Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/509dce8f8e5a290d27e840b60dbec2d9216600a9.roa
File:                     509dce8f8e5a290d27e840b60dbec2d9216600a9.roa (raw, json)
Hash identifier:          mkByioFXinpefjHzc+hegbgY6TbjM+/GzbcBkHvttIw=
Subject key identifier:   E7:91:E6:5E:A6:EC:BB:5E:E0:FE:C9:14:67:DC:37:E6:E9:03:37:FB
Certificate issuer:       /CN=701ea5e2aba4c6c0929eabf0a14b88f403a726e2
Certificate serial:       151843
Authority key identifier: B6:3F:DC:95:C1:3C:6E:F5:BD:51:84:5A:09:64:BF:E0:0B:14:9E:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/509dce8f8e5a290d27e840b60dbec2d9216600a9.roa
Signing time:             Tue 08 Mar 2022 15:57:35 +0000
ROA not before:           Tue 08 Mar 2022 03:00:00 +0000
ROA not after:            Fri 08 Mar 2024 03:00:00 +0000
asID:                     271936
IP address blocks:        157.100.204.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1382467 (0x151843)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701ea5e2aba4c6c0929eabf0a14b88f403a726e2
        Validity
            Not Before: Mar  8 03:00:00 2022 GMT
            Not After : Mar  8 03:00:00 2024 GMT
        Subject: CN=509dce8f8e5a290d27e840b60dbec2d9216600a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2a:68:d1:7a:b7:e1:fd:e4:04:c8:ab:3f:34:
                    a0:7f:ab:b5:cf:76:55:a8:72:76:b2:74:f6:84:f7:
                    28:f0:0d:95:9c:a8:6a:90:2a:a7:f7:cc:b0:93:e8:
                    6e:66:d5:83:6d:15:19:6f:19:2a:59:f7:74:2e:18:
                    dc:09:2c:dd:19:1c:ab:8a:8a:f0:37:4d:28:d3:0e:
                    20:37:33:44:28:8d:96:6a:5e:bd:27:59:1d:2d:f2:
                    51:38:1e:a5:0f:d0:b2:d0:09:1b:41:3a:ba:2e:22:
                    8f:a4:08:c2:d9:df:e6:28:f1:0f:54:d9:21:96:5e:
                    06:60:7c:b4:6f:1b:49:f4:fa:e8:86:0a:68:ef:4e:
                    ac:15:9e:c0:c5:e9:61:79:40:00:4c:97:76:49:10:
                    4e:ff:c6:36:35:fe:37:78:8c:e1:5f:15:fc:66:a6:
                    03:ed:41:ec:3f:2a:fb:2d:fb:78:14:08:d9:ba:70:
                    e0:fe:f8:38:5b:79:57:37:d9:ed:1b:ad:b3:c4:5e:
                    af:71:75:ea:4a:4f:6a:ef:7d:1d:6b:cb:2a:23:5d:
                    64:4f:9b:a2:3e:ec:89:00:1b:be:e6:f7:f8:07:a3:
                    a5:e9:c8:43:42:31:f0:cc:35:12:e4:09:c3:a9:79:
                    a7:7e:ff:e7:4d:9a:60:75:64:71:7a:33:a9:05:f0:
                    50:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:91:E6:5E:A6:EC:BB:5E:E0:FE:C9:14:67:DC:37:E6:E9:03:37:FB
            X509v3 Authority Key Identifier:
                keyid:B6:3F:DC:95:C1:3C:6E:F5:BD:51:84:5A:09:64:BF:E0:0B:14:9E:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/509dce8f8e5a290d27e840b60dbec2d9216600a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.100.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:1e:de:de:98:8a:e3:4d:5d:89:08:71:fa:17:90:55:dc:b5:
         78:41:0f:75:ff:a9:b9:7f:08:95:22:25:d6:b8:8c:0c:c0:f1:
         1a:20:e3:84:79:67:25:c6:35:7d:c1:b2:e0:49:d0:24:ff:a9:
         4f:03:44:9f:ac:80:5a:8e:2b:19:ba:ca:af:c4:30:ee:48:3e:
         b9:9b:3d:13:fb:1d:21:12:c2:aa:c5:3b:c8:bb:20:19:23:6a:
         20:a8:6b:7f:9f:1b:ac:f8:bc:23:6f:fd:3c:a1:2b:11:c1:e7:
         52:0d:99:f1:91:e5:23:ef:04:8f:73:03:2f:26:0f:09:a7:2d:
         86:33:83:8d:4a:d6:aa:df:c3:75:64:48:83:7f:79:ef:95:1a:
         75:48:2f:89:33:e6:94:c1:20:bc:b6:68:6b:93:88:37:69:d0:
         a7:c1:20:83:f7:df:26:1c:a3:3e:9b:40:1e:a8:98:93:a7:22:
         93:26:a4:1e:48:7a:f8:e2:a9:ef:43:76:0c:9c:1d:b9:16:1c:
         b9:cb:cf:77:bc:80:37:fc:3d:85:34:8a:21:15:5b:95:e8:b0:
         53:30:7f:2e:c3:3d:76:72:52:af:e3:1c:ee:8c:22:45:5f:11:
         de:c5:65:56:5a:88:e7:5e:7a:d6:90:b1:ce:86:2f:d4:7c:96:
         8b:6a:55:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 18:00:36 2023 by rpki-client on console-fra.rpki-client.org