Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/d410bf4f84e40dbb6a36c8ed40b91b34900d34a8.roa
File:                     d410bf4f84e40dbb6a36c8ed40b91b34900d34a8.roa (raw, json)
Hash identifier:          J7UoJKRPnZJiHTkb2x0ihFmbjvN2O3sKVnwNCItECCg=
Subject key identifier:   77:03:5E:EF:77:60:28:5E:0F:D8:8D:61:EB:51:23:95:90:91:40:63
Certificate issuer:       /CN=c69b99fc2d2eefbdb75ba663d575a10ac84f78c1
Certificate serial:       1A950C
Authority key identifier: 26:32:3A:4B:C0:9F:4A:66:92:5C:34:E7:A0:CD:05:9E:A1:ED:05:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/d410bf4f84e40dbb6a36c8ed40b91b34900d34a8.roa
Signing time:             Mon 03 Oct 2022 19:17:36 +0000
ROA not before:           Mon 03 Oct 2022 19:16:18 +0000
ROA not after:            Thu 03 Oct 2024 20:16:18 +0000
asID:                     6306
IP address blocks:        179.20.128.0/17 maxlen: 17
                          179.21.128.0/17 maxlen: 17

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1742092 (0x1a950c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c69b99fc2d2eefbdb75ba663d575a10ac84f78c1
        Validity
            Not Before: Oct  3 19:16:18 2022 GMT
            Not After : Oct  3 20:16:18 2024 GMT
        Subject: CN=d410bf4f84e40dbb6a36c8ed40b91b34900d34a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ed:dc:88:f6:72:21:57:ab:13:81:e4:af:5a:
                    da:c7:a8:70:5e:22:dd:e7:f8:26:b1:5a:49:76:0a:
                    9a:9d:ad:08:2a:20:a7:00:d3:87:2f:ab:c6:2f:1a:
                    dc:f1:09:3f:0c:53:07:3c:4d:5c:09:6c:35:68:a0:
                    eb:9f:3a:09:05:1a:3b:fc:ca:70:7e:f7:4b:d0:f9:
                    d4:aa:2a:55:4b:b1:02:cd:ce:9d:12:7e:05:d1:2d:
                    cf:6c:4e:80:9c:12:48:9d:02:4b:4b:f9:76:91:a8:
                    68:bd:80:a7:5d:ba:05:57:62:c7:59:cf:93:b6:e7:
                    78:3c:a0:7b:74:b4:a0:41:3c:d0:92:57:41:7f:ae:
                    e1:0c:0e:7f:99:4a:43:d8:67:68:1f:7d:49:32:81:
                    64:f6:b9:d0:76:e3:7f:47:5f:77:61:e1:c4:be:d9:
                    7f:e1:28:52:47:f8:78:d7:74:ff:2b:d3:96:0e:f6:
                    33:cf:25:ff:72:83:4b:5a:09:3d:18:1a:64:b8:c3:
                    32:a8:f2:c0:45:03:4b:13:44:a2:d2:b6:a8:d8:4a:
                    70:41:16:fb:3c:a9:8f:f1:db:64:af:58:8b:1b:79:
                    05:72:7a:b2:13:03:1a:30:21:a3:56:03:53:e6:56:
                    37:fc:88:81:93:c0:21:9a:1f:66:1f:05:0e:8b:52:
                    ce:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:03:5E:EF:77:60:28:5E:0F:D8:8D:61:EB:51:23:95:90:91:40:63
            X509v3 Authority Key Identifier:
                keyid:26:32:3A:4B:C0:9F:4A:66:92:5C:34:E7:A0:CD:05:9E:A1:ED:05:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/d410bf4f84e40dbb6a36c8ed40b91b34900d34a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.20.128.0/17
                  179.21.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         19:18:e5:34:fe:a4:a2:89:9c:45:eb:92:e3:b9:f4:99:f0:81:
         29:79:14:1f:2b:06:e5:67:ad:74:58:5d:ee:10:95:24:5b:46:
         4f:53:ac:58:05:31:c9:d4:cc:af:16:c1:0c:be:81:1b:59:71:
         5e:57:b2:b5:68:a6:23:b7:be:9e:6d:34:9d:23:85:2f:20:1c:
         ad:bf:b6:91:a0:38:fc:20:f7:04:86:f1:c3:8b:f4:35:1e:6a:
         ce:34:c2:f7:09:c1:95:68:a6:0b:8f:d6:99:80:cd:a3:82:ab:
         f3:e9:2d:bd:9c:ff:16:13:ea:65:bd:46:4b:34:6e:09:a3:f7:
         cd:32:01:8a:fa:39:0a:96:cd:6c:1d:87:ef:99:de:db:6d:9e:
         1d:a1:cc:ee:b9:ed:5c:45:0d:88:b2:1d:89:4f:20:d4:51:0c:
         7f:46:a0:76:2f:cf:5d:1e:ac:58:b7:70:79:fd:48:69:e3:da:
         c7:d8:3a:4a:7a:44:b4:bf:ba:47:03:0a:94:17:38:fb:91:59:
         d2:66:3e:3f:1f:82:4d:d1:7b:44:de:6f:00:d8:d7:67:8b:e3:
         1e:a2:56:a0:e0:36:4b:36:b1:87:fb:81:00:c1:b3:eb:0e:1b:
         75:c2:6c:77:54:a7:4c:15:a4:85:8f:d1:37:29:a2:f2:53:3e:
         96:21:94:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 15 20:54:58 2023 by rpki-client on console-fra.rpki-client.org