Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/99c636e2466380a0ff6a11a71907e023e4ac0bc1.roa
File:                     99c636e2466380a0ff6a11a71907e023e4ac0bc1.roa (raw, json)
Hash identifier:          HyWD6XJVDFUy/6LnePRvozTcn+u4jokdllGbSRaPLiw=
Subject key identifier:   87:22:8D:C6:91:97:47:E9:02:C1:FA:E2:D8:BC:09:AF:54:8B:10:FF
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       1410C1
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/99c636e2466380a0ff6a11a71907e023e4ac0bc1.roa
Signing time:             Mon 18 Oct 2021 17:21:21 +0000
ROA not before:           Mon 18 Oct 2021 03:00:00 +0000
ROA not after:            Wed 18 Oct 2023 03:00:00 +0000
asID:                     52323
IP address blocks:        181.16.214.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1315009 (0x1410c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Oct 18 03:00:00 2021 GMT
            Not After : Oct 18 03:00:00 2023 GMT
        Subject: CN=99c636e2466380a0ff6a11a71907e023e4ac0bc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9a:a3:55:e5:ad:7a:6e:77:81:0c:1d:71:6d:
                    0d:40:cf:eb:17:6c:db:c2:f2:92:80:15:3c:0e:97:
                    c2:5e:4f:87:59:a3:8e:4c:78:d1:d9:3a:4a:2d:f6:
                    eb:56:c5:8c:aa:45:c0:6f:bd:59:51:be:8b:06:ef:
                    10:5f:6c:bc:0d:c6:9f:33:50:68:df:70:e2:27:64:
                    2b:6a:f5:17:c9:ba:8c:13:0d:74:be:8a:c7:02:74:
                    87:04:fe:1c:20:73:aa:3b:7c:ff:47:bb:0b:03:95:
                    3d:06:27:5f:13:81:61:a7:ae:6c:84:7c:ce:01:13:
                    34:d0:21:dc:a8:e8:a9:86:4e:61:cf:f6:e4:df:90:
                    ff:1d:08:4e:89:67:0a:fd:0f:5f:6b:f8:28:dd:73:
                    e1:35:e5:23:0b:f2:20:c1:bc:93:db:a5:7c:56:0e:
                    92:22:2a:58:79:5a:67:9e:91:80:cc:d5:17:d8:7a:
                    d4:c7:74:e1:1e:44:bf:c8:67:b2:2a:af:a2:ee:e6:
                    02:25:c4:e7:cb:05:d2:45:82:ea:90:3a:17:5a:3a:
                    2e:85:55:9d:1c:a5:4f:db:f9:98:4e:0a:81:07:39:
                    01:ea:a6:4f:5c:c6:1f:da:30:1f:38:c1:59:1c:42:
                    ba:91:4c:b6:36:37:3d:63:d8:36:e5:95:86:41:3b:
                    5b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:22:8D:C6:91:97:47:E9:02:C1:FA:E2:D8:BC:09:AF:54:8B:10:FF
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/99c636e2466380a0ff6a11a71907e023e4ac0bc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:4a:98:2f:96:dc:95:ee:6d:c2:4c:0f:58:c3:e6:5b:9d:d7:
         3c:9d:cf:ad:6c:18:0a:87:fd:ff:41:55:b9:89:9a:99:da:9f:
         22:b3:5a:66:5f:54:8a:22:89:f7:d3:b1:d4:47:74:f1:53:28:
         f1:3c:78:24:d1:6d:83:ff:a5:d8:80:ab:65:82:41:c1:f6:94:
         e3:c1:69:2c:aa:0b:19:ac:ff:98:bb:64:76:0f:65:7e:7e:82:
         55:1b:54:8e:58:b0:bc:b1:4c:27:60:d2:67:f8:8a:70:c8:d1:
         8f:39:03:3d:bd:87:98:96:ae:36:c5:26:9a:6c:be:8c:65:d6:
         ed:c5:35:b6:74:5a:48:3c:42:99:34:77:5b:59:0a:4e:63:66:
         31:34:3e:3b:9c:ef:18:b1:93:f0:ab:d5:29:08:c2:d1:8d:ba:
         f6:ce:33:57:98:83:a1:c6:05:60:9d:16:bb:96:e8:ac:d8:23:
         10:ad:1f:da:31:be:02:de:22:6d:3d:dd:dc:81:d5:21:4e:bc:
         d6:5f:41:c9:6b:2b:99:86:7c:1c:01:99:25:e4:c0:0c:c4:3d:
         7d:81:79:03:41:0b:64:5e:62:11:4a:cc:b9:32:a6:d7:3c:9b:
         bc:96:99:a1:fa:38:ba:51:46:42:b6:b2:29:42:b3:89:ea:38:
         62:e8:53:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:46 2023 by rpki-client on console-ams.rpki-client.org