Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ffb9b7fe-e8ff-4da8-9256-df59f165f91d/662ba0df55f1094a0cee5331549103b2853ba574.roa
File:                     662ba0df55f1094a0cee5331549103b2853ba574.roa (raw, json)
Hash identifier:          69ykMdQ6Oa/Blazz1fcxcq/rW3BfE9HjADSEJPy1hWg=
Subject key identifier:   A8:0C:AA:5A:1C:F6:11:B9:CE:13:F1:4F:0B:0A:D2:F7:AC:C1:81:BC
Certificate issuer:       /CN=1579ac51896b95038727e3223b1d7ae2507073b5
Certificate serial:       0DF6F6
Authority key identifier: 98:42:FC:61:A3:71:4E:E3:C0:53:2B:2A:F3:64:92:3B:17:17:D3:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1579ac51896b95038727e3223b1d7ae2507073b5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ffb9b7fe-e8ff-4da8-9256-df59f165f91d/662ba0df55f1094a0cee5331549103b2853ba574.roa
Signing time:             Wed 24 Mar 2021 14:29:45 +0000
ROA not before:           Wed 24 Mar 2021 14:29:44 +0000
ROA not after:            Tue 24 Mar 2026 14:29:44 +0000
asID:                     7303
IP address blocks:        190.103.177.0/24 maxlen: 24
                          190.103.176.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 915190 (0xdf6f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1579ac51896b95038727e3223b1d7ae2507073b5
        Validity
            Not Before: Mar 24 14:29:44 2021 GMT
            Not After : Mar 24 14:29:44 2026 GMT
        Subject: CN=662ba0df55f1094a0cee5331549103b2853ba574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c1:3e:09:cb:8a:d2:d4:8f:4e:1f:ab:d0:8a:
                    1d:72:5c:6b:70:44:81:95:5b:5e:b2:87:a6:77:6b:
                    57:ca:2e:f5:4f:26:4e:3b:0c:2f:df:a0:6d:c7:1f:
                    4b:a3:0f:a6:b6:7e:60:d2:d5:75:86:3a:72:41:7c:
                    00:d5:e6:86:c8:4c:c9:7a:f8:2d:37:78:5e:cd:f4:
                    f2:33:d4:40:08:77:b8:c6:4e:41:c2:bd:1b:8b:f4:
                    47:40:1b:d6:9c:1b:5a:58:ac:fb:36:a4:da:d7:78:
                    e3:ce:88:62:69:0f:77:1c:89:82:5a:df:a2:df:f5:
                    33:23:c6:c3:e1:46:60:ce:d5:d5:ac:d6:3c:34:42:
                    73:3c:09:f5:42:8b:28:f0:ac:89:86:80:a3:90:1f:
                    0d:3f:84:d1:cb:e1:2a:af:e9:c7:e3:60:6e:ca:e5:
                    ff:71:42:a1:d8:e9:fb:2d:9f:de:03:f4:59:27:fb:
                    8f:8a:88:47:59:80:71:bb:20:b3:b1:d3:91:f6:f9:
                    63:ce:ce:cd:f3:ea:a8:96:13:b6:7b:e9:1e:e2:72:
                    f2:e1:b4:fd:ed:75:87:5c:f9:78:d0:f8:ef:10:e3:
                    df:ec:5c:31:a9:25:41:0b:41:b2:7f:da:d4:ee:2d:
                    a9:6d:f0:95:22:32:f8:fe:18:86:22:80:5e:06:56:
                    e2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:0C:AA:5A:1C:F6:11:B9:CE:13:F1:4F:0B:0A:D2:F7:AC:C1:81:BC
            X509v3 Authority Key Identifier:
                keyid:98:42:FC:61:A3:71:4E:E3:C0:53:2B:2A:F3:64:92:3B:17:17:D3:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1579ac51896b95038727e3223b1d7ae2507073b5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ffb9b7fe-e8ff-4da8-9256-df59f165f91d/662ba0df55f1094a0cee5331549103b2853ba574.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ffb9b7fe-e8ff-4da8-9256-df59f165f91d/1579ac51896b95038727e3223b1d7ae2507073b5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:1e:8d:aa:4e:ae:71:c4:0e:ec:d2:b4:5b:3b:b6:61:dd:ea:
         8a:2a:71:3f:d8:f6:27:6d:2d:0f:90:c3:6f:97:f8:cd:7b:59:
         fb:65:1d:69:90:18:7b:f8:55:9e:5c:45:ff:76:0b:b9:c6:c3:
         08:99:a3:95:29:61:ac:99:7f:bf:50:39:e7:6e:da:6f:45:92:
         4b:3a:d7:0e:63:1f:a2:b3:68:bb:63:f4:43:69:20:a4:9a:cb:
         36:be:6f:1a:80:5a:6f:d9:e5:e3:67:0b:89:17:27:8d:ae:00:
         92:f0:bb:3e:83:31:45:cd:29:3c:28:5c:24:b3:91:5a:e7:bf:
         31:92:94:ed:43:97:40:43:07:92:a9:c0:0e:3d:93:20:db:e7:
         fd:ce:8c:1a:e9:26:6c:38:e1:48:36:73:18:29:6d:25:0c:7f:
         71:b8:d4:e5:74:5b:80:10:e5:cc:de:f5:88:9d:4a:91:2f:2a:
         26:ff:6b:38:9e:ba:a8:de:b5:6d:3b:84:ec:82:f1:55:2e:a9:
         63:cf:2e:bf:09:12:07:41:67:44:c3:0d:6b:c0:56:a1:2d:88:
         b1:ae:6e:6f:3d:87:c2:c9:e5:57:c0:95:f6:a5:29:ee:26:a2:
         41:4d:c5:8f:d6:ee:86:df:03:c3:92:38:ad:43:d3:40:60:38:
         72:7c:60:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:59 2023 by rpki-client on console-ams.rpki-client.org