Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/9f78fb37d5ec71cbc21f30f7a457127c7cbdcd8c.roa
File:                     9f78fb37d5ec71cbc21f30f7a457127c7cbdcd8c.roa (raw, json)
Hash identifier:          xz8m3eK3Eo34GDShjBOw4xRIeJPN0TZ4oai0J5lXhiA=
Subject key identifier:   81:A2:6B:6A:C0:87:24:C7:CC:E0:2E:2E:4C:B6:9C:3B:7E:90:3B:85
Certificate issuer:       /CN=5b7dbb1482b4705c4115f4698d018750070bcecb
Certificate serial:       06A65B
Authority key identifier: 2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/9f78fb37d5ec71cbc21f30f7a457127c7cbdcd8c.roa
Signing time:             Tue 26 Jul 2022 16:59:28 +0000
ROA not before:           Tue 26 Jul 2022 03:00:00 +0000
ROA not after:            Wed 30 Apr 2025 03:00:00 +0000
asID:                     3790
IP address blocks:        181.224.74.0/24 maxlen: 27
                          181.224.74.0/24 maxlen: 29
                          181.224.74.0/24 maxlen: 30

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 435803 (0x6a65b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7dbb1482b4705c4115f4698d018750070bcecb
        Validity
            Not Before: Jul 26 03:00:00 2022 GMT
            Not After : Apr 30 03:00:00 2025 GMT
        Subject: CN=9f78fb37d5ec71cbc21f30f7a457127c7cbdcd8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:74:2f:6d:27:ad:ea:f1:99:04:24:f1:b9:9d:
                    38:74:92:e4:33:93:9c:f2:7e:da:7f:57:32:e9:e9:
                    e1:15:41:e0:99:b3:91:76:9a:b9:d3:24:67:1c:a4:
                    e1:e3:12:9f:13:7b:6c:4f:68:a8:da:eb:6b:45:b9:
                    f3:c1:80:ed:a3:e4:e5:47:b6:df:f1:6f:d8:fa:5d:
                    09:b6:7c:35:f4:05:3c:a2:c8:fc:7a:3a:09:f1:a6:
                    e9:29:1b:77:e8:c0:80:8e:fd:42:e2:83:02:3e:f0:
                    77:92:7f:12:4c:da:21:f2:56:d5:10:ee:39:1a:70:
                    16:8f:66:71:3f:e8:e3:c2:d1:de:c5:27:e5:15:d9:
                    b2:2f:5f:37:90:93:20:a2:0d:8b:54:a8:8f:e3:f7:
                    3b:2f:f0:48:ed:6e:61:f2:fd:8a:00:b2:39:2a:3f:
                    f2:a4:c4:06:81:5e:6a:59:5a:13:fc:7d:63:63:0c:
                    ea:11:b9:ba:63:d4:5e:24:4c:ce:f0:e4:97:fc:70:
                    de:69:94:91:a6:fe:8a:11:4b:a2:74:d8:43:f7:fa:
                    15:dc:27:f5:ea:05:37:51:0d:0a:b8:e5:22:e5:bc:
                    85:70:8b:9d:9a:ab:5f:fc:c1:14:eb:33:1d:e5:a8:
                    3d:3a:ae:9f:f2:e0:85:c9:32:f3:ad:e2:b8:f0:da:
                    05:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A2:6B:6A:C0:87:24:C7:CC:E0:2E:2E:4C:B6:9C:3B:7E:90:3B:85
            X509v3 Authority Key Identifier:
                keyid:2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/9f78fb37d5ec71cbc21f30f7a457127c7cbdcd8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/5b7dbb1482b4705c4115f4698d018750070bcecb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:b9:b7:70:5d:c5:c5:1a:3c:72:72:8f:29:2e:9d:78:a0:a5:
         ed:d4:1a:3c:08:a4:60:94:86:1b:2d:d4:fc:b1:ca:ce:eb:9e:
         fd:11:cd:07:ff:00:6e:f1:c5:e0:6f:bb:37:af:6a:f1:76:f3:
         65:38:b8:3f:d5:23:76:f4:cb:54:dc:40:67:63:09:c0:b3:e1:
         1e:57:87:ce:7f:1f:e5:71:34:49:04:d5:77:61:64:b3:3e:8b:
         92:e3:e8:8d:79:fd:c1:30:fb:8e:78:67:48:12:0a:4d:8f:76:
         88:67:a5:bf:22:70:db:c6:d9:d4:af:28:ab:aa:23:19:73:de:
         70:0c:f0:39:a0:16:44:d6:da:1e:c9:8f:84:23:16:15:15:8f:
         33:f3:a6:97:66:30:3e:69:c0:a6:74:2b:bb:dc:d5:f3:1c:47:
         a2:5c:3d:d2:2c:92:2a:05:44:a1:0a:f7:ac:3b:7f:f7:cb:dd:
         e9:d8:55:09:f6:05:1f:bc:d2:4d:54:d9:87:b7:33:58:25:00:
         4e:e3:97:60:b7:4a:50:cf:b7:15:b0:23:ee:d7:65:4a:47:c6:
         12:83:44:fb:aa:34:4b:2b:2b:64:71:c2:30:e0:47:40:0d:90:
         ad:24:e6:1e:a3:dc:56:28:8f:4a:0b:4d:46:95:3d:1f:a3:64:
         3c:49:ab:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:31 2023 by rpki-client on console-ams.rpki-client.org