Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/ed1920c654e44f26bb52f6b3e353c60358ce3b30.roa
File:                     ed1920c654e44f26bb52f6b3e353c60358ce3b30.roa (raw, json)
Hash identifier:          zRKXjHpiPhFhmDyojBUmTyx+Z9t/V6thzeGnbebVM1o=
Subject key identifier:   4E:6F:EA:FE:93:AC:D5:D7:B2:C2:79:9C:00:74:A8:DC:EF:4A:B3:C8
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       2055ED
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/ed1920c654e44f26bb52f6b3e353c60358ce3b30.roa
Signing time:             Mon 21 Nov 2022 16:45:32 +0000
ROA not before:           Tue 16 Nov 2021 03:00:00 +0000
ROA not after:            Thu 18 Nov 2060 03:00:00 +0000
asID:                     14080
IP address blocks:        186.82.62.0/23 maxlen: 23
                          190.158.112.0/22 maxlen: 24
                          201.221.164.0/22 maxlen: 24
                          201.216.12.0/22 maxlen: 24
                          190.84.115.0/24 maxlen: 24
                          200.118.96.0/22 maxlen: 24
                          200.118.187.0/24 maxlen: 24
                          200.118.198.0/24 maxlen: 24
                          200.118.194.0/24 maxlen: 24
                          190.157.0.0/16 maxlen: 24
                          181.53.69.0/24 maxlen: 24
                          181.53.70.0/24 maxlen: 24
                          181.53.71.0/24 maxlen: 24
                          181.59.44.0/24 maxlen: 24
                          181.59.45.0/24 maxlen: 24
                          181.59.46.0/24 maxlen: 24
                          181.59.47.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2119149 (0x2055ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Nov 16 03:00:00 2021 GMT
            Not After : Nov 18 03:00:00 2060 GMT
        Subject: CN=ed1920c654e44f26bb52f6b3e353c60358ce3b30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:07:e7:be:a5:a2:3d:67:64:fb:ac:c1:ad:3a:
                    30:a7:b3:e7:eb:6d:b0:26:d0:88:6a:55:39:e6:e1:
                    b3:39:44:91:c6:64:f6:dc:39:45:1e:df:de:cb:62:
                    d5:36:f3:6d:ec:a9:06:b5:9d:85:08:4a:25:a6:cd:
                    7e:a9:f5:59:16:02:a1:bc:89:09:e7:08:00:ec:f8:
                    ee:02:e8:98:57:4b:66:81:98:f4:09:de:06:2b:28:
                    ff:99:6f:b7:dc:92:ad:23:e4:f8:ee:5f:3d:39:57:
                    8a:1d:db:69:4b:10:16:4d:0a:d0:94:cc:46:63:35:
                    32:23:16:4f:36:dd:c4:42:0b:ee:74:eb:a6:49:58:
                    20:25:3a:91:bc:e3:e7:77:2f:b7:4a:5f:69:47:4b:
                    81:b1:1c:5c:74:61:70:e6:45:b2:fc:09:b2:64:5e:
                    c4:c0:43:59:44:cb:d3:2f:34:08:4d:3b:57:08:49:
                    a4:57:27:a0:04:3e:4a:93:01:44:ae:b7:d2:fe:8f:
                    8e:ed:f9:e9:30:d7:85:4e:c0:1d:ac:bb:bf:71:6e:
                    56:bd:a5:3a:c7:cc:c1:13:c2:ef:3b:68:ee:f8:1c:
                    70:41:07:66:82:8b:ce:c2:eb:88:f8:b8:85:f9:78:
                    6d:84:90:ae:2d:ce:c0:1a:3b:62:e6:75:f8:b0:c0:
                    86:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:6F:EA:FE:93:AC:D5:D7:B2:C2:79:9C:00:74:A8:DC:EF:4A:B3:C8
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/ed1920c654e44f26bb52f6b3e353c60358ce3b30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.53.69.0-181.53.71.255
                  181.59.44.0/22
                  186.82.62.0/23
                  190.84.115.0/24
                  190.157.0.0/16
                  190.158.112.0/22
                  200.118.96.0/22
                  200.118.187.0/24
                  200.118.194.0/24
                  200.118.198.0/24
                  201.216.12.0/22
                  201.221.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:da:53:2e:8c:f2:6a:af:68:a6:00:58:2f:9b:88:26:82:17:
         fd:c1:74:94:3f:34:c2:c5:4e:1b:e8:4b:35:6b:5d:f4:84:b1:
         1d:54:a8:93:38:ad:9a:5a:d2:8b:dd:de:a4:01:46:98:90:22:
         41:fd:e3:04:aa:7f:37:be:56:96:82:e3:75:34:87:de:c0:19:
         16:99:91:dc:1a:c6:76:e4:e3:41:1f:23:cc:26:0a:88:bc:e0:
         73:01:6d:72:80:d8:74:c4:9e:e2:77:f8:63:ff:60:c7:ee:af:
         d3:7f:fe:46:9a:cd:f2:e0:ba:31:71:bf:45:a2:eb:c6:2a:22:
         84:4b:36:e5:9b:af:20:f7:a5:77:1e:3e:1f:f5:ee:bb:56:69:
         40:f1:13:d3:df:5f:6c:62:07:b6:ce:51:95:cb:de:d6:ab:d2:
         19:b0:0f:1b:28:35:95:25:87:5b:55:4b:83:12:50:e0:38:c2:
         15:ed:6d:ea:8b:48:3d:4c:e0:ec:bf:a0:09:bc:fb:c0:fd:84:
         08:0f:0d:ce:47:76:3d:3b:84:5a:f4:15:b2:83:b4:28:2e:2a:
         02:b9:96:b4:67:c8:99:8a:e1:fb:1e:af:c4:fe:a6:c9:0a:d3:
         17:f1:c0:28:38:01:65:e7:21:c8:51:a5:dc:a4:5b:cd:65:4c:
         af:a8:6e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:22 2023 by rpki-client on console-ams.rpki-client.org