Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/9e874dddb301290bd23a52eaf25f315aa15e5b94.roa
File:                     9e874dddb301290bd23a52eaf25f315aa15e5b94.roa (raw, json)
Hash identifier:          14McWyT/LnI41sHGlFqSI3u/sOBpybo/gUfTlxNZ+0M=
Subject key identifier:   A7:0F:53:8C:7B:47:DD:53:59:FB:1A:F7:AA:36:A7:F2:48:E6:61:9A
Certificate issuer:       /CN=0932ed7fc7587a11240901c76c1f6f64f3020149
Certificate serial:       0BA772
Authority key identifier: 63:E5:E7:0F:A2:3C:0C:80:83:7E:A1:FE:96:50:76:95:C0:CE:5E:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0932ed7fc7587a11240901c76c1f6f64f3020149.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/9e874dddb301290bd23a52eaf25f315aa15e5b94.roa
Signing time:             Wed 24 Mar 2021 14:42:53 +0000
ROA not before:           Wed 24 Mar 2021 14:42:52 +0000
ROA not after:            Tue 24 Mar 2026 14:42:52 +0000
asID:                     28494
IP address blocks:        207.248.254.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 763762 (0xba772)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0932ed7fc7587a11240901c76c1f6f64f3020149
        Validity
            Not Before: Mar 24 14:42:52 2021 GMT
            Not After : Mar 24 14:42:52 2026 GMT
        Subject: CN=9e874dddb301290bd23a52eaf25f315aa15e5b94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ce:8f:a4:fd:28:4f:ef:88:49:c3:85:d4:31:
                    50:d6:f8:ec:66:70:db:61:28:51:3b:2e:fd:c2:22:
                    6d:36:56:7b:c3:6a:38:10:ad:86:1b:61:f4:cd:82:
                    0c:0e:4a:34:e3:15:73:a0:b1:2e:0f:76:31:4c:7c:
                    68:72:fc:e6:45:c2:79:cf:f5:a8:d8:65:c9:de:72:
                    32:7f:bc:58:7e:30:ff:39:65:f1:2c:4c:8b:4c:88:
                    a2:2c:4e:b3:63:03:96:ae:57:99:b0:f4:9b:dc:54:
                    a2:32:bd:2b:c3:8b:aa:4b:66:63:93:f4:ce:84:74:
                    94:0d:a0:0c:df:d0:95:aa:cc:c9:de:99:f8:c0:81:
                    e3:87:46:6a:7e:61:ba:a0:ea:2c:0a:a2:02:9e:06:
                    6a:c5:ea:f6:27:44:b0:59:3c:60:36:79:fd:1a:69:
                    a8:59:be:7d:c6:d0:2b:b2:76:35:7d:66:0c:2e:c5:
                    d0:4e:fc:5e:e6:ed:d2:82:3e:22:56:de:2f:6a:7f:
                    64:d6:c3:7b:56:ca:59:ae:1d:7e:35:2c:f2:23:77:
                    cb:df:f8:55:89:b5:f5:7d:4b:f9:94:14:12:17:0b:
                    e6:43:b6:8f:3e:95:b4:41:11:84:a0:c5:4e:21:d5:
                    80:7b:9d:7c:82:e2:cc:8c:89:39:cb:62:9e:f0:74:
                    d7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:0F:53:8C:7B:47:DD:53:59:FB:1A:F7:AA:36:A7:F2:48:E6:61:9A
            X509v3 Authority Key Identifier:
                keyid:63:E5:E7:0F:A2:3C:0C:80:83:7E:A1:FE:96:50:76:95:C0:CE:5E:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0932ed7fc7587a11240901c76c1f6f64f3020149.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/9e874dddb301290bd23a52eaf25f315aa15e5b94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/0932ed7fc7587a11240901c76c1f6f64f3020149.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:59:2d:98:cd:9c:3a:63:f9:bb:45:aa:5d:34:4e:aa:4b:78:
         f8:6e:21:a3:98:a1:fd:fa:e2:50:b9:68:42:1a:7b:49:91:2d:
         98:00:f3:6d:eb:3c:30:af:12:b7:7d:8e:ac:d9:d2:49:54:06:
         76:be:de:9a:c2:a7:c1:dc:d8:76:79:a6:75:09:21:a0:25:13:
         a6:94:93:24:50:06:e4:cb:32:57:a3:14:8f:53:38:6d:02:15:
         79:68:83:12:9a:f1:f5:d0:72:9c:06:74:5b:7b:3d:93:3d:58:
         9b:40:3c:e6:4b:4a:f3:d9:1a:49:a1:6e:83:2b:6e:1c:85:86:
         30:c3:32:d0:28:ed:c0:fa:4f:8c:07:93:2b:ec:c7:8b:cc:bf:
         a1:46:e3:26:47:95:22:2c:63:65:3e:ff:4e:1c:b0:16:c1:62:
         44:9f:85:0a:27:c6:2f:d9:6f:eb:f3:a7:fb:d4:58:b7:bf:67:
         48:03:8c:68:5c:bc:f6:53:ce:00:f8:49:07:6e:6d:d5:e0:f2:
         9a:f5:84:86:06:28:61:00:0b:1b:7a:83:f1:32:7a:3b:53:4b:
         d5:76:f5:56:39:09:c9:f4:9e:00:41:05:8c:0a:0e:1a:a7:3c:
         44:1a:0e:c0:13:c2:d3:f1:24:4b:0f:28:e8:4f:0d:7e:b9:67:
         70:ab:dd:dc
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDC6dyMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA5
MzJlZDdmYzc1ODdhMTEyNDA5MDFjNzZjMWY2ZjY0ZjMwMjAxNDkwHhcNMjEwMzI0
MTQ0MjUyWhcNMjYwMzI0MTQ0MjUyWjAzMTEwLwYDVQQDEyg5ZTg3NGRkZGIzMDEy
OTBiZDIzYTUyZWFmMjVmMzE1YWExNWU1Yjk0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArc6PpP0oT++IScOF1DFQ1vjsZnDbYShROy79wiJtNlZ7w2o4
EK2GG2H0zYIMDko04xVzoLEuD3YxTHxocvzmRcJ5z/Wo2GXJ3nIyf7xYfjD/OWXx
LEyLTIiiLE6zYwOWrleZsPSb3FSiMr0rw4uqS2Zjk/TOhHSUDaAM39CVqszJ3pn4
wIHjh0ZqfmG6oOosCqICngZqxer2J0SwWTxgNnn9GmmoWb59xtArsnY1fWYMLsXQ
Tvxe5u3Sgj4iVt4van9k1sN7VspZrh1+NSzyI3fL3/hVibX1fUv5lBQSFwvmQ7aP
PpW0QRGEoMVOIdWAe518guLMjIk5y2Ke8HTX/QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFKcPU4x7R91TWfsa96o2p/JI5mGaMB8GA1UdIwQYMBaAFGPl5w+iPAyAg36h
/pZQdpXAzl7/MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDkzMmVk
N2ZjNzU4N2ExMTI0MDkwMWM3NmMxZjZmNjRmMzAyMDE0OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjI1MDA5M2MtYmE5OC00OGI4LThjNTItOWFiZTU3
ZDUyZDRmLzllODc0ZGRkYjMwMTI5MGJkMjNhNTJlYWYyNWYzMTVhYTE1ZTViOTQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mMjUwMDkzYy1iYTk4LTQ4YjgtOGM1Mi05YWJl
NTdkNTJkNGYvMDkzMmVkN2ZjNzU4N2ExMTI0MDkwMWM3NmMxZjZmNjRmMzAyMDE0
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAM/4/jANBgkqhkiG9w0BAQsFAAOCAQEAS1ktmM2cOmP5u0Wq
XTROqkt4+G4ho5ih/friULloQhp7SZEtmADzbes8MK8St32OrNnSSVQGdr7emsKn
wdzYdnmmdQkhoCUTppSTJFAG5MsyV6MUj1M4bQIVeWiDEprx9dBynAZ0W3s9kz1Y
m0A85ktK89kaSaFugytuHIWGMMMy0CjtwPpPjAeTK+zHi8y/oUbjJkeVIixjZT7/
ThywFsFiRJ+FCifGL9lv6/On+9RYt79nSAOMaFy89lPOAPhJB25t1eDymvWEhgYo
YQALG3qD8TJ6O1NL1Xb1VjkJyfSeAEEFjAoOGqc8RBoOwBPC0/EkSw8o6E8Nfrln
cKvd3A==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:58 2023 by rpki-client on console-ams.rpki-client.org