Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/eb186a5a4debcb97c41ea3c7ec5efcde32c4ee85.roa
File:                     eb186a5a4debcb97c41ea3c7ec5efcde32c4ee85.roa (raw, json)
Hash identifier:          f87fX+SkwRqEqsf+B6fvWyV8/tJnH7qY+qcO9H/POOU=
Subject key identifier:   9A:4A:E8:AB:18:F2:58:EF:9F:52:F5:5C:D2:37:9A:31:02:D9:94:2B
Certificate issuer:       /CN=9469fb387befc96f019d014c6e5234d0955553a9
Certificate serial:       01E887
Authority key identifier: 0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/eb186a5a4debcb97c41ea3c7ec5efcde32c4ee85.roa
Signing time:             Mon 29 Nov 2021 18:32:18 +0000
ROA not before:           Mon 29 Nov 2021 03:00:00 +0000
ROA not after:            Wed 29 Nov 2023 03:00:00 +0000
asID:                     27768
IP address blocks:        201.217.29.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125063 (0x1e887)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9469fb387befc96f019d014c6e5234d0955553a9
        Validity
            Not Before: Nov 29 03:00:00 2021 GMT
            Not After : Nov 29 03:00:00 2023 GMT
        Subject: CN=eb186a5a4debcb97c41ea3c7ec5efcde32c4ee85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:61:4a:84:4c:a8:69:58:07:f0:29:75:92:5c:
                    d1:e7:1e:8d:97:ac:76:64:e7:6f:06:95:ba:23:d0:
                    cd:ed:14:40:90:13:bb:5b:c3:92:a7:6b:86:7d:bf:
                    dc:39:cd:03:4f:89:50:fa:76:e9:cc:22:e8:0e:94:
                    ed:f2:21:3f:b3:97:97:32:25:b7:3a:67:49:0d:1a:
                    a7:29:1b:20:4f:eb:9b:c5:2c:05:33:52:d5:3b:5c:
                    4b:cf:e2:ee:dd:29:f0:3a:1a:4f:48:06:45:73:36:
                    89:9f:65:a9:db:06:ad:8c:38:b9:dc:97:eb:89:91:
                    ee:9c:a4:9f:46:df:86:03:cf:88:43:2b:ac:7e:ab:
                    91:ea:75:38:e1:51:7d:5b:56:d6:4d:b5:88:92:a9:
                    c0:7f:ae:85:ef:56:0e:c7:0b:e9:26:f6:fb:8d:9b:
                    67:a9:d4:9f:82:bc:80:d0:14:6b:7e:6e:27:af:48:
                    73:fe:5f:f2:34:ff:70:47:51:66:62:bd:03:18:6b:
                    82:1f:61:27:20:23:9d:79:2c:54:c7:6b:0b:d1:14:
                    88:72:93:85:24:43:97:e8:b1:0c:46:6a:60:10:98:
                    5e:1c:11:bf:01:56:0c:a2:e3:5a:3d:92:3c:7d:78:
                    a7:75:63:67:ed:8f:3e:e4:41:c7:4c:00:6e:b3:8f:
                    91:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4A:E8:AB:18:F2:58:EF:9F:52:F5:5C:D2:37:9A:31:02:D9:94:2B
            X509v3 Authority Key Identifier:
                keyid:0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/eb186a5a4debcb97c41ea3c7ec5efcde32c4ee85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/9469fb387befc96f019d014c6e5234d0955553a9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:c5:d1:f6:ca:bf:b3:73:2a:50:f6:49:17:af:76:cd:9a:97:
         33:06:ad:bc:f9:35:9e:9a:14:f9:40:3b:24:db:da:d8:d1:4e:
         17:52:a9:3f:d4:4b:b7:75:9b:b3:ad:13:4b:c9:5d:49:ff:f1:
         d9:e2:c7:24:74:92:6a:4e:1b:ba:36:ae:9b:cc:b6:a5:27:f8:
         44:44:1f:41:97:b9:51:a4:71:6a:70:a4:80:32:48:06:6c:5f:
         c6:39:a5:61:de:c2:f8:97:48:a5:d4:de:06:30:54:86:55:9b:
         5c:d6:f3:c4:db:13:04:29:5a:ea:13:34:2f:d0:fe:d5:4a:de:
         90:26:20:e3:20:d0:e6:f9:83:74:46:45:7b:d2:0c:ab:61:21:
         31:5d:9f:c4:fa:35:ee:1b:8d:f4:d8:26:f7:16:bb:ac:1f:a5:
         8a:84:10:94:fa:68:47:95:6c:9d:bb:09:6a:b0:4b:2c:cf:a2:
         79:de:94:3d:d0:20:0e:b2:68:59:e5:b1:9e:df:04:07:e5:be:
         c9:b4:e3:4e:75:ce:d5:df:1d:05:4b:b2:03:8c:a3:be:8b:b8:
         a2:0f:07:ab:46:93:d9:c8:95:e3:d1:e4:34:7b:34:4c:df:25:
         ee:37:50:d2:5e:44:a0:02:38:79:fe:2d:06:b6:4a:7a:95:8f:
         d0:eb:68:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:56 2023 by rpki-client on console-ams.rpki-client.org