Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4f13700-0ba9-4c2c-ade6-64eeed608289/28f3562b5923804412fa85b170b42a23087e9774.roa
File:                     28f3562b5923804412fa85b170b42a23087e9774.roa (raw, json)
Hash identifier:          Abv7dCNYYM1sA6yL9o028o5q/C5nMBICK0fzFbvbLdQ=
Subject key identifier:   48:D7:74:60:E6:AF:D0:D2:23:0A:3E:AB:2A:97:7D:30:2B:12:98:F3
Certificate issuer:       /CN=6a6637de6bf2a233d64c6541e547859959ef0b1b
Certificate serial:       070FB8
Authority key identifier: 8C:CB:A9:78:C7:14:A1:20:DA:75:EC:FF:46:3A:C0:82:3C:61:E5:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a6637de6bf2a233d64c6541e547859959ef0b1b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4f13700-0ba9-4c2c-ade6-64eeed608289/28f3562b5923804412fa85b170b42a23087e9774.roa
Signing time:             Wed 24 Mar 2021 14:31:30 +0000
ROA not before:           Wed 24 Mar 2021 14:31:30 +0000
ROA not after:            Tue 24 Mar 2026 14:31:30 +0000
asID:                     11392
IP address blocks:        186.0.152.0/24 maxlen: 24
                          186.0.153.0/24 maxlen: 24
                          186.0.154.0/24 maxlen: 24
                          186.0.155.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 462776 (0x70fb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a6637de6bf2a233d64c6541e547859959ef0b1b
        Validity
            Not Before: Mar 24 14:31:30 2021 GMT
            Not After : Mar 24 14:31:30 2026 GMT
        Subject: CN=28f3562b5923804412fa85b170b42a23087e9774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ea:f9:40:77:cc:da:4a:6d:8c:34:4d:10:c2:
                    c2:a8:67:07:58:ac:42:ee:66:c3:30:c4:f6:0e:74:
                    bc:cc:67:86:87:e1:15:74:64:0e:3e:90:ba:62:20:
                    11:97:27:7f:16:6e:5b:d9:cf:bc:2a:dd:b7:27:3a:
                    95:d2:44:bb:45:a1:cc:60:95:d2:43:b0:73:49:3e:
                    2f:d0:e7:e3:80:60:84:16:2f:3c:20:18:32:22:11:
                    2f:85:3c:96:cd:3e:dd:68:d5:53:4a:1e:94:30:28:
                    6d:3f:0c:f7:2a:56:6c:b4:d7:3d:c0:70:67:83:e4:
                    92:44:e1:e2:4f:f5:ba:e4:e2:fa:45:03:96:3a:c3:
                    d0:d1:6a:b3:f8:76:22:b1:ce:2e:47:3b:c5:28:7e:
                    60:dd:fe:46:cd:15:d7:e8:1f:5c:41:2e:8c:2b:b2:
                    c3:3e:38:bf:14:4e:da:9a:15:f3:36:ec:49:af:09:
                    d4:85:8d:b5:73:49:7c:45:86:9a:d5:b3:f3:4a:e7:
                    e2:ca:ac:d1:0b:72:92:91:2f:a9:e9:21:2d:22:75:
                    8b:73:6c:eb:82:e7:7c:96:3a:48:44:a5:a0:25:d2:
                    75:d7:e8:42:c4:00:11:d7:e7:58:9d:9c:9d:21:b7:
                    b9:f5:22:5c:2f:db:ca:e9:09:b0:ee:5d:43:59:42:
                    3f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D7:74:60:E6:AF:D0:D2:23:0A:3E:AB:2A:97:7D:30:2B:12:98:F3
            X509v3 Authority Key Identifier:
                keyid:8C:CB:A9:78:C7:14:A1:20:DA:75:EC:FF:46:3A:C0:82:3C:61:E5:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a6637de6bf2a233d64c6541e547859959ef0b1b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4f13700-0ba9-4c2c-ade6-64eeed608289/28f3562b5923804412fa85b170b42a23087e9774.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4f13700-0ba9-4c2c-ade6-64eeed608289/6a6637de6bf2a233d64c6541e547859959ef0b1b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:83:c4:fe:57:ae:87:8b:32:25:2d:5d:e0:58:61:47:73:2e:
         99:bb:37:d0:23:6f:6c:73:ab:d8:a8:70:0f:22:4b:43:64:5e:
         04:fc:c9:dc:10:8c:80:60:9f:f0:e3:7c:17:89:ec:63:c1:2f:
         a1:46:b6:df:6c:74:c9:ae:03:3a:a7:d7:25:f1:21:94:d2:73:
         6c:c9:4a:36:f9:bc:26:0d:3c:76:d4:35:24:9c:1c:b4:81:0a:
         d7:6c:49:9f:fc:db:d8:b6:fd:ff:8a:1d:af:d8:2d:18:f4:96:
         6c:94:16:16:4f:43:6b:2e:74:99:26:a5:59:e1:e2:1f:48:c2:
         ea:bc:45:a5:19:0a:b3:12:4b:a6:a8:80:ac:38:41:43:99:06:
         17:b9:c3:1f:08:dc:13:01:79:7a:79:bf:fd:ba:b0:03:82:95:
         4b:33:3b:02:b3:88:84:63:72:83:d2:f9:54:17:44:e4:54:89:
         ba:d5:f4:ee:a7:97:a0:06:6e:a8:74:17:4d:08:11:1c:05:f8:
         d7:ed:26:ae:e2:05:85:04:d1:b3:09:56:65:68:bf:2b:a2:7b:
         f3:97:3c:29:b0:81:75:4a:dd:07:5c:e9:15:83:fb:05:7d:e6:
         fb:dd:1b:88:29:59:f8:32:04:3a:78:99:a0:31:a7:fc:c0:93:
         57:61:6a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:42 2023 by rpki-client on console-fra.rpki-client.org