Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/f5b39320678bde7a51d9e8d33655ec3f76032a73.roa
File:                     f5b39320678bde7a51d9e8d33655ec3f76032a73.roa (raw, json)
Hash identifier:          Sckq0LrRhwCT/3NMmySWMoqq9rrgeYEeyuCFweZeyWU=
Subject key identifier:   55:E9:8C:59:29:12:74:A9:8A:00:2F:66:43:D1:77:76:F0:22:EA:0D
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       22A8AA
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/f5b39320678bde7a51d9e8d33655ec3f76032a73.roa
Signing time:             Fri 28 Apr 2023 17:34:45 +0000
ROA not before:           Thu 27 Apr 2023 17:34:45 +0000
ROA not after:            Mon 28 Apr 2025 17:34:45 +0000
asID:                     270021
IP address blocks:        181.16.152.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2271402 (0x22a8aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Apr 27 17:34:45 2023 GMT
            Not After : Apr 28 17:34:45 2025 GMT
        Subject: CN=f5b39320678bde7a51d9e8d33655ec3f76032a73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:75:4d:b2:37:75:d0:ce:4c:34:d2:22:a4:e4:
                    98:7b:22:6d:5e:b5:49:ea:ea:af:8b:c4:30:41:57:
                    15:62:5d:2a:da:3b:30:0c:67:88:0d:0d:f0:47:d0:
                    68:b8:82:55:78:fc:2e:4c:61:05:8d:ba:d4:9f:60:
                    32:4a:72:18:51:f4:86:4c:5e:77:10:3e:4a:0b:9f:
                    4f:cd:56:99:8f:d4:57:f1:38:53:6e:57:3a:c9:8d:
                    4e:a3:97:d4:f3:8d:40:92:d5:04:ba:64:d8:18:dc:
                    8a:29:ff:b1:8f:f3:56:73:83:da:99:df:93:ea:7c:
                    63:f0:92:3b:02:a8:19:a2:5d:eb:9f:a4:ab:e2:3d:
                    6e:cb:e0:62:8d:97:ae:36:93:80:c5:28:b9:86:fa:
                    9e:fb:5e:d1:f3:e2:33:c4:51:cd:08:f4:5f:4a:09:
                    30:63:fb:a9:f8:59:c2:2b:26:4d:af:d9:f0:6e:49:
                    3b:40:c3:ae:8c:42:7f:1c:f2:59:c2:4b:74:bc:c4:
                    5c:59:78:e4:af:c2:a2:27:79:c1:72:09:c0:dd:c6:
                    53:4a:66:db:b1:99:ff:5d:cc:61:90:a8:1c:d2:5d:
                    de:a8:7f:da:52:8b:46:c1:96:15:10:32:e1:b8:05:
                    de:51:39:d3:db:c2:2b:d4:d8:18:26:3f:f6:7e:36:
                    f7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E9:8C:59:29:12:74:A9:8A:00:2F:66:43:D1:77:76:F0:22:EA:0D
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/f5b39320678bde7a51d9e8d33655ec3f76032a73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:bc:4c:27:64:67:ea:7a:b0:06:33:99:98:5e:cb:99:0f:f1:
         f2:d6:b5:60:66:5b:e7:6e:1d:42:2d:80:69:b4:94:3c:70:17:
         3e:ac:42:9d:db:89:80:d9:c2:36:a5:23:1a:78:50:2b:f9:dc:
         63:a8:49:a1:e6:78:32:5b:3b:df:ed:4d:43:eb:ec:b0:24:70:
         b3:f4:cf:39:5b:a1:9a:dc:69:34:54:e0:c5:44:93:e8:25:30:
         3e:ba:f6:cc:22:93:d8:5d:73:72:35:7b:e4:1c:af:5b:af:2d:
         ac:48:9f:36:08:6f:30:61:cb:10:75:6f:df:ad:42:59:88:79:
         32:6f:d7:fa:ca:ef:b3:8a:c6:96:b1:6e:a2:57:bc:bc:0e:6e:
         03:85:fa:0d:ae:5d:92:65:f2:ac:e5:18:2c:47:58:ec:a7:3e:
         a0:84:90:e0:fc:44:af:09:7f:ee:3b:6b:26:96:52:8d:e2:ca:
         a2:b5:90:e1:f7:3a:1d:ce:e1:2e:06:1c:2b:db:a6:5b:4e:43:
         5d:be:56:5f:f4:42:cf:5b:d9:e6:85:39:43:aa:4c:22:6d:75:
         02:3c:de:65:a9:64:35:91:c7:ad:53:47:fd:ae:19:a1:ce:66:
         00:9d:aa:c2:1e:95:6c:56:be:77:12:31:a7:9f:a4:c0:2d:54:
         3c:7d:62:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:46 2023 by rpki-client on console-ams.rpki-client.org