Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/27d9c68c825ad341cd075aec75a046fc2202a759.roa
File:                     27d9c68c825ad341cd075aec75a046fc2202a759.roa (raw, json)
Hash identifier:          pzxH7fDMIfEhlZSPrkEp3It+2EGM38Fr4nIjd8bruxY=
Subject key identifier:   97:F4:78:98:4F:75:E7:3F:76:1B:CB:D5:BF:D4:71:76:A2:FB:76:69
Certificate issuer:       /CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Certificate serial:       160566
Authority key identifier: FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/27d9c68c825ad341cd075aec75a046fc2202a759.roa
Signing time:             Fri 28 Jan 2022 20:48:49 +0000
ROA not before:           Fri 28 Jan 2022 03:00:00 +0000
ROA not after:            Sun 28 Jan 2024 03:00:00 +0000
asID:                     28075
IP address blocks:        198.12.61.0/24 maxlen: 24
                          198.12.62.0/24 maxlen: 24
                          198.12.63.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1443174 (0x160566)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
        Validity
            Not Before: Jan 28 03:00:00 2022 GMT
            Not After : Jan 28 03:00:00 2024 GMT
        Subject: CN=27d9c68c825ad341cd075aec75a046fc2202a759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2a:d0:fa:fb:b5:3a:2a:36:da:3b:3b:d4:b8:
                    31:2f:38:3b:c9:4e:8d:b0:36:01:9e:44:eb:d0:5f:
                    9c:06:1c:1f:1c:35:3c:c5:9f:13:91:af:22:99:f4:
                    0f:cf:44:8d:d0:33:5d:e1:f8:54:49:80:c2:69:7e:
                    8e:94:9a:9e:81:c1:44:92:c5:2e:4e:db:61:6e:6d:
                    4e:92:63:69:df:81:a9:41:9a:5f:cf:65:94:11:c3:
                    23:7d:5c:f7:4e:58:d8:0d:88:56:60:1f:98:2a:9e:
                    80:25:40:22:ad:39:ad:15:eb:ec:1b:0d:35:43:54:
                    ef:d3:7a:a4:50:6c:af:70:de:ca:ac:1c:68:b8:20:
                    30:e4:f4:db:5a:ec:82:67:a5:52:88:d3:4b:3c:dc:
                    7d:08:e4:89:a2:c7:b1:b6:1b:4c:72:86:ed:a8:3e:
                    c9:f6:7c:3f:92:24:f7:85:b5:40:32:8f:f5:00:b9:
                    4c:f5:81:27:7d:00:8d:28:29:82:81:5e:61:39:99:
                    59:e9:bc:97:01:3f:81:88:8a:2d:1e:b8:9c:cb:8e:
                    cd:c3:2f:25:a0:87:07:72:6a:55:0d:81:0a:61:e1:
                    5f:4a:51:49:e2:16:12:7d:29:e2:9a:7b:3c:25:bf:
                    8a:8d:80:6b:7c:cc:af:94:b5:07:b3:c6:f6:35:84:
                    a8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F4:78:98:4F:75:E7:3F:76:1B:CB:D5:BF:D4:71:76:A2:FB:76:69
            X509v3 Authority Key Identifier:
                keyid:FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/27d9c68c825ad341cd075aec75a046fc2202a759.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/88d3b38fb9bfced57c6ad5eb160c130acf32641c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.12.61.0-198.12.63.255

    Signature Algorithm: sha256WithRSAEncryption
         42:72:54:b6:4c:a5:ed:25:54:82:98:b9:13:26:88:3b:26:d2:
         1e:42:c1:c2:75:dd:e5:e7:8f:46:e8:93:72:4c:4b:32:98:c2:
         37:a8:0c:88:66:2e:76:0f:f0:e1:e2:f2:b8:a4:c9:05:85:19:
         29:f0:4b:84:03:44:c6:a3:8b:ec:06:c0:67:56:ca:ed:5b:da:
         94:d6:f9:57:82:87:7d:48:bf:75:8f:d2:48:53:eb:bb:93:68:
         23:85:67:83:96:08:1c:41:95:b4:f5:a3:7b:b8:85:01:e1:2d:
         c1:1f:94:e0:37:6c:ba:31:8b:da:b6:8a:fb:51:33:db:42:11:
         99:67:78:11:0d:f1:97:cf:47:54:0f:67:b0:59:c6:21:9b:12:
         00:23:9d:51:11:c9:cf:68:d8:52:e0:88:7d:de:71:1c:cf:23:
         be:a3:49:d7:ce:2a:54:7d:5e:51:3a:75:57:a0:62:1b:b7:a6:
         ac:76:11:a7:fe:0b:c0:97:d1:e3:e4:75:62:84:0d:2a:a9:b7:
         8f:3a:ee:3d:ac:6d:c2:94:c7:9e:73:0e:e0:5e:9a:0d:0d:af:
         3c:1b:ef:c5:19:05:2d:f7:85:09:bc:14:c5:ca:84:1a:2f:2e:
         f1:01:9f:c3:de:18:10:c4:89:2a:3b:61:44:9e:80:8f:c9:5b:
         b4:b4:e7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:58 2023 by rpki-client on console-ams.rpki-client.org