:a5:4e:75:f0:08:4d:aa:
         22:a1:15:48:3a:99:8b:ea:c0:c1:56:c0:e7:9c:be:6b:c5:c7:
         bd:bd:c1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:42 2023 by rpki-client on console-fra.rpki-client.org