Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/92200e2926eeb7a0fe1580e69eb93d59eea541bf.roa
File:                     92200e2926eeb7a0fe1580e69eb93d59eea541bf.roa (raw, json)
Hash identifier:          3MfVzRpVk6Y/D7HfNUuvblXLdTxmdKltk8F1/dal2Mk=
Subject key identifier:   B7:49:25:DA:14:1A:92:A7:E6:A2:80:AA:27:EB:9F:E5:AE:B2:1B:12
Certificate issuer:       /CN=2ea1715958333398146179fdbf2e485fe6525742
Certificate serial:       1DCFB2
Authority key identifier: 60:84:61:48:7C:36:64:D8:97:0A:C3:A9:A1:74:66:80:8B:AD:C8:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ea1715958333398146179fdbf2e485fe6525742.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/92200e2926eeb7a0fe1580e69eb93d59eea541bf.roa
Signing time:             Fri 05 Jan 2024 18:12:06 +0000
ROA not before:           Fri 05 Jan 2024 18:12:06 +0000
ROA not after:            Mon 05 Jan 2026 18:12:06 +0000
asID:                     264845
IP address blocks:        201.219.252.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1953714 (0x1dcfb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ea1715958333398146179fdbf2e485fe6525742
        Validity
            Not Before: Jan  5 18:12:06 2024 GMT
            Not After : Jan  5 18:12:06 2026 GMT
        Subject: CN=92200e2926eeb7a0fe1580e69eb93d59eea541bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:41:89:6b:bf:6a:08:87:5d:76:1c:d9:86:06:
                    b7:da:fa:86:f9:4d:28:65:e3:7e:d0:aa:58:95:65:
                    2a:11:1f:f6:b8:80:cc:fa:4d:94:f2:71:4a:35:ef:
                    d5:37:9d:2a:84:fd:28:d9:fe:c3:9b:18:2a:3e:74:
                    72:29:a7:13:2f:eb:58:a2:b7:96:f1:e9:07:ef:0c:
                    49:8f:94:a8:24:c5:d5:7b:df:a9:c3:6c:fb:a9:42:
                    54:c9:1d:b5:fa:da:0d:4c:a2:c5:c6:42:56:4f:ca:
                    21:37:ea:c8:a3:98:db:70:6c:62:6f:0d:f5:03:6a:
                    ef:9a:74:4a:81:4d:6e:99:7d:00:98:64:d3:bb:e8:
                    00:e1:cd:77:85:23:ef:de:07:b6:2d:ce:82:23:66:
                    1f:e0:2a:c0:cb:18:8a:c8:db:e0:5c:e2:a9:a2:b7:
                    29:61:2e:7b:ff:b4:f3:f8:4c:af:af:84:ef:26:ce:
                    f4:f2:ca:4b:40:63:32:90:7d:dc:be:65:58:86:f3:
                    8b:59:21:b6:3d:02:c4:b4:73:33:f2:66:39:22:a6:
                    84:89:15:23:8d:6f:1a:b8:7e:2b:05:6f:b3:cd:b2:
                    67:8b:48:8b:81:ac:66:be:89:c3:9d:37:dd:55:1e:
                    69:c3:c2:e0:09:9a:fe:a9:7d:bc:74:9e:8b:d2:8e:
                    fd:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:49:25:DA:14:1A:92:A7:E6:A2:80:AA:27:EB:9F:E5:AE:B2:1B:12
            X509v3 Authority Key Identifier:
                keyid:60:84:61:48:7C:36:64:D8:97:0A:C3:A9:A1:74:66:80:8B:AD:C8:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ea1715958333398146179fdbf2e485fe6525742.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/92200e2926eeb7a0fe1580e69eb93d59eea541bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/2ea1715958333398146179fdbf2e485fe6525742.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:f0:c0:7d:1a:ec:9c:33:77:c8:58:c6:84:0e:7f:93:89:eb:
         34:32:5a:04:cc:17:df:75:c6:6d:47:c7:d9:69:e5:7f:c4:64:
         de:03:3a:ac:6d:73:2d:94:8e:cb:7a:1c:96:7d:f6:ee:07:2b:
         1a:80:96:ce:11:7e:ce:00:37:e7:1e:d3:b0:ca:85:0a:45:a5:
         c2:df:0b:f5:b9:4a:bc:db:58:79:e5:4c:07:7e:fb:ea:69:1b:
         94:eb:95:12:67:b8:fe:91:47:9d:0a:fb:cf:97:71:b0:79:d3:
         cf:ca:4a:d1:a1:f2:43:57:62:72:43:4e:fb:72:7a:64:4f:cf:
         30:ee:7a:98:69:b3:53:15:23:d9:ba:43:82:0f:e0:f9:db:03:
         0e:f9:80:82:b1:e4:bf:4c:ec:b3:85:5e:e9:2d:d4:01:9d:3e:
         51:12:37:8a:c1:7e:57:44:8a:43:68:45:10:b6:dc:e4:87:db:
         11:2e:5c:cb:a3:00:43:bd:55:84:11:e7:68:4f:99:d9:24:9d:
         10:ff:63:f2:a5:64:50:14:f2:b5:a0:8c:8c:aa:86:fa:c8:d1:
         b6:24:0b:39:f9:27:4c:f8:c5:c6:4b:43:e6:df:40:c3:69:64:
         eb:b6:9c:f1:0c:90:e9:e5:0e:e4:ab:7b:33:8c:62:98:d2:4a:
         1a:14:6a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 21:04:01 2024 by rpki-client on console.sobornost.net