Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f4760713-3922-4d26-a5b0-41c1c0508aa3/42d64bc4b4afb9f1fc9dbab0c22759cc03f89d3e.roa
File:                     42d64bc4b4afb9f1fc9dbab0c22759cc03f89d3e.roa (raw, json)
Hash identifier:          QnPf60kCFAPN1j1b/ap0SH/C+i6xLbm5Fzs7FP2rbvk=
Subject key identifier:   5F:CA:23:D6:25:3B:4D:F2:45:3C:C7:DE:7E:2F:06:9B:29:28:3E:0D
Certificate issuer:       /CN=75414d9f68146acc4abcd9997952be1300ec5196
Certificate serial:       1A32
Authority key identifier: 31:DA:E8:BF:21:04:29:09:AE:C7:3D:A0:E3:2F:E4:AB:49:59:1A:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75414d9f68146acc4abcd9997952be1300ec5196.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f4760713-3922-4d26-a5b0-41c1c0508aa3/42d64bc4b4afb9f1fc9dbab0c22759cc03f89d3e.roa
Signing time:             Thu 24 Feb 2022 08:30:01 +0000
ROA not before:           Thu 24 Feb 2022 08:30:01 +0000
ROA not after:            Sat 24 Feb 2024 08:30:01 +0000
asID:                     22908
IP address blocks:        201.175.5.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 24 Feb 2024 08:30:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6706 (0x1a32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75414d9f68146acc4abcd9997952be1300ec5196
        Validity
            Not Before: Feb 24 08:30:01 2022 GMT
            Not After : Feb 24 08:30:01 2024 GMT
        Subject: CN=42d64bc4b4afb9f1fc9dbab0c22759cc03f89d3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:bb:4d:fc:5e:96:c8:d5:ea:88:63:3c:73:e0:
                    f4:d7:da:b3:50:31:66:f2:cf:c9:a7:5f:d9:5c:c5:
                    5c:9d:83:b3:b2:9a:d7:a4:4d:9f:e6:13:c3:e6:0d:
                    00:fa:82:06:89:4f:5b:af:3a:fa:b8:05:4f:93:55:
                    38:df:2b:54:21:c8:65:57:bd:01:c9:58:83:7a:e6:
                    31:9c:2e:71:51:1f:f9:7f:44:c3:1a:62:c3:41:73:
                    f2:aa:e7:68:79:13:e2:72:c6:2e:a9:5e:44:95:df:
                    21:35:8f:4a:78:63:c6:3b:36:8a:50:82:f0:18:d1:
                    8f:af:6b:7d:2a:de:51:3f:59:67:19:1a:4c:79:b5:
                    b3:db:83:e4:b9:ee:a1:8a:02:35:8d:c7:7f:e8:df:
                    eb:2f:c0:37:b4:51:e6:bc:07:65:27:75:6d:81:73:
                    cc:55:76:96:25:b5:63:19:43:a5:41:24:ee:3a:8b:
                    4a:e5:03:ad:12:1d:87:82:35:e5:3f:6a:6b:12:50:
                    f9:82:e1:71:d8:06:a9:bd:90:da:a2:d1:f6:77:c1:
                    3c:e2:61:09:1d:5e:76:c2:a3:73:d1:5e:d2:82:61:
                    cc:c3:6a:e8:5f:f6:dc:88:bb:a2:74:89:c2:7e:72:
                    a9:f7:c1:31:55:3b:4b:f6:29:17:f4:ba:e6:a0:47:
                    ff:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:CA:23:D6:25:3B:4D:F2:45:3C:C7:DE:7E:2F:06:9B:29:28:3E:0D
            X509v3 Authority Key Identifier:
                keyid:31:DA:E8:BF:21:04:29:09:AE:C7:3D:A0:E3:2F:E4:AB:49:59:1A:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75414d9f68146acc4abcd9997952be1300ec5196.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f4760713-3922-4d26-a5b0-41c1c0508aa3/42d64bc4b4afb9f1fc9dbab0c22759cc03f89d3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f4760713-3922-4d26-a5b0-41c1c0508aa3/75414d9f68146acc4abcd9997952be1300ec5196.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.175.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:9a:69:3b:9b:e9:5c:f5:dd:3f:88:d0:06:76:59:bd:34:60:
         82:5d:42:45:59:1d:61:5a:b2:6a:a1:cf:6b:eb:1b:99:71:35:
         66:66:0d:99:4a:dd:9f:31:2e:b5:9f:8f:08:a6:cc:8a:ae:65:
         c0:ea:b1:2b:ce:3e:28:c7:c6:3b:ef:f2:d9:e6:ad:79:a1:4f:
         f3:24:88:18:8e:ae:60:03:37:8e:9e:e6:6e:80:e5:31:02:50:
         a7:4a:25:86:40:04:2e:ce:63:37:4e:60:6c:60:88:e3:b4:26:
         df:f6:18:7f:74:1c:fc:b6:f5:4a:fe:6b:04:94:6b:8a:69:58:
         c6:b2:2f:b5:57:a6:16:0a:21:b1:0b:0e:ed:4a:82:4b:95:53:
         64:52:1f:ad:ef:69:13:7a:b3:a8:6c:e4:cd:d1:11:33:1c:06:
         26:96:82:6e:c2:8e:0d:f9:be:7c:0d:a7:2d:f4:ea:ac:dd:7f:
         ff:e9:59:e9:a0:f2:2f:a8:20:c8:3d:bb:10:96:f0:06:3c:fd:
         2c:be:3f:ad:36:f3:fe:ab:be:14:9a:0e:1b:7d:97:21:85:47:
         f5:00:7a:71:0e:4d:36:c7:69:4f:1c:d8:99:d9:dd:6b:84:18:
         77:9e:56:a1:c8:53:40:c5:d6:6a:16:fe:46:60:b6:f1:c5:e6:
         39:59:de:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 24 11:51:10 2024 by rpki-client on console-fra.rpki-client.org