Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/01736cf5052bc32783807c012496be989c0cf898.roa
File:                     01736cf5052bc32783807c012496be989c0cf898.roa (raw, json)
Hash identifier:          6GgFy5LAHoe/7jdDilMZMpkZx7hkTWh6g9mszah6mtM=
Subject key identifier:   F0:7F:6F:F9:27:4B:61:56:59:C7:4E:C6:95:E5:F5:4A:F6:91:5B:39
Certificate issuer:       /CN=5b7dbb1482b4705c4115f4698d018750070bcecb
Certificate serial:       08B08C
Authority key identifier: 2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/01736cf5052bc32783807c012496be989c0cf898.roa
Signing time:             Wed 28 Sep 2022 01:01:55 +0000
ROA not before:           Wed 22 Jun 2022 03:00:00 +0000
ROA not after:            Wed 30 Apr 2025 03:00:00 +0000
asID:                     11830
IP address blocks:        181.224.72.0/24 maxlen: 24
                          181.224.73.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 569484 (0x8b08c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7dbb1482b4705c4115f4698d018750070bcecb
        Validity
            Not Before: Jun 22 03:00:00 2022 GMT
            Not After : Apr 30 03:00:00 2025 GMT
        Subject: CN=01736cf5052bc32783807c012496be989c0cf898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1f:66:65:1b:79:22:bd:09:7b:66:8f:ce:63:
                    ee:c6:86:84:86:61:96:f2:0e:de:44:d0:57:e6:83:
                    4e:f6:28:27:e7:01:30:25:af:e0:91:a6:6a:bd:19:
                    e4:16:c9:69:47:1a:54:4c:33:7c:e8:7f:bb:53:37:
                    3d:f8:91:20:7d:8f:9e:62:23:02:99:60:11:b4:e0:
                    ce:76:5c:25:b3:96:08:ee:32:bb:1b:de:8c:78:02:
                    a7:a5:af:2e:65:db:cc:3f:57:20:c8:b4:67:bb:5a:
                    bc:68:71:4a:fb:7e:25:8f:5f:d0:73:c2:ce:8c:ff:
                    b9:fd:99:4b:e6:f2:e4:3c:36:6e:61:53:c5:44:e9:
                    87:ad:fa:07:fd:a7:58:55:08:06:76:f0:1c:dc:b3:
                    df:c7:a9:ec:0f:70:36:6e:e4:da:5c:c4:33:7e:35:
                    5b:6a:b8:db:0e:e8:07:f5:cb:ae:1d:60:64:31:b8:
                    4b:28:9e:0f:0c:b8:f2:44:1c:50:87:3d:31:30:a2:
                    6c:c9:87:1d:fd:4e:ed:4f:bf:53:7b:58:5b:e9:3a:
                    66:a6:22:b2:d2:ec:8a:4f:d5:50:f3:45:5a:81:2c:
                    3e:98:c9:46:24:fa:05:1c:8d:88:26:ea:c4:68:6a:
                    00:92:46:07:b2:f7:91:ed:81:ae:58:e3:02:53:5e:
                    4a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:7F:6F:F9:27:4B:61:56:59:C7:4E:C6:95:E5:F5:4A:F6:91:5B:39
            X509v3 Authority Key Identifier:
                keyid:2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/01736cf5052bc32783807c012496be989c0cf898.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/5b7dbb1482b4705c4115f4698d018750070bcecb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:8e:a5:15:e9:48:d8:72:e9:26:e3:f9:ae:da:6b:e3:cc:52:
         f1:c1:9a:8a:1e:13:c6:d1:a3:10:b1:83:5d:8b:92:cd:c8:f8:
         60:df:46:88:89:de:88:9a:1c:9d:2e:d1:33:79:d4:fd:18:d1:
         cc:e8:5e:ba:ad:27:09:da:90:4e:61:66:09:e0:64:62:bf:65:
         7a:38:fd:24:11:18:7b:e2:21:15:87:2d:6f:13:f6:d9:98:d8:
         e1:5d:bf:df:8b:9a:7f:01:11:b7:90:d9:fa:9a:d5:16:ae:af:
         99:8f:26:8a:3a:e5:01:0b:41:69:2b:64:9b:8d:e7:84:89:63:
         a6:c6:bc:ce:18:9e:89:1f:61:81:f3:cb:cd:b8:2d:79:72:d8:
         72:19:54:d8:88:b5:3b:e5:fd:ac:20:cc:a0:da:17:cf:d9:17:
         48:97:0a:e7:8e:d0:45:4e:89:58:aa:60:a3:91:29:1e:de:8d:
         66:13:67:b2:31:75:db:ab:b9:ba:15:dd:59:1c:55:4c:19:f8:
         8a:bd:e5:3d:09:79:74:14:1f:3c:11:55:7e:47:91:89:42:2c:
         f3:78:66:d6:b8:c1:c2:44:30:5c:cb:e4:1b:1a:22:32:d8:e3:
         8f:cb:71:ac:f0:db:76:78:6f:61:1f:12:ab:7b:15:f0:2b:1e:
         91:97:8c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:15 2023 by rpki-client on console-fra.rpki-client.org