Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f2a83bb3-ced2-4439-8a86-d35f2837f6e1/af8f8b77c1f7fe1ad0d52f595c76fff6f98e79d7.roa
File:                     af8f8b77c1f7fe1ad0d52f595c76fff6f98e79d7.roa (raw, json)
Hash identifier:          yz8DAsxsHp/3bsz5+M2DmcAnVYQ5nmzTMksf9aO1q/I=
Subject key identifier:   91:84:1F:2E:BD:6D:2F:86:D2:E7:63:BE:98:EC:44:5E:66:B0:DD:3F
Certificate issuer:       /CN=b1d26b632f0eecb3c9ba3d91dff070512a60b299
Certificate serial:       0309
Authority key identifier: 8F:A3:C0:38:D8:03:63:FF:C9:94:3F:95:58:C1:81:93:F4:D8:CA:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b1d26b632f0eecb3c9ba3d91dff070512a60b299.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f2a83bb3-ced2-4439-8a86-d35f2837f6e1/af8f8b77c1f7fe1ad0d52f595c76fff6f98e79d7.roa
Signing time:             Wed 23 Nov 2022 21:03:09 +0000
ROA not before:           Tue 22 Nov 2022 21:00:26 +0000
ROA not after:            Sat 23 Nov 2024 21:00:26 +0000
asID:                     271944
IP address blocks:        181.232.236.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 777 (0x309)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1d26b632f0eecb3c9ba3d91dff070512a60b299
        Validity
            Not Before: Nov 22 21:00:26 2022 GMT
            Not After : Nov 23 21:00:26 2024 GMT
        Subject: CN=af8f8b77c1f7fe1ad0d52f595c76fff6f98e79d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a8:71:58:92:6c:45:b3:3c:3b:94:f6:3c:d6:
                    d3:2f:92:1d:fc:67:f5:2b:23:16:31:1c:94:3d:fd:
                    22:53:58:52:49:68:ab:5a:0e:8d:8e:66:97:dd:1a:
                    aa:45:26:91:77:54:48:b2:f3:a5:3f:88:4c:42:c8:
                    bd:c1:10:8d:22:2a:b9:cb:3f:f9:52:88:dd:43:18:
                    cf:7f:b0:d7:0e:69:cd:ea:e1:be:bc:81:3c:44:5c:
                    c5:61:f0:41:52:e2:00:aa:71:00:bf:a4:b6:7a:34:
                    b9:86:cc:69:06:3c:9d:f5:da:99:d1:2b:1f:4b:e8:
                    2b:bb:da:ab:2b:28:7e:b5:d7:2f:4e:e1:df:2d:64:
                    75:36:2b:53:52:a6:96:8c:ca:7e:47:72:c5:ad:b9:
                    63:63:c3:19:bf:73:4b:ad:08:a2:1e:65:56:c7:17:
                    0a:89:c5:ed:a4:b4:c7:b2:ce:7d:dd:12:19:69:c2:
                    4d:b4:aa:55:4c:60:02:ef:a6:3e:8b:fb:9d:f0:8b:
                    6f:24:13:3f:76:27:8a:55:3f:6b:c3:5d:10:7d:4b:
                    ad:24:1e:30:3c:5d:79:af:7e:58:e9:1a:57:48:94:
                    f8:21:30:51:d3:22:10:26:56:d8:03:bb:d4:86:99:
                    dc:36:73:6d:a6:7f:24:49:28:f8:c6:13:3e:7b:2d:
                    51:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:84:1F:2E:BD:6D:2F:86:D2:E7:63:BE:98:EC:44:5E:66:B0:DD:3F
            X509v3 Authority Key Identifier:
                keyid:8F:A3:C0:38:D8:03:63:FF:C9:94:3F:95:58:C1:81:93:F4:D8:CA:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b1d26b632f0eecb3c9ba3d91dff070512a60b299.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f2a83bb3-ced2-4439-8a86-d35f2837f6e1/af8f8b77c1f7fe1ad0d52f595c76fff6f98e79d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f2a83bb3-ced2-4439-8a86-d35f2837f6e1/b1d26b632f0eecb3c9ba3d91dff070512a60b299.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:cb:1d:24:d5:1b:0a:42:f1:86:0c:ff:2e:60:71:bf:5a:45:
         a8:77:dd:d8:98:10:42:af:5e:85:d1:60:0c:36:c5:56:c6:14:
         94:d9:8a:ee:dc:69:16:95:d8:5d:2a:4d:f2:45:bb:2c:50:2f:
         0b:55:43:76:96:22:80:46:02:03:77:3f:1e:6b:48:63:3f:4b:
         2f:d7:b1:e3:ec:0f:00:17:90:d3:c7:bc:75:85:e9:86:dd:52:
         51:8f:b0:de:f5:8f:53:ce:f7:de:00:e1:1e:78:4c:e5:02:72:
         fc:98:89:c3:9e:30:5d:39:a6:57:8a:d5:86:0d:ec:98:12:c2:
         5c:f4:1f:48:e0:38:e9:8a:b8:56:26:fb:9e:ed:04:13:eb:cd:
         d8:94:43:8c:c9:54:b9:be:52:db:34:31:9a:99:c8:5b:89:53:
         4c:78:cb:86:7e:6c:7c:35:c7:d6:ac:a7:ab:e4:54:ef:71:16:
         c9:ac:ab:8a:56:3c:6a:7e:eb:37:06:00:4d:88:c1:2b:56:e1:
         71:7f:ae:bc:60:13:e7:22:a9:0d:aa:40:4a:09:90:70:b6:fb:
         9d:f4:52:50:49:2b:ea:53:3d:b6:5b:e6:d7:93:aa:0b:3f:c0:
         78:76:fe:e0:56:3d:71:ce:3e:3b:03:b7:d8:97:de:fe:47:9f:
         18:0c:10:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-fra.rpki-client.org