Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/310397449dc510050cb893e8d4f1ca04f630699b.roa
File:                     310397449dc510050cb893e8d4f1ca04f630699b.roa (raw, json)
Hash identifier:          pgolvilyNR2Rzplne2VElyf2Jp3bsKY9odEDRsdriWw=
Subject key identifier:   9A:25:45:C1:7E:EF:A4:01:AF:E3:E7:43:1C:C3:F7:B4:A4:82:1D:D4
Certificate issuer:       /CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
Certificate serial:       13EB12
Authority key identifier: ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/310397449dc510050cb893e8d4f1ca04f630699b.roa
Signing time:             Wed 09 Feb 2022 23:21:47 +0000
ROA not before:           Thu 23 Dec 2021 03:00:00 +0000
ROA not after:            Mon 23 Dec 2030 03:00:00 +0000
asID:                     27932
IP address blocks:        181.79.224.0/19 maxlen: 19
                          181.79.224.0/24 maxlen: 24
                          181.79.225.0/24 maxlen: 24
                          181.79.226.0/24 maxlen: 24
                          181.79.227.0/24 maxlen: 24
                          181.79.228.0/24 maxlen: 24
                          181.79.229.0/24 maxlen: 24
                          181.79.230.0/24 maxlen: 24
                          181.79.231.0/24 maxlen: 24
                          181.79.232.0/24 maxlen: 24
                          181.79.233.0/24 maxlen: 24
                          181.79.234.0/24 maxlen: 24
                          181.79.235.0/24 maxlen: 24
                          181.79.236.0/24 maxlen: 24
                          181.79.237.0/24 maxlen: 24
                          181.79.238.0/24 maxlen: 24
                          181.79.239.0/24 maxlen: 24
                          181.79.240.0/24 maxlen: 24
                          181.79.241.0/24 maxlen: 24
                          181.79.242.0/24 maxlen: 24
                          181.79.243.0/24 maxlen: 24
                          181.79.244.0/24 maxlen: 24
                          181.79.245.0/24 maxlen: 24
                          181.79.246.0/24 maxlen: 24
                          181.79.247.0/24 maxlen: 24
                          181.79.248.0/24 maxlen: 24
                          181.79.249.0/24 maxlen: 24
                          181.79.250.0/24 maxlen: 24
                          181.79.251.0/24 maxlen: 24
                          181.79.252.0/24 maxlen: 24
                          181.79.253.0/24 maxlen: 24
                          181.79.254.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1305362 (0x13eb12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
        Validity
            Not Before: Dec 23 03:00:00 2021 GMT
            Not After : Dec 23 03:00:00 2030 GMT
        Subject: CN=310397449dc510050cb893e8d4f1ca04f630699b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:85:3b:19:5c:99:bf:99:68:9b:59:0a:08:e1:
                    e6:cb:5e:bb:5c:38:97:e6:c8:7f:17:82:46:15:14:
                    22:6d:3d:f8:bd:3e:e8:22:e1:2c:af:2b:c8:57:30:
                    65:69:c7:0e:d0:67:b9:9f:a5:3e:15:62:b6:56:c8:
                    a8:91:00:58:f9:e4:9f:8c:37:5f:1a:44:90:71:52:
                    e8:cc:1e:6b:5a:b2:27:32:ee:a7:91:2b:a3:48:86:
                    9a:c1:59:e9:b6:b2:3a:a7:33:72:02:da:a9:06:78:
                    79:52:b7:b4:ea:b5:f8:ea:34:5d:81:f1:17:bc:89:
                    8e:4a:dd:f1:81:d9:b0:75:78:90:55:90:6f:69:81:
                    31:44:62:f4:36:49:3d:77:91:64:8a:a0:ce:7b:ea:
                    53:99:18:f0:50:23:e4:e1:da:06:8c:33:b0:a3:2c:
                    7b:c6:d5:63:82:a5:96:6a:b4:eb:f9:a2:30:b9:40:
                    9f:9f:c0:fb:3f:c4:df:60:20:e0:85:7f:48:26:21:
                    f3:e2:24:22:61:c5:a6:48:ba:8c:ea:21:b2:fb:50:
                    c1:1f:1d:e8:c3:b1:54:eb:e9:72:9e:7a:a4:aa:04:
                    5c:f9:5d:73:09:bf:73:80:01:5d:60:c5:ae:81:fb:
                    4f:18:19:f8:4f:ed:0f:03:64:ad:f7:38:34:61:b1:
                    ba:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:25:45:C1:7E:EF:A4:01:AF:E3:E7:43:1C:C3:F7:B4:A4:82:1D:D4
            X509v3 Authority Key Identifier:
                keyid:ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/310397449dc510050cb893e8d4f1ca04f630699b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/c2cfc3212455464cd8f856a348b2d5caf73dcd73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.79.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         32:b6:e8:fc:2f:dd:de:5a:ce:17:88:91:33:e1:17:2f:c0:05:
         7d:6b:c9:64:c1:d0:40:17:d6:bd:bb:be:81:7c:ab:94:7e:3e:
         4f:20:0d:e0:bd:a0:23:fe:56:e1:55:43:dc:10:7b:8c:3b:44:
         a0:6f:04:fd:6e:04:e3:f9:0b:e7:5f:4f:ff:fa:9f:b0:15:5d:
         dc:9b:31:1d:fa:72:79:73:86:f0:43:60:57:6c:e2:1b:1b:dd:
         fa:5c:e7:71:93:de:d3:24:7f:84:2e:28:88:04:79:2c:e2:b9:
         5d:e9:78:8d:a5:0a:9d:4e:a4:94:e1:02:7c:4d:70:ac:9e:f1:
         2e:71:b4:a0:97:c6:80:e1:01:5c:41:84:60:6f:d7:d2:bf:d1:
         6d:f2:92:21:71:2d:fd:98:15:7c:95:9e:17:d4:ea:39:28:e2:
         fa:6e:6c:32:a9:02:90:ea:d7:5e:87:32:46:ce:32:47:73:1e:
         96:5c:d1:8b:d1:27:81:14:d2:62:b7:80:a5:39:fa:2c:8a:f1:
         3b:5a:8c:75:da:1b:a5:7f:fd:95:89:d6:15:7a:fa:59:1a:ca:
         f2:25:57:af:60:93:6a:c4:76:06:c1:27:a7:f6:4a:8d:b3:18:
         85:9b:7d:85:10:67:b7:fd:54:b6:f1:d5:0f:7b:bb:f2:51:66:
         15:1f:58:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:24 2023 by rpki-client on console-ams.rpki-client.org