Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1a02b285-93ee-4c12-90af-d6289819d670/b6b3456bd3d8cdd3c96f0698311f2b9c93ca75db.roa
File:                     b6b3456bd3d8cdd3c96f0698311f2b9c93ca75db.roa (raw, json)
Hash identifier:          ydc8nihCuI2Drzi/B9bQ+Jo3DjTli2ms0U8XoK3KgDs=
Subject key identifier:   77:FA:4D:E9:05:0D:86:DF:FF:00:4A:56:53:10:F7:57:CF:9B:1E:FB
Certificate issuer:       /CN=f3df8538662f3c792fbb0559315226c5b8695024
Certificate serial:       03C843
Authority key identifier: E5:59:36:32:80:35:F5:26:9C:5A:92:03:89:A6:24:44:62:DA:AC:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3df8538662f3c792fbb0559315226c5b8695024.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1a02b285-93ee-4c12-90af-d6289819d670/b6b3456bd3d8cdd3c96f0698311f2b9c93ca75db.roa
Signing time:             Fri 08 Apr 2022 03:57:31 +0000
ROA not before:           Fri 08 Apr 2022 03:00:00 +0000
ROA not after:            Mon 08 Apr 2024 03:00:00 +0000
asID:                     271935
IP address blocks:        181.232.191.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247875 (0x3c843)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3df8538662f3c792fbb0559315226c5b8695024
        Validity
            Not Before: Apr  8 03:00:00 2022 GMT
            Not After : Apr  8 03:00:00 2024 GMT
        Subject: CN=b6b3456bd3d8cdd3c96f0698311f2b9c93ca75db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4c:e3:8d:37:25:c9:a0:d3:ce:ac:45:48:b7:
                    dc:51:cf:96:a5:e1:f4:53:4a:d7:6b:56:0f:af:95:
                    48:6e:b0:4d:d0:20:0a:e2:3b:4d:b1:73:6e:1a:f3:
                    50:9c:b2:48:da:09:83:2a:d3:dd:bb:51:5f:40:84:
                    0e:68:6b:a0:ae:c3:6e:dd:d2:ab:ab:2f:4e:03:80:
                    5b:1c:da:c1:6a:ce:59:e2:06:34:0f:44:8e:f7:18:
                    30:66:5b:f7:4d:ae:0a:94:d7:8c:db:4b:61:1e:8d:
                    fa:45:ee:8f:fb:d3:fb:da:c6:1d:62:bc:7b:19:ec:
                    4d:af:75:d7:46:69:78:d1:5a:d3:ea:ec:9c:06:2b:
                    73:95:08:90:c8:cc:2a:34:7b:24:47:0b:69:4d:e9:
                    8c:d5:55:66:bd:3a:00:e4:3f:d3:a4:0f:29:fc:d7:
                    2e:22:5f:3f:5e:3e:c0:c7:13:8b:3a:1b:35:91:fc:
                    75:25:91:77:4e:c0:6b:ce:89:2d:f0:dc:bb:7a:62:
                    db:70:44:dc:8b:de:2c:03:00:aa:c3:a2:84:8a:6d:
                    96:f3:45:3a:53:42:f7:d4:03:fb:8d:1f:1b:71:54:
                    ce:ef:18:29:68:e5:90:69:4c:50:7f:91:05:95:3a:
                    ac:e7:05:20:28:6a:ee:03:fb:1b:6e:c1:db:a1:fe:
                    6c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:FA:4D:E9:05:0D:86:DF:FF:00:4A:56:53:10:F7:57:CF:9B:1E:FB
            X509v3 Authority Key Identifier:
                keyid:E5:59:36:32:80:35:F5:26:9C:5A:92:03:89:A6:24:44:62:DA:AC:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3df8538662f3c792fbb0559315226c5b8695024.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1a02b285-93ee-4c12-90af-d6289819d670/b6b3456bd3d8cdd3c96f0698311f2b9c93ca75db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1a02b285-93ee-4c12-90af-d6289819d670/f3df8538662f3c792fbb0559315226c5b8695024.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:a7:14:5c:1c:de:9c:70:5a:a9:16:ee:f6:d6:60:36:39:9b:
         2f:a1:b0:1c:cd:24:44:00:16:a1:d0:c3:4a:37:93:6f:35:99:
         4c:82:32:db:68:8d:4e:28:d9:32:db:7b:c5:52:b9:80:f6:4d:
         3b:b3:90:4b:ce:5c:7f:b7:0e:60:b0:dd:47:55:39:15:10:71:
         e2:ef:56:25:9b:b9:6b:13:e2:48:04:93:17:a7:c3:6a:07:87:
         ac:fe:5b:34:6a:26:b6:a1:5f:47:1e:0c:02:14:48:51:0d:0c:
         87:00:56:8a:00:93:4c:1b:6b:a0:05:78:4b:a5:64:96:af:40:
         b9:52:70:cc:47:0c:a2:cd:41:a7:42:b7:4f:b5:ae:20:3a:04:
         83:af:7b:0b:5a:f6:ae:d2:fe:a6:6a:43:e6:d5:75:71:bf:d8:
         d7:d1:31:c5:e1:9b:07:3e:e8:d0:db:65:12:35:26:36:9b:62:
         72:c9:21:20:c7:09:c1:d5:7a:13:38:b9:40:9f:19:91:81:1b:
         39:a7:6d:9d:00:5f:79:f5:8e:84:18:f7:2f:2f:2d:92:33:43:
         38:a4:a4:1e:c5:f3:ec:38:ee:23:e3:e6:a3:40:e7:2e:e3:28:
         f1:c4:91:de:c2:80:23:a1:de:93:d2:dc:9d:85:90:84:44:2b:
         4e:57:6e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:10 2023 by rpki-client on console-fra.rpki-client.org