Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/60a7d0694fed602232ccf4dfc3599183a10cc3bc.roa
File:                     60a7d0694fed602232ccf4dfc3599183a10cc3bc.roa (raw, json)
Hash identifier:          qbQNNd+gbVf/fB1uZW2OX6qew4r71OGvTmO3U3TvDK8=
Subject key identifier:   9D:AE:6F:A0:39:1F:E7:0D:47:17:88:EE:0E:FB:3E:A0:CD:34:4D:70
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       180C07
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/60a7d0694fed602232ccf4dfc3599183a10cc3bc.roa
Signing time:             Mon 24 Jan 2022 13:42:54 +0000
ROA not before:           Mon 24 Jan 2022 03:00:00 +0000
ROA not after:            Wed 24 Jan 2024 03:00:00 +0000
asID:                     14080
IP address blocks:        181.54.162.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 23 Jan 2024 07:30:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1575943 (0x180c07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Jan 24 03:00:00 2022 GMT
            Not After : Jan 24 03:00:00 2024 GMT
        Subject: CN=60a7d0694fed602232ccf4dfc3599183a10cc3bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:82:c1:c5:8d:85:cf:b2:f7:9a:e9:30:56:ab:
                    ce:5d:4a:c2:e2:68:6a:4d:0b:9c:34:bc:00:13:31:
                    cc:d4:83:96:a4:01:6b:93:c8:3c:39:58:90:5f:74:
                    89:b4:98:e5:2a:9d:0f:e8:81:f5:b6:55:f9:c5:a0:
                    f5:44:c2:6d:83:0c:7f:c1:82:1c:f0:13:ae:4c:c3:
                    cb:0d:8d:11:de:36:9a:b0:6b:37:05:ce:d9:c3:24:
                    41:33:bb:cc:a3:53:3a:fe:a6:dd:ea:06:45:10:7e:
                    84:ef:35:b8:c2:b4:8d:e9:4b:d4:da:70:e8:09:f8:
                    6c:a3:2f:9b:58:f5:c4:40:50:9e:d0:db:c1:4e:2e:
                    f5:26:09:10:33:57:43:dc:da:8d:a9:dc:1a:b3:6a:
                    65:ba:78:a1:60:cb:dd:04:f4:58:30:cc:3c:52:aa:
                    f5:b6:fe:22:a3:cc:e0:aa:a0:c2:b2:84:8c:f5:e1:
                    90:e8:fa:7f:ea:5c:b7:cd:42:55:14:fe:c9:07:79:
                    6e:5f:79:aa:ec:8c:20:c2:82:e4:a9:49:fe:ec:2d:
                    47:98:ba:62:d0:42:18:68:32:d8:e0:34:a3:6d:d5:
                    a1:51:3b:cd:a1:4c:24:f2:59:ad:46:6d:61:a5:76:
                    b9:be:30:be:1e:20:65:13:c2:6e:84:46:d6:fe:d7:
                    f2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:AE:6F:A0:39:1F:E7:0D:47:17:88:EE:0E:FB:3E:A0:CD:34:4D:70
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/60a7d0694fed602232ccf4dfc3599183a10cc3bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.54.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:84:1c:5c:90:95:ea:23:90:7e:eb:02:75:d3:5f:d4:8e:61:
         f6:bc:6a:b2:80:97:11:f7:74:a2:42:2b:a4:98:25:f6:82:13:
         36:27:32:41:63:7e:8d:77:7e:25:2d:0d:f4:4b:9a:22:15:64:
         68:4e:01:c2:32:66:d0:80:46:82:77:f6:2d:4f:be:f4:4c:86:
         b5:9c:8d:53:92:66:b6:6e:15:d5:d0:8c:a7:49:2d:be:49:ee:
         3f:e6:87:be:af:34:ef:00:1c:68:83:88:35:be:01:75:e8:8a:
         86:99:13:d1:b3:0c:b8:3b:09:76:fe:bb:b8:8b:64:5f:36:b5:
         ae:30:67:b3:d7:e8:66:aa:81:0c:a9:33:a1:6a:e9:a1:cc:61:
         8a:bc:47:4a:cc:67:41:44:78:59:eb:02:d9:14:d5:dc:e2:a7:
         ae:3b:15:ea:5d:0e:25:c0:35:c5:b0:59:30:0a:b3:bc:8a:38:
         38:ea:86:0a:25:5a:7a:80:32:40:8b:db:6b:fa:e7:2a:10:64:
         b3:b8:5c:74:56:b6:93:67:13:09:a8:c5:12:80:65:ef:01:07:
         d6:41:7c:6c:6a:a5:5b:ae:8b:50:33:b8:87:52:db:b5:95:c6:
         33:40:10:0f:19:c6:9d:21:0c:ba:6f:c6:33:f7:1e:9b:d8:aa:
         3b:d3:eb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 23 12:11:37 2024 by rpki-client on console-ams.rpki-client.org