Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0a1754b1-521f-44fb-a4f8-9929ee552e2e/c16b39aa81d18ae45f18a56dc2ae0ef17676815c.roa
File:                     c16b39aa81d18ae45f18a56dc2ae0ef17676815c.roa (raw, json)
Hash identifier:          MbltVm0u4arQgbMHIA4ETr/aosKOX0uNARI24KHmFsk=
Subject key identifier:   88:53:D4:DF:B7:1E:31:4D:BB:BB:FE:21:CD:A1:B5:5A:08:FF:29:47
Certificate issuer:       /CN=c8c59d2967ce698ceab49f8ca58b384c5945c526
Certificate serial:       03C6
Authority key identifier: 14:56:46:EF:81:44:06:74:79:77:4B:F8:FD:28:D3:EA:A0:24:45:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c8c59d2967ce698ceab49f8ca58b384c5945c526.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0a1754b1-521f-44fb-a4f8-9929ee552e2e/c16b39aa81d18ae45f18a56dc2ae0ef17676815c.roa
Signing time:             Thu 10 Feb 2022 17:47:01 +0000
ROA not before:           Thu 10 Feb 2022 03:00:00 +0000
ROA not after:            Sat 10 Feb 2024 03:00:00 +0000
asID:                     272024
IP address blocks:        181.189.24.0/23 maxlen: 23
                          181.189.26.0/24 maxlen: 24
                          2803:2510::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 966 (0x3c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c59d2967ce698ceab49f8ca58b384c5945c526
        Validity
            Not Before: Feb 10 03:00:00 2022 GMT
            Not After : Feb 10 03:00:00 2024 GMT
        Subject: CN=c16b39aa81d18ae45f18a56dc2ae0ef17676815c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8b:65:e1:8e:89:6a:3f:f8:4e:92:3b:af:bb:
                    9d:40:5c:63:e9:18:16:63:43:ea:db:c6:a8:3f:d0:
                    05:b0:41:e1:a9:36:68:72:1a:1b:19:01:8b:72:e6:
                    a8:62:b2:4b:8f:b1:b9:39:b8:c7:9e:6b:af:10:e3:
                    e0:27:26:88:91:ee:bc:10:81:c6:9f:df:3b:35:21:
                    b5:f9:83:25:57:4d:ca:55:7d:47:88:9c:a6:ea:9e:
                    8e:aa:70:bc:5f:2f:61:53:da:84:47:c6:60:4e:f7:
                    eb:13:2b:1d:ba:8b:fb:99:9e:ad:82:c7:cf:30:7a:
                    a0:67:c9:17:f0:50:c5:10:d3:06:5b:08:52:e2:25:
                    7d:3d:d4:e7:62:3a:ea:9b:35:5b:c8:4c:87:e8:dc:
                    e1:41:b6:a2:a6:3e:47:17:9e:34:87:c2:af:3b:b1:
                    7a:6d:36:3f:4d:d4:38:33:dd:43:af:51:69:1d:7a:
                    56:a6:d4:97:2b:c2:93:9d:ed:c4:2c:1d:7b:72:89:
                    b8:df:7a:90:b8:8f:f0:a9:9c:c8:69:74:41:b0:e5:
                    cd:62:96:88:3f:7e:7a:95:a2:ec:2e:1d:de:3e:a1:
                    ed:64:b5:57:24:18:58:37:de:f0:72:81:b7:65:c8:
                    ac:c8:ed:3e:e6:7d:88:a2:e1:e3:7a:80:95:99:25:
                    8b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:53:D4:DF:B7:1E:31:4D:BB:BB:FE:21:CD:A1:B5:5A:08:FF:29:47
            X509v3 Authority Key Identifier:
                keyid:14:56:46:EF:81:44:06:74:79:77:4B:F8:FD:28:D3:EA:A0:24:45:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c8c59d2967ce698ceab49f8ca58b384c5945c526.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0a1754b1-521f-44fb-a4f8-9929ee552e2e/c16b39aa81d18ae45f18a56dc2ae0ef17676815c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0a1754b1-521f-44fb-a4f8-9929ee552e2e/c8c59d2967ce698ceab49f8ca58b384c5945c526.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.24.0-181.189.26.255
                IPv6:
                  2803:2510::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:da:67:24:5c:3a:c6:54:9d:54:f1:68:0d:1e:cf:8a:d7:71:
         03:be:19:bd:7f:97:17:c1:0f:be:45:30:d9:81:ae:7d:da:89:
         fb:07:26:e3:b2:45:18:a8:5b:94:2d:c6:8a:8a:d0:c9:1b:bd:
         62:44:85:9f:73:45:83:26:f6:b8:df:23:03:43:04:28:ff:81:
         0e:18:62:8c:3d:7e:4f:5a:c9:5f:d9:c6:45:80:36:79:63:f4:
         41:84:b8:a3:85:d7:8f:91:9a:4f:43:7e:05:7c:21:10:a5:b3:
         6c:cc:1a:83:5c:9a:42:c0:12:ad:1c:67:bd:73:20:b2:b3:00:
         1b:65:30:82:b3:96:3c:6a:f0:c2:50:68:cd:dc:1d:07:f9:7b:
         78:bc:6b:15:c8:68:5d:81:ec:6f:0f:9b:3e:20:07:46:9f:95:
         81:48:33:71:a9:4b:d5:4b:d6:4a:e6:47:48:11:88:09:44:2e:
         e5:e6:5f:43:fe:24:21:8c:19:ad:d4:9f:55:cd:fa:86:3c:eb:
         db:9f:07:85:ff:ce:da:3a:9a:76:86:3b:b1:b2:b5:1b:cf:45:
         92:df:52:a5:c3:4c:77:5c:a6:82:db:af:06:86:ad:46:b2:e2:
         5b:49:3e:d3:24:ec:53:b1:ad:27:86:33:d8:3d:a2:93:97:4c:
         49:19:21:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-ams.rpki-client.org