Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fb1df9aa-a9bc-4f3c-8e52-71146a6196f9/05e03ce9d2c8c9b9caa521e3d084f19b83f24e5a.roa
File:                     05e03ce9d2c8c9b9caa521e3d084f19b83f24e5a.roa (raw, json)
Hash identifier:          0Vf0LEtW9SO+bTrpkSvUgXWCLyn/o6N9KaXia8EYe6k=
Subject key identifier:   16:B9:A6:B0:54:AB:91:61:DF:46:7A:C1:60:01:E2:F4:41:AA:EC:B9
Certificate issuer:       /CN=88c828fbf7c4212619b24a7d12142f15f0f5ffea
Certificate serial:       129B
Authority key identifier: 6A:15:80:3C:4B:16:44:9A:6C:C1:B1:2E:28:E8:2C:8F:E8:A7:6F:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88c828fbf7c4212619b24a7d12142f15f0f5ffea.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fb1df9aa-a9bc-4f3c-8e52-71146a6196f9/05e03ce9d2c8c9b9caa521e3d084f19b83f24e5a.roa
Signing time:             Wed 15 Feb 2023 23:43:06 +0000
ROA not before:           Sun 12 Feb 2023 23:11:38 +0000
ROA not after:            Sat 15 Feb 2025 23:11:38 +0000
asID:                     270088
IP address blocks:        170.0.8.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4763 (0x129b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88c828fbf7c4212619b24a7d12142f15f0f5ffea
        Validity
            Not Before: Feb 12 23:11:38 2023 GMT
            Not After : Feb 15 23:11:38 2025 GMT
        Subject: CN=05e03ce9d2c8c9b9caa521e3d084f19b83f24e5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6a:be:3e:63:6c:e0:b0:ba:ff:cd:43:32:7f:
                    a3:66:00:b7:eb:37:26:5d:2a:e2:62:5e:09:2d:a3:
                    7a:15:d7:a8:78:30:d9:bc:45:c4:a1:db:7b:70:1b:
                    1a:b7:1c:4f:bb:5a:c9:0d:37:b3:73:e6:00:10:45:
                    34:49:f2:63:52:9d:dc:e2:ba:e1:24:53:9e:62:9a:
                    ee:05:84:8f:3b:cf:fb:5c:e8:2d:4a:2f:f9:b1:ba:
                    59:47:79:ac:81:57:94:d4:5f:c1:15:3c:f9:34:08:
                    17:23:78:04:4e:77:b8:07:9b:77:3f:ec:a1:21:77:
                    2a:68:3d:14:5f:a0:52:21:60:78:cb:6d:8e:a7:04:
                    17:f1:e2:2b:3f:d4:b2:5f:37:7c:b4:a5:0d:c2:3e:
                    da:2c:70:71:45:b9:0e:fb:9a:fe:b6:eb:4a:4b:f3:
                    a9:b9:aa:f3:68:7e:0f:db:68:b3:eb:30:e1:7a:5c:
                    0e:5d:02:43:be:a5:7a:37:90:3a:03:68:97:65:1b:
                    bf:b5:41:c1:b2:30:55:49:33:2a:99:42:f0:a7:64:
                    31:6e:08:84:3b:7b:9d:96:25:58:bc:67:f3:4f:ad:
                    cc:30:3b:c0:1e:50:90:19:f4:3d:98:58:0b:83:51:
                    a8:1c:46:a7:9c:5d:d3:64:5f:93:4d:ba:3b:12:fd:
                    4b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B9:A6:B0:54:AB:91:61:DF:46:7A:C1:60:01:E2:F4:41:AA:EC:B9
            X509v3 Authority Key Identifier:
                keyid:6A:15:80:3C:4B:16:44:9A:6C:C1:B1:2E:28:E8:2C:8F:E8:A7:6F:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88c828fbf7c4212619b24a7d12142f15f0f5ffea.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fb1df9aa-a9bc-4f3c-8e52-71146a6196f9/05e03ce9d2c8c9b9caa521e3d084f19b83f24e5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fb1df9aa-a9bc-4f3c-8e52-71146a6196f9/88c828fbf7c4212619b24a7d12142f15f0f5ffea.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:b4:9a:1c:84:7d:a2:e9:c8:9e:b0:85:72:c3:72:ce:7e:76:
         d7:af:51:95:d3:85:ac:03:6f:af:40:6b:62:c4:bb:88:7f:b1:
         14:5d:e9:c8:45:c4:71:82:70:c9:98:9f:57:84:ec:ef:e2:09:
         f2:d4:d6:7e:e8:14:cb:af:af:47:94:1d:d2:e1:94:2c:4c:76:
         9a:ca:c6:2e:9a:00:a2:c0:ea:1e:a4:f3:94:6b:bd:56:bc:21:
         6f:d9:02:eb:c2:aa:ae:66:aa:3f:da:b5:b6:d1:4a:62:61:04:
         01:70:37:fc:38:03:42:f1:c7:d6:13:5b:81:c6:04:71:d4:65:
         9b:a7:8e:92:1e:73:c9:52:c0:78:eb:50:cd:6c:ca:2f:13:46:
         02:15:12:4e:7d:6e:46:f1:db:07:29:51:ac:f4:b1:67:c5:36:
         dc:e3:0c:fc:a8:76:2b:fe:2b:cd:41:48:4c:a8:b0:0b:06:0b:
         36:1c:0d:82:f2:f0:be:b8:88:0b:51:de:2e:bd:44:1e:77:dc:
         c7:de:8f:f2:6b:7b:ed:a5:71:88:d7:7a:11:93:47:8e:86:d6:
         b9:21:e5:3f:61:38:7c:37:de:fc:59:57:b6:aa:50:31:05:d6:
         ef:a0:bb:de:b9:33:87:01:c9:83:94:94:06:8e:1b:bc:7e:30:
         49:86:cf:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:45 2023 by rpki-client on console-fra.rpki-client.org