Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/a5ce9d8795dd538294aa657d4577a72916562337.roa
File:                     a5ce9d8795dd538294aa657d4577a72916562337.roa (raw, json)
Hash identifier:          rwDMkj1Y9BRKymXZhGv/2OP7pXBIOQflqHfVDpwE/ys=
Subject key identifier:   46:65:F2:99:5F:19:37:D3:DD:CE:81:4F:5E:FB:49:E7:74:3B:92:1D
Certificate issuer:       /CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2
Certificate serial:       18A023
Authority key identifier: 5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/a5ce9d8795dd538294aa657d4577a72916562337.roa
Signing time:             Thu 23 Jun 2022 03:08:08 +0000
ROA not before:           Thu 23 Jun 2022 03:00:00 +0000
ROA not after:            Sun 23 Jun 2024 03:00:00 +0000
asID:                     6535
IP address blocks:        200.14.222.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1613859 (0x18a023)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2
        Validity
            Not Before: Jun 23 03:00:00 2022 GMT
            Not After : Jun 23 03:00:00 2024 GMT
        Subject: CN=a5ce9d8795dd538294aa657d4577a72916562337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5f:37:5e:ff:13:76:aa:a3:39:82:7c:e6:1d:
                    0a:e8:b4:53:46:13:4c:12:ca:2f:36:44:80:9a:44:
                    d3:57:e4:99:e6:0a:73:a1:58:e2:41:0c:28:c4:a5:
                    26:66:65:62:8f:6b:b1:79:a3:3f:58:0c:4a:94:9b:
                    e0:bf:9d:be:42:db:70:36:f1:ef:78:1c:dc:8d:df:
                    5d:e3:33:cd:90:f2:0e:c4:2b:1b:4f:0f:3e:ae:85:
                    ea:62:8e:96:d0:03:c1:8c:8a:9f:8b:ee:08:63:7f:
                    fb:83:ef:84:32:af:12:ec:44:a6:49:cc:4b:6d:4d:
                    53:5a:98:2b:4e:89:a5:18:8c:24:14:37:a1:86:12:
                    ce:45:8f:1e:8a:2b:c9:20:cf:c0:d0:27:17:cd:18:
                    7a:4e:8e:bb:46:57:9d:bf:10:7b:67:22:9d:2a:d5:
                    18:7b:74:3a:53:c0:7d:a4:12:90:fd:b3:dc:c4:bb:
                    c8:13:7f:19:c7:5a:d0:b4:4e:19:2e:35:9e:39:c5:
                    6f:40:85:a6:87:1c:72:b6:18:e9:c3:cc:b8:b8:ea:
                    59:6e:79:1f:c4:1f:63:2d:fa:3c:0f:a2:32:bb:d5:
                    ab:db:7b:21:3b:60:c7:9d:a6:25:01:1f:4b:1f:49:
                    8f:1e:67:93:a7:60:dc:f7:b8:44:16:6c:6e:d1:61:
                    d5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:65:F2:99:5F:19:37:D3:DD:CE:81:4F:5E:FB:49:E7:74:3B:92:1D
            X509v3 Authority Key Identifier:
                keyid:5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/a5ce9d8795dd538294aa657d4577a72916562337.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/7aa34ce93acbfe70c4de64538dca0894b670f0d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:e0:83:b3:74:17:54:e5:de:a6:13:81:fa:bf:d6:94:b1:51:
         b3:24:4f:da:51:d7:ce:48:6c:51:28:c7:ec:e5:5d:35:a6:14:
         61:38:4b:5f:df:d2:e2:70:db:83:ed:83:99:6b:2b:a5:93:d9:
         7d:36:79:45:99:71:66:08:c2:0d:4e:87:a8:8a:55:99:af:47:
         cc:50:a1:75:6d:8f:be:ce:be:54:6b:ff:94:00:2f:d9:d1:d8:
         f4:28:53:88:90:6d:a4:d5:4c:db:8a:44:fa:3c:95:ca:46:99:
         73:e8:10:1a:c3:65:db:f8:59:db:bd:d4:5d:44:41:e3:4e:a5:
         f6:77:a4:b8:b4:40:b2:a5:78:26:95:f0:4c:8f:77:0b:9c:09:
         3f:be:19:0e:47:7b:ba:48:60:27:25:f1:75:77:b8:a0:cc:21:
         a9:fa:75:67:72:22:d6:ea:67:ee:0c:61:37:7d:88:56:5e:2a:
         60:15:ee:41:5e:05:79:87:ca:ce:8a:e9:8d:c4:d2:84:b1:43:
         05:6f:76:4f:39:33:b9:4e:12:ed:21:fe:9f:41:c5:4d:55:f2:
         69:58:99:6c:d9:3e:96:eb:8f:df:c8:f2:81:59:0c:6b:53:43:
         b5:36:9a:a2:7f:a2:15:38:e2:b0:24:01:00:41:07:d2:57:e1:
         c4:2a:91:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:56 2023 by rpki-client on console-ams.rpki-client.org