Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/50748898ada0e6de5e2e3cb51078ef6578b08314.roa
File:                     50748898ada0e6de5e2e3cb51078ef6578b08314.roa (raw, json)
Hash identifier:          HJduPkL/7Cwa3w0J4A66Dvh4w3uuMSo/B1C+/Xc0qiQ=
Subject key identifier:   7E:04:E9:17:3F:6A:FA:69:C0:A6:8B:1B:E6:4A:1C:24:75:C7:52:1F
Certificate issuer:       /CN=d62baf1d43712ef5f3860b21d04e8534536fa164
Certificate serial:       0E0187
Authority key identifier: 87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/50748898ada0e6de5e2e3cb51078ef6578b08314.roa
Signing time:             Wed 24 Mar 2021 14:33:16 +0000
ROA not before:           Wed 24 Mar 2021 14:33:16 +0000
ROA not after:            Tue 24 Mar 2026 14:33:16 +0000
asID:                     27995
IP address blocks:        179.3.0.0/21 maxlen: 24
                          179.3.8.0/21 maxlen: 24
                          179.3.16.0/21 maxlen: 24
                          179.3.48.0/20 maxlen: 24
                          179.3.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 917895 (0xe0187)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d62baf1d43712ef5f3860b21d04e8534536fa164
        Validity
            Not Before: Mar 24 14:33:16 2021 GMT
            Not After : Mar 24 14:33:16 2026 GMT
        Subject: CN=50748898ada0e6de5e2e3cb51078ef6578b08314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ef:6e:e3:85:68:b7:cb:f7:fc:93:52:5d:4f:
                    f9:d0:7e:03:03:69:e0:65:1a:64:b3:85:56:9f:86:
                    93:7e:f5:b2:a8:0f:3f:f8:9e:2c:2a:7a:2a:0a:8d:
                    81:87:15:99:32:b3:7a:52:4d:4f:9c:61:4f:d3:de:
                    cf:de:3d:44:01:53:af:0e:aa:9a:d4:f8:55:00:72:
                    b2:9a:72:78:d9:56:ff:cd:41:3d:a3:18:67:8e:9e:
                    28:2f:42:cb:88:cc:fe:b6:9e:f1:05:4d:25:6c:4e:
                    47:e2:cf:5d:1d:14:c7:d1:e9:6a:af:5d:70:e0:0d:
                    e4:95:f7:d8:a5:5a:17:22:97:05:c8:44:f8:2b:61:
                    20:48:51:83:05:41:62:7b:1b:d9:12:98:29:86:d0:
                    d0:18:f7:f5:26:ef:20:f4:ff:57:57:e2:df:7c:6a:
                    2b:f2:ea:c6:59:d8:03:58:12:f1:a6:38:77:f0:9c:
                    69:d5:15:34:86:ba:5e:22:95:0f:4a:c3:34:70:b7:
                    3f:79:88:8f:00:36:22:fa:c8:82:d4:9d:6f:25:84:
                    de:b3:23:eb:71:ed:31:dd:0d:a7:ab:1f:28:f5:ea:
                    41:e5:c8:4f:8d:38:2d:95:af:e5:7e:ee:0a:a0:a9:
                    5d:b4:9d:7c:d3:01:be:4f:17:38:95:8e:33:32:e6:
                    96:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:04:E9:17:3F:6A:FA:69:C0:A6:8B:1B:E6:4A:1C:24:75:C7:52:1F
            X509v3 Authority Key Identifier:
                keyid:87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/50748898ada0e6de5e2e3cb51078ef6578b08314.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/d62baf1d43712ef5f3860b21d04e8534536fa164.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.3.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         32:ee:06:d3:c8:b8:20:22:5f:24:2c:5b:04:c6:2e:e8:a9:53:
         52:12:8a:e0:59:92:2c:55:98:a2:cc:ad:6f:b4:25:21:a4:e6:
         ce:80:77:84:ad:96:16:b7:b0:00:06:67:ae:48:e3:dc:f6:69:
         1b:87:cd:bd:a7:7e:75:be:bf:68:ef:ff:1c:a7:3f:ae:cb:6f:
         5a:92:5f:ab:5e:c5:23:52:6c:08:94:e8:5e:45:b5:8b:eb:dd:
         34:5c:7a:9f:44:03:77:b8:01:b8:0a:a9:79:73:dc:44:1d:20:
         2f:fa:ea:19:e1:8b:8f:1d:49:d2:48:08:8a:71:69:30:c7:b0:
         35:f5:5e:6f:c5:08:9c:3a:c7:d3:57:db:17:0b:4e:c3:52:2c:
         a2:34:70:5a:21:d4:6a:28:1d:f9:2c:a6:25:b6:7c:c8:ea:0e:
         42:eb:8d:2d:9d:1e:b8:89:87:bc:70:5a:5c:28:3d:bb:8e:eb:
         9e:b2:4f:5f:76:79:6e:16:86:64:74:2e:28:0e:83:9f:2a:db:
         b6:2d:4e:13:9f:4f:e1:d0:5c:b1:cb:ea:da:c4:9c:da:eb:40:
         ff:70:fa:62:da:8f:c8:27:1e:75:a2:b6:2e:67:d6:96:e6:29:
         92:16:96:ef:b5:3a:81:bb:3c:46:1e:7f:21:77:4b:14:b1:c7:
         3a:e6:e9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 14 20:28:19 2023 by rpki-client on console-fra.rpki-client.org