Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/8db9bf554ea923eaee614735971f71b6f946af11.roa
File:                     8db9bf554ea923eaee614735971f71b6f946af11.roa (raw, json)
Hash identifier:          URQmOFI+2lYBpHaVDV0BmAVRNFgdMFcNR99j7E64tM8=
Subject key identifier:   9E:AA:13:14:81:A0:0A:63:2B:00:5E:0B:3E:0A:D6:47:D2:70:8B:F7
Certificate issuer:       /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial:       1E2D9F
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/8db9bf554ea923eaee614735971f71b6f946af11.roa
Signing time:             Mon 08 May 2023 19:04:14 +0000
ROA not before:           Sun 07 May 2023 19:04:14 +0000
ROA not after:            Thu 08 May 2025 19:04:14 +0000
asID:                     18734
IP address blocks:        138.122.144.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1977759 (0x1e2d9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
        Validity
            Not Before: May  7 19:04:14 2023 GMT
            Not After : May  8 19:04:14 2025 GMT
        Subject: CN=8db9bf554ea923eaee614735971f71b6f946af11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6c:ca:ed:e6:15:e5:66:61:19:97:d6:d6:cc:
                    1b:dd:65:cf:36:fa:32:6e:bf:b6:78:0c:d4:bb:89:
                    ed:fc:a9:9e:e6:79:16:dd:76:bf:b6:95:b5:3f:7f:
                    03:74:14:cf:79:ca:2a:32:f1:dd:d4:f5:ed:06:f6:
                    96:eb:30:d4:c3:7b:00:ca:22:22:2f:f0:44:76:4b:
                    71:2c:79:86:91:f1:21:ca:e8:57:b6:54:49:65:a2:
                    d0:a2:b6:12:c7:ea:01:d4:b4:36:4e:86:39:3d:20:
                    3d:6c:4c:c5:29:a0:c4:02:bf:36:41:5a:78:a0:32:
                    21:7a:b2:06:ef:2f:91:f2:43:62:85:72:1e:cc:74:
                    9b:02:92:1d:23:0a:03:09:50:b2:c0:49:57:dc:60:
                    55:2f:2c:74:4e:d2:c5:99:d9:b7:b8:0e:50:40:76:
                    11:6c:c8:e6:a6:a1:ab:29:7c:1f:80:f4:0e:12:01:
                    1f:4c:18:76:37:9b:9a:fe:7b:a6:31:4f:b9:b1:b5:
                    ba:4e:2e:7d:1f:9a:5a:cd:88:85:ac:d7:ec:51:23:
                    c6:0e:ec:1e:31:d0:89:da:ac:07:3a:83:4f:67:f5:
                    67:e8:fe:0c:ce:2d:7c:15:7c:9e:e8:3e:d7:c4:cb:
                    1c:ff:bf:c5:cf:93:de:21:17:a1:89:ee:f5:71:43:
                    bd:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AA:13:14:81:A0:0A:63:2B:00:5E:0B:3E:0A:D6:47:D2:70:8B:F7
            X509v3 Authority Key Identifier:
                keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/8db9bf554ea923eaee614735971f71b6f946af11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:bd:f6:88:71:8b:7b:6e:50:fa:08:67:7d:60:10:b0:ef:a7:
         2d:79:d0:77:96:bb:7b:ec:91:04:f2:68:3f:52:9d:75:c6:5f:
         17:56:58:3f:d2:9a:1c:df:46:59:b8:99:cd:54:88:47:43:c1:
         60:37:85:e3:d6:d3:18:38:7c:f6:40:08:be:f6:95:29:d4:cf:
         06:0f:de:b2:ad:9b:33:32:f0:80:f3:b9:21:7f:14:1e:0f:27:
         2f:7e:23:f3:f3:98:93:ba:70:ac:4b:64:61:96:cd:f6:c3:0a:
         44:65:ac:6c:31:8b:ee:f5:e0:4e:01:ec:74:c9:79:f9:36:d8:
         dd:67:8e:ac:10:41:86:49:2c:4a:ab:76:c7:3e:8a:8c:57:0c:
         cc:09:af:e8:74:91:82:4e:bf:50:83:81:1d:9f:fe:04:2c:90:
         3c:38:a5:86:87:7b:07:df:83:4f:00:23:7a:5e:29:36:74:28:
         0f:0c:27:0b:63:27:92:66:8a:2c:6b:12:5b:06:64:09:81:37:
         e0:7b:3e:98:3c:45:f3:1e:33:0e:02:01:fd:f4:20:a5:31:25:
         74:51:71:de:8d:d3:a9:fa:65:2a:2c:55:5f:ce:f5:6d:e6:39:
         11:56:57:a0:fd:63:de:32:1b:78:90:65:92:d8:cd:be:5d:56:
         9d:e5:90:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net