Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0fcffc85-d48b-4191-b53d-96c1bc8b7318/a8cf171dffb8d027d26b3e689b8705642c614b88.roa
File:                     a8cf171dffb8d027d26b3e689b8705642c614b88.roa (raw, json)
Hash identifier:          jP7Rlgesilq5epCA1HgGOGrmkKvBAM7cqnmPXG/CDLI=
Subject key identifier:   B5:3B:19:63:8F:C9:25:90:DC:C7:C4:A0:12:E7:9A:46:1B:76:E5:52
Certificate issuer:       /CN=b825aea653e97a291ec1350029e2e92dfa3c3746
Certificate serial:       1027
Authority key identifier: 76:2A:EA:61:EA:DD:F2:8C:6B:1E:CE:73:79:7A:C1:27:3D:E9:09:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b825aea653e97a291ec1350029e2e92dfa3c3746.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0fcffc85-d48b-4191-b53d-96c1bc8b7318/a8cf171dffb8d027d26b3e689b8705642c614b88.roa
Signing time:             Wed 15 Jun 2022 14:42:28 +0000
ROA not before:           Wed 15 Jun 2022 03:00:00 +0000
ROA not after:            Sat 15 Jun 2024 03:00:00 +0000
asID:                     269997
IP address blocks:        181.192.101.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4135 (0x1027)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b825aea653e97a291ec1350029e2e92dfa3c3746
        Validity
            Not Before: Jun 15 03:00:00 2022 GMT
            Not After : Jun 15 03:00:00 2024 GMT
        Subject: CN=a8cf171dffb8d027d26b3e689b8705642c614b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:02:01:4d:05:ea:16:c2:30:31:23:0e:28:c3:
                    3c:a8:37:a2:85:77:71:eb:56:19:0e:c5:7f:db:24:
                    89:b3:fc:ce:b7:bc:1d:53:e9:7a:81:cf:8e:fe:3c:
                    6c:e6:e8:34:f3:87:7b:f1:b7:73:1c:21:3e:44:ab:
                    7f:03:81:8d:3f:9b:87:9d:70:00:66:0d:7d:d8:72:
                    af:f3:72:69:81:e1:47:60:81:21:aa:cd:b5:6e:53:
                    f6:b5:62:52:ce:ab:8a:7c:5f:ac:aa:44:fb:25:91:
                    ad:98:8c:8f:b7:6e:72:fa:28:c8:06:78:2d:f7:46:
                    7e:10:19:c1:39:4d:fb:a8:5d:ac:f3:fb:1b:e6:6f:
                    17:14:55:02:a6:2e:40:4d:1d:25:9a:90:ff:b0:da:
                    1b:aa:08:4c:69:dc:c5:62:a1:df:9d:cc:ac:fb:1d:
                    db:23:70:af:09:2a:de:71:e8:c9:7a:cb:ed:72:46:
                    82:56:4f:0b:5e:20:fe:0b:69:50:32:c0:cd:e4:e2:
                    93:04:34:84:d2:c2:6b:cb:bf:58:10:a0:64:77:8a:
                    b3:9f:98:c2:6a:80:94:97:ce:ef:31:42:6d:35:0f:
                    37:50:9e:4c:de:ea:c0:da:72:b6:34:d7:98:b3:6e:
                    d4:48:d9:4b:68:7e:13:0a:40:0e:70:00:b9:da:ba:
                    48:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:3B:19:63:8F:C9:25:90:DC:C7:C4:A0:12:E7:9A:46:1B:76:E5:52
            X509v3 Authority Key Identifier:
                keyid:76:2A:EA:61:EA:DD:F2:8C:6B:1E:CE:73:79:7A:C1:27:3D:E9:09:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b825aea653e97a291ec1350029e2e92dfa3c3746.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0fcffc85-d48b-4191-b53d-96c1bc8b7318/a8cf171dffb8d027d26b3e689b8705642c614b88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0fcffc85-d48b-4191-b53d-96c1bc8b7318/b825aea653e97a291ec1350029e2e92dfa3c3746.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.192.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:16:69:bc:5e:2b:89:ed:cf:37:61:f5:5c:5c:0d:5e:fc:d6:
         11:9e:09:26:78:9f:07:e4:40:71:3a:ed:11:98:1e:11:8b:ae:
         41:c6:91:bf:46:98:38:a2:de:4c:79:a3:39:39:7b:7a:79:3d:
         95:b3:ce:54:ef:d3:cb:1c:4b:cb:90:18:e5:b1:76:0a:75:df:
         a6:8c:82:a1:3b:ca:59:35:d0:19:5a:f1:a5:b4:82:af:50:05:
         06:cc:65:65:98:37:9b:8e:9e:0a:fc:82:98:c8:10:08:f9:f0:
         60:a0:8b:2d:8d:69:42:14:58:1e:b8:99:54:4e:39:30:73:48:
         e0:01:26:13:da:45:80:83:2e:5e:31:f2:eb:99:96:66:73:e9:
         9d:a2:2a:2d:4d:2a:f9:8e:af:d1:d3:a6:7a:ac:fd:68:16:60:
         f2:e9:26:28:6f:e7:80:51:53:91:b4:0b:2a:2a:1f:24:31:3e:
         65:1d:cc:86:cf:2b:b8:8e:90:82:f6:1a:fe:a2:e5:fb:be:ab:
         4e:db:90:4a:fe:f9:25:62:39:8d:de:24:4c:8c:1f:46:ff:7b:
         7d:4d:36:d8:51:18:ce:b5:b5:72:c7:43:14:e3:b3:de:01:af:
         66:ed:b5:57:ed:fc:c4:25:f8:01:3d:57:8f:d1:ff:e8:3c:16:
         66:4d:a5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 19 20:55:48 2023 by rpki-client on console-ams.rpki-client.org