Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/e470ed95ac256d74bac742812935f58553856683.roa
File:                     e470ed95ac256d74bac742812935f58553856683.roa (raw, json)
Hash identifier:          9dozbxrmVOm0ae6cJH/h0WtbgvOJn8RY5ZtCf/0Iv20=
Subject key identifier:   4A:E0:A3:BE:F5:88:AB:8A:D6:8C:BA:71:6D:FE:EB:BB:6D:47:7E:C9
Certificate issuer:       /CN=2ea1715958333398146179fdbf2e485fe6525742
Certificate serial:       1C3CA7
Authority key identifier: 60:84:61:48:7C:36:64:D8:97:0A:C3:A9:A1:74:66:80:8B:AD:C8:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ea1715958333398146179fdbf2e485fe6525742.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/e470ed95ac256d74bac742812935f58553856683.roa
Signing time:             Wed 29 Nov 2023 16:55:41 +0000
ROA not before:           Wed 29 Nov 2023 16:55:41 +0000
ROA not after:            Sat 29 Nov 2025 16:55:41 +0000
asID:                     264845
IP address blocks:        201.219.254.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1850535 (0x1c3ca7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ea1715958333398146179fdbf2e485fe6525742
        Validity
            Not Before: Nov 29 16:55:41 2023 GMT
            Not After : Nov 29 16:55:41 2025 GMT
        Subject: CN=e470ed95ac256d74bac742812935f58553856683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3b:a6:54:2f:0f:37:af:7f:93:a0:54:98:a0:
                    fe:b6:69:d7:5f:af:cf:4d:41:05:6e:7c:df:06:36:
                    ad:f7:d6:47:a9:93:d6:c9:0c:d4:88:4f:3b:10:56:
                    a0:bc:c7:7c:1b:e3:3c:aa:f2:3b:76:e8:27:b1:54:
                    27:d1:2c:0f:20:53:01:74:9f:7c:2e:b4:1f:ff:48:
                    16:ef:e8:ab:87:5c:1b:2c:8c:2d:d4:c1:59:af:f6:
                    00:b9:eb:88:28:7f:c7:54:43:53:23:a4:0b:31:16:
                    52:95:a8:8a:58:45:ea:55:1d:9e:d0:c2:e0:80:27:
                    6d:22:16:0f:00:3b:79:bc:a2:1b:c5:72:4a:7d:a8:
                    cf:5f:f0:79:98:9c:77:94:af:4a:b0:03:65:b1:22:
                    40:e1:e6:62:7d:12:ce:fb:7f:90:3d:2c:d9:0f:61:
                    4b:0a:9f:5e:71:00:88:64:ad:dc:83:64:8a:83:1f:
                    de:b7:b5:49:f6:93:ed:fd:96:b6:a1:45:1c:5f:6d:
                    27:7b:b1:03:82:3c:72:d9:e1:cf:01:97:b3:ee:36:
                    50:39:12:d1:c4:cc:1e:ec:c7:80:4c:46:a5:7a:72:
                    fe:54:45:2b:8e:6b:4e:c5:ef:7f:76:3c:77:83:56:
                    3e:c0:c2:4d:bc:8c:73:39:06:f9:15:86:45:c3:b0:
                    07:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E0:A3:BE:F5:88:AB:8A:D6:8C:BA:71:6D:FE:EB:BB:6D:47:7E:C9
            X509v3 Authority Key Identifier:
                keyid:60:84:61:48:7C:36:64:D8:97:0A:C3:A9:A1:74:66:80:8B:AD:C8:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ea1715958333398146179fdbf2e485fe6525742.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/e470ed95ac256d74bac742812935f58553856683.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/2ea1715958333398146179fdbf2e485fe6525742.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:26:ae:70:8e:c6:65:ec:13:54:49:19:79:5e:67:76:ad:dd:
         a6:7e:e8:b5:0e:99:9a:8a:b6:e7:6a:f3:d7:76:c5:e6:49:96:
         5e:21:09:6b:a4:63:04:9f:73:f9:9e:9c:3d:6e:37:35:c5:a6:
         29:ae:da:b6:98:d1:00:5b:3a:34:c6:1c:f1:89:e9:03:fe:11:
         2e:c2:6e:51:d2:d6:a1:6b:d3:3b:52:e2:12:25:2a:45:d3:f6:
         9d:32:2c:12:6d:4e:87:d5:e6:e7:36:b9:2a:66:29:92:9a:55:
         8c:48:98:a6:ec:d7:a2:dd:54:79:41:b4:61:d4:9a:b1:ee:9f:
         93:4f:6e:88:0c:fb:ef:74:d7:8c:24:75:9b:b2:d0:36:1f:dc:
         55:f7:9b:44:a0:db:6d:7b:29:a0:54:a9:9a:0a:ff:a8:02:3f:
         e5:28:bc:79:3f:24:b1:b6:20:ed:72:68:30:8d:ae:ad:77:b3:
         fb:1a:63:54:d2:09:0b:25:7b:99:45:b1:ef:48:fa:15:5d:c9:
         59:53:ed:a5:43:40:b9:64:d4:f9:22:14:51:9a:88:27:f9:4e:
         1c:95:b8:9b:e7:82:24:56:ce:a7:3f:64:bf:73:e0:9b:f6:fc:
         d5:bb:8d:8b:0f:d4:37:ca:f7:e0:af:d6:95:99:b0:84:64:3e:
         88:84:03:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:27 2023 by rpki-client on console.sobornost.net