Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/80269fab2d338e8f8b522d68c59b6605231efe77.roa
File:                     80269fab2d338e8f8b522d68c59b6605231efe77.roa (raw, json)
Hash identifier:          27AuC+k3GRD6oRX3vMWnfntAop8XfbCQHdfS6MV5mlo=
Subject key identifier:   44:C5:46:4B:30:99:96:49:C9:76:C0:62:8E:98:78:52:4D:D5:FE:E5
Certificate issuer:       /CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
Certificate serial:       0E0EBE
Authority key identifier: B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/80269fab2d338e8f8b522d68c59b6605231efe77.roa
Signing time:             Wed 24 Mar 2021 14:41:09 +0000
ROA not before:           Wed 24 Mar 2021 14:41:08 +0000
ROA not after:            Tue 24 Mar 2026 14:41:08 +0000
asID:                     64110
IP address blocks:        186.101.10.0/24 maxlen: 24
                          186.101.11.0/24 maxlen: 24
                          186.101.12.0/24 maxlen: 24
                          186.5.20.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 921278 (0xe0ebe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
        Validity
            Not Before: Mar 24 14:41:08 2021 GMT
            Not After : Mar 24 14:41:08 2026 GMT
        Subject: CN=80269fab2d338e8f8b522d68c59b6605231efe77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c4:19:2c:6b:53:55:39:23:22:7a:ab:23:ba:
                    d7:76:a8:f0:9e:b4:60:da:0d:b1:b2:fe:da:4c:36:
                    a4:e9:bb:bc:bc:36:2c:af:b9:66:82:b8:8b:f9:55:
                    04:bf:7b:de:38:b9:69:ed:03:6b:05:ee:5d:df:dc:
                    6c:f5:fa:62:e4:c6:5d:98:18:f0:61:6d:fd:35:46:
                    83:d0:2c:9e:df:07:91:7d:8a:bf:ee:d6:cf:ac:3b:
                    c2:66:08:68:a3:11:ad:f9:54:c5:b4:b9:8c:7d:8f:
                    4a:d9:0b:a8:2e:e5:6d:3f:76:0d:41:ad:da:5f:94:
                    38:7c:75:36:cc:01:6b:88:2f:ab:c2:03:46:9e:d8:
                    e8:86:37:b8:0d:83:bb:4f:9e:c2:01:0f:c7:1c:2a:
                    86:3b:cc:21:91:26:5c:20:a9:60:1a:04:0d:f5:eb:
                    59:44:b6:4f:e4:03:e4:10:0f:57:80:fe:9a:35:8f:
                    38:b8:85:bc:2b:95:e1:a2:a7:9b:43:89:77:45:dc:
                    0d:67:66:2b:38:93:a5:25:15:c9:30:d1:ed:de:5b:
                    84:43:a4:25:42:54:e2:09:08:a3:24:67:90:a8:cd:
                    eb:69:95:d3:59:67:26:4d:15:05:43:a6:c4:2b:d1:
                    6b:b6:9b:60:4f:98:71:91:88:45:db:d0:9a:fd:f8:
                    87:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C5:46:4B:30:99:96:49:C9:76:C0:62:8E:98:78:52:4D:D5:FE:E5
            X509v3 Authority Key Identifier:
                keyid:B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/80269fab2d338e8f8b522d68c59b6605231efe77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.5.20.0/24
                  186.101.10.0-186.101.12.255

    Signature Algorithm: sha256WithRSAEncryption
         9e:d1:d7:b0:c6:12:59:e5:c9:5f:6f:77:33:3e:5a:05:8a:e9:
         17:4d:3d:48:2e:33:e6:19:97:1b:25:02:85:66:60:52:6f:04:
         45:40:b4:bb:bf:be:9e:c5:ee:a4:6e:b2:99:08:64:68:82:94:
         1a:5c:57:46:44:2d:66:75:0f:f9:58:0a:c8:55:1f:54:8d:08:
         62:d1:9c:f5:15:b6:a4:42:68:12:bd:85:d1:52:3c:21:0c:be:
         4c:0c:c0:37:ae:a7:78:14:02:57:d0:2b:62:78:44:75:62:d4:
         a8:12:6f:cb:61:d8:18:30:d5:33:74:b1:9e:95:db:88:5a:1c:
         5b:53:0b:f6:0b:ed:bc:a0:1f:5f:27:2e:07:cd:bd:9a:d8:69:
         e6:93:f3:0d:47:0f:ee:a9:73:ae:f4:b8:c8:29:5a:f0:35:3c:
         e3:39:bb:f9:6c:74:95:fc:a0:2c:50:79:83:b9:29:c0:85:ba:
         39:72:75:13:89:96:9d:21:7a:88:cf:19:bd:71:69:8b:c1:c2:
         03:74:84:cd:bd:e5:e8:05:5b:c1:39:63:eb:1d:e8:b2:fe:12:
         a4:7f:52:3f:4a:2c:fa:74:99:8d:2b:5f:e1:75:62:0c:c7:0c:
         1d:87:1d:2a:49:81:0f:05:26:9a:a0:ef:0b:84:dc:d3:6a:40:
         91:07:e5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 17:43:41 2023 by rpki-client on console-ams.rpki-client.org