Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d4a8543-ee9e-4487-a3d7-7f7bb6302e7f/05d98706ffb3ae44f7d5fc855961a8b06d06dc2e.roa
File:                     05d98706ffb3ae44f7d5fc855961a8b06d06dc2e.roa (raw, json)
Hash identifier:          e+doE4iKARngYueNDRcbwF4nQSOePcuuxH8LGvi5gQA=
Subject key identifier:   3B:24:B1:5C:7F:92:64:F0:E3:A7:B5:57:39:1B:29:51:9B:4D:C7:3B
Certificate issuer:       /CN=6a87731fd0e709e012a794d3f86ae26c7c73db79
Certificate serial:       0EC442
Authority key identifier: D6:B8:8E:7A:F3:33:46:E0:95:C5:F6:4A:64:31:03:4E:5A:01:12:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a87731fd0e709e012a794d3f86ae26c7c73db79.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d4a8543-ee9e-4487-a3d7-7f7bb6302e7f/05d98706ffb3ae44f7d5fc855961a8b06d06dc2e.roa
Signing time:             Mon 04 Apr 2022 17:30:07 +0000
ROA not before:           Sat 02 Apr 2022 03:00:00 +0000
ROA not after:            Sun 02 Apr 2034 03:00:00 +0000
asID:                     52505
IP address blocks:        152.231.16.0/21 maxlen: 24
                          2803:ee80::/32 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 967746 (0xec442)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a87731fd0e709e012a794d3f86ae26c7c73db79
        Validity
            Not Before: Apr  2 03:00:00 2022 GMT
            Not After : Apr  2 03:00:00 2034 GMT
        Subject: CN=05d98706ffb3ae44f7d5fc855961a8b06d06dc2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bc:a2:6f:f3:86:7c:6d:00:7d:12:e2:31:df:
                    ec:fe:01:d6:5d:74:5e:ff:b8:9e:88:5d:47:98:4c:
                    42:7c:06:8c:be:42:38:fe:d0:0e:5e:23:a6:aa:3c:
                    40:04:83:0e:46:75:dc:29:58:51:df:0d:c8:0b:56:
                    ee:72:db:f9:36:d1:31:ce:b0:c6:1e:1d:d3:2e:05:
                    2c:f3:59:b4:ac:bf:30:c4:55:e7:ed:db:9b:a1:10:
                    f0:f7:05:5a:f6:32:0d:46:08:30:3d:8b:18:65:0f:
                    e6:fb:67:ba:d3:05:79:78:c1:4f:da:ad:a2:99:48:
                    25:fe:2c:1f:c0:8a:a0:c8:9c:c2:5b:00:91:94:af:
                    ac:16:c2:30:f3:41:42:2f:1f:97:df:11:9b:75:84:
                    8f:5b:16:e0:87:80:13:56:64:94:e6:69:b8:da:c6:
                    38:d2:42:a6:43:7f:06:af:06:5b:89:bd:1e:1c:e0:
                    40:fc:1a:ae:08:d7:fc:4e:1d:6d:e5:3b:14:f4:73:
                    a4:8a:7d:07:71:e5:d6:b1:a6:af:8d:dd:0f:6a:55:
                    51:fb:85:51:25:ba:5f:10:f1:12:f2:0d:af:c8:5d:
                    db:cc:6f:eb:70:56:40:7d:70:ba:6e:68:c1:6a:7d:
                    07:5c:26:6b:c8:4e:cc:da:68:eb:b8:df:be:c8:4a:
                    4e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:24:B1:5C:7F:92:64:F0:E3:A7:B5:57:39:1B:29:51:9B:4D:C7:3B
            X509v3 Authority Key Identifier:
                keyid:D6:B8:8E:7A:F3:33:46:E0:95:C5:F6:4A:64:31:03:4E:5A:01:12:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a87731fd0e709e012a794d3f86ae26c7c73db79.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d4a8543-ee9e-4487-a3d7-7f7bb6302e7f/05d98706ffb3ae44f7d5fc855961a8b06d06dc2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d4a8543-ee9e-4487-a3d7-7f7bb6302e7f/6a87731fd0e709e012a794d3f86ae26c7c73db79.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.16.0/21
                IPv6:
                  2803:ee80::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:69:40:3b:72:ad:df:bf:5d:13:84:6e:37:20:4d:ed:ec:25:
         8b:45:66:5b:a8:d6:b4:4d:c7:19:8b:4c:b3:88:03:c4:55:83:
         7b:fd:2a:94:55:72:a4:96:69:88:12:b3:cc:a4:a1:81:eb:88:
         76:9a:78:49:4d:2e:ff:d5:04:19:b7:49:67:f8:42:7e:d4:0d:
         77:88:a6:09:7e:fc:3c:f1:9b:cf:1c:d4:22:3e:89:bd:27:3a:
         6a:11:4b:81:28:4f:87:27:ab:46:88:05:c9:05:10:1b:d2:13:
         10:40:84:a1:d4:4c:1f:95:cf:aa:85:25:94:40:6f:65:5f:31:
         ea:57:98:c6:06:ef:18:46:90:aa:e1:f5:25:af:41:ca:cc:4a:
         00:df:37:06:d2:0e:69:d6:62:92:61:12:90:4f:b3:73:15:20:
         fe:09:d0:5c:2f:c2:ec:cd:54:62:06:a0:99:18:3a:7d:34:dd:
         db:22:75:bb:ce:d9:e6:e9:3f:3c:78:68:95:ef:fc:79:ee:78:
         25:89:e6:c0:c7:fd:bb:92:80:97:a9:1b:67:c2:0b:0c:32:20:
         49:7d:dd:68:9b:9d:5e:15:99:f9:dc:0a:41:e9:24:d1:88:a1:
         ff:90:b3:70:68:6e:15:79:b9:db:f5:a6:6e:12:57:eb:a0:bb:
         66:e7:fa:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:18 2023 by rpki-client on console-fra.rpki-client.org