Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4c8379bd-01f3-46ad-97ef-4b8597efd185/7ee8484791f532636174a7f0bf177556d2dd236a.roa
File:                     7ee8484791f532636174a7f0bf177556d2dd236a.roa (raw, json)
Hash identifier:          fTG2J7iqY90zyaJu9sfT4wi+XT0x8wY0RwwsMb6Q7o8=
Subject key identifier:   A8:51:80:A8:C4:A7:C9:99:FE:5E:F6:A2:4C:6C:5D:9B:7A:0E:40:AC
Certificate issuer:       /CN=5b43ff8ce977c8a5dbe15ffdf31cf11fbe6fb3f2
Certificate serial:       0589
Authority key identifier: B1:DB:9E:09:0B:D6:24:87:AE:EC:3B:64:BE:82:5B:E9:1C:B7:71:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b43ff8ce977c8a5dbe15ffdf31cf11fbe6fb3f2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4c8379bd-01f3-46ad-97ef-4b8597efd185/7ee8484791f532636174a7f0bf177556d2dd236a.roa
Signing time:             Wed 22 Dec 2021 05:54:57 +0000
ROA not before:           Wed 22 Dec 2021 03:00:00 +0000
ROA not after:            Fri 22 Dec 2023 03:00:00 +0000
asID:                     271855
IP address blocks:        181.191.224.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1417 (0x589)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b43ff8ce977c8a5dbe15ffdf31cf11fbe6fb3f2
        Validity
            Not Before: Dec 22 03:00:00 2021 GMT
            Not After : Dec 22 03:00:00 2023 GMT
        Subject: CN=7ee8484791f532636174a7f0bf177556d2dd236a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9a:af:03:f9:95:bc:f1:01:23:d5:2d:59:61:
                    69:22:28:77:84:34:5c:0c:f9:0c:d7:47:ba:45:05:
                    01:f0:fe:0b:47:10:fd:30:b0:73:ed:7a:c6:9f:94:
                    77:71:60:f7:a7:09:15:31:45:58:19:55:ad:f2:90:
                    98:b0:4e:19:6f:79:d8:e6:5e:75:22:ba:be:a2:93:
                    5b:45:e0:4e:62:ea:c5:a6:a5:67:70:fe:9e:f3:6c:
                    bf:a0:b5:1f:a6:c1:3d:e4:8a:60:8d:43:37:39:d0:
                    e4:77:01:be:50:36:dd:cd:7c:f9:19:a2:b3:61:aa:
                    a0:77:74:8f:55:c9:b0:ab:96:b7:08:da:db:0f:09:
                    aa:14:18:20:fa:f2:8e:98:54:fd:38:11:1b:b7:44:
                    ab:75:8d:5f:1f:bb:fb:67:39:d9:96:5f:59:a0:24:
                    84:3d:44:c6:7d:fa:91:6b:68:16:29:a4:ed:b1:6e:
                    73:df:95:93:9e:ee:c7:2a:66:be:5d:46:5d:4e:65:
                    97:15:d4:78:92:9a:93:39:16:fb:ef:66:9a:10:b9:
                    e3:1c:67:e5:00:83:b8:a5:88:fc:34:c4:cf:5e:7c:
                    55:36:98:cd:bd:fa:12:e5:88:bc:5f:7d:d3:c7:2f:
                    c6:2d:c9:3d:a7:dc:b9:83:12:c0:d0:28:c7:f3:a4:
                    65:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:51:80:A8:C4:A7:C9:99:FE:5E:F6:A2:4C:6C:5D:9B:7A:0E:40:AC
            X509v3 Authority Key Identifier:
                keyid:B1:DB:9E:09:0B:D6:24:87:AE:EC:3B:64:BE:82:5B:E9:1C:B7:71:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b43ff8ce977c8a5dbe15ffdf31cf11fbe6fb3f2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4c8379bd-01f3-46ad-97ef-4b8597efd185/7ee8484791f532636174a7f0bf177556d2dd236a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4c8379bd-01f3-46ad-97ef-4b8597efd185/5b43ff8ce977c8a5dbe15ffdf31cf11fbe6fb3f2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:68:29:cd:85:13:ab:b3:f7:5e:c8:ef:b1:11:cf:a7:85:a4:
         0b:c2:26:a5:13:bd:92:1e:5d:58:22:52:21:31:60:5e:e5:e3:
         e6:87:13:51:e1:fc:35:04:34:8f:7c:16:c8:15:ad:0e:e4:79:
         84:82:9b:d0:aa:82:fb:a4:ce:02:24:0f:22:d9:46:bc:48:41:
         c7:9e:ec:3d:aa:ad:2d:eb:c7:0f:49:a0:23:4f:47:8d:4e:d7:
         a7:b1:82:c7:58:13:3d:ee:07:91:fa:ed:d4:46:ee:1e:54:88:
         7b:1f:61:fe:56:e3:73:d9:1f:74:29:be:f6:fa:91:ea:1d:d1:
         b9:16:ab:95:ec:10:af:10:34:ba:99:9c:17:9f:e7:6e:9f:91:
         c8:b9:8d:47:08:e8:a2:24:a2:fb:6e:5b:c5:08:10:f6:82:4d:
         a8:65:0d:6c:bb:05:70:5c:21:06:38:6c:5b:e4:29:5e:43:54:
         7c:ba:e0:0b:d6:1a:f3:c0:bf:61:29:59:9f:26:53:3c:a6:91:
         44:95:0a:29:0d:48:8c:14:9b:be:4e:2e:8e:cc:81:32:ad:d6:
         8d:1b:ba:26:53:9e:c2:a9:6a:1f:23:5a:d2:01:f3:f3:78:92:
         42:38:49:8a:5b:fb:71:bc:a9:33:41:f3:21:cb:a9:e9:eb:f0:
         62:8d:b9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 21 08:28:46 2023 by rpki-client on console-fra.rpki-client.org