Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/8f23f34820b0d2aa2f487a48f4821a077d2b6124.roa
File:                     8f23f34820b0d2aa2f487a48f4821a077d2b6124.roa (raw, json)
Hash identifier:          hnRPx8A+vLqM9KsPGkC2tw3gBYwRPaQUxT8s4+m3eUU=
Subject key identifier:   E2:A2:52:42:F8:75:F6:43:95:44:DB:A5:C5:B5:2B:52:8D:35:FB:5F
Certificate issuer:       /CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
Certificate serial:       0DF9C7
Authority key identifier: B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/8f23f34820b0d2aa2f487a48f4821a077d2b6124.roa
Signing time:             Wed 24 Mar 2021 14:41:09 +0000
ROA not before:           Wed 24 Mar 2021 14:41:08 +0000
ROA not after:            Tue 24 Mar 2026 14:41:08 +0000
asID:                     264668
IP address blocks:        186.101.10.0/24 maxlen: 24
                          186.3.6.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 915911 (0xdf9c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
        Validity
            Not Before: Mar 24 14:41:08 2021 GMT
            Not After : Mar 24 14:41:08 2026 GMT
        Subject: CN=8f23f34820b0d2aa2f487a48f4821a077d2b6124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a2:e9:1f:2a:2f:a8:ac:2f:0d:ca:f7:eb:2a:
                    1b:9d:cc:17:23:ff:0c:23:8c:2d:14:b6:aa:9a:77:
                    20:77:3b:85:d2:41:24:d4:30:52:60:03:ea:38:80:
                    74:23:aa:f9:9c:76:a7:ed:68:39:95:c0:dc:f7:c7:
                    81:4d:89:49:ce:28:9a:6c:db:5c:bb:c3:89:05:b1:
                    b5:a6:89:57:ee:25:a3:b2:f2:ac:e0:c6:cf:78:fc:
                    b6:8e:b7:7f:c6:98:6d:9b:7a:81:31:e7:5d:76:76:
                    4e:3f:4a:6b:c7:ad:6e:34:98:84:c9:73:9d:9b:00:
                    24:03:47:9b:a2:49:40:9f:95:d1:05:38:a3:75:ad:
                    8c:db:4b:20:61:33:08:0f:05:c3:e8:a0:b4:5a:fa:
                    e0:3b:55:ba:4b:f4:b4:be:f9:78:e8:da:50:99:e5:
                    ed:95:f0:9d:7b:94:94:b0:89:da:2f:73:2a:7f:e5:
                    d1:4b:dd:81:fa:34:25:3c:80:07:ee:b5:15:78:38:
                    a7:04:3d:58:c7:b8:ac:6b:1b:08:f1:84:c6:96:f2:
                    9b:76:c4:51:0d:95:25:fe:78:fb:ef:73:d5:ae:e6:
                    8a:dc:86:db:1d:b7:7f:20:a8:96:4a:a5:a0:19:e7:
                    a3:f0:7c:42:e8:ee:2e:2e:99:50:84:0d:16:06:e8:
                    8f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A2:52:42:F8:75:F6:43:95:44:DB:A5:C5:B5:2B:52:8D:35:FB:5F
            X509v3 Authority Key Identifier:
                keyid:B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/8f23f34820b0d2aa2f487a48f4821a077d2b6124.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.3.6.0/24
                  186.101.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:88:32:cf:b2:eb:cd:44:54:ac:33:74:22:58:a9:ba:77:de:
         4e:f1:8e:4e:81:a5:93:61:51:eb:fc:a4:d9:d9:55:d7:c5:2f:
         e4:28:6b:dc:2a:cc:c2:56:73:96:cb:32:8d:de:81:41:be:4f:
         fa:5f:f9:85:59:41:45:17:c1:6e:81:e3:12:b7:1d:54:06:f3:
         33:18:b8:0c:b9:1c:2c:9b:76:ca:c9:60:67:e1:da:8a:27:7a:
         f9:36:3a:93:90:47:e9:89:86:56:f1:13:0b:6a:6d:31:57:af:
         73:19:1b:52:a2:e2:19:49:ae:9b:f5:83:de:18:96:8d:76:b8:
         c6:66:b9:41:4e:b6:1a:97:91:7e:21:37:29:bf:15:e2:b6:76:
         a5:6d:6b:fa:c6:1a:66:fd:d7:cf:29:39:18:18:7c:bb:4c:f3:
         c3:f0:d2:7d:e7:3b:0e:b8:d4:86:94:32:6f:69:bf:11:ae:e5:
         53:10:7a:91:53:80:bb:6d:f0:8c:73:60:03:6f:ff:ae:d9:f3:
         dc:ef:61:22:1a:8f:c3:27:7a:72:c9:1a:5b:e8:5b:54:43:ae:
         07:8b:4e:2a:69:e5:87:3b:2c:fb:98:7c:1c:52:11:89:5d:97:
         19:b9:53:ef:f5:29:ab:1e:68:3a:e1:42:a3:fa:ae:4a:de:dc:
         c1:86:65:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 17:34:07 2023 by rpki-client on console-fra.rpki-client.org