Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/01103a00b69b90482b5e5a34020e285a820a37c0.roa
File:                     01103a00b69b90482b5e5a34020e285a820a37c0.roa (raw, json)
Hash identifier:          WChW8MQugzz7Mx6d5lEEG/X8dtlnegy0WOW3ayPfo+E=
Subject key identifier:   0C:CB:96:0C:4E:EF:F4:1C:26:C0:42:2C:AC:25:2D:89:B8:15:AD:F8
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       108E43
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/01103a00b69b90482b5e5a34020e285a820a37c0.roa
Signing time:             Wed 24 Mar 2021 14:32:21 +0000
ROA not before:           Wed 24 Mar 2021 14:32:17 +0000
ROA not after:            Tue 24 Mar 2026 14:32:17 +0000
asID:                     265737
IP address blocks:        181.13.52.0/24 maxlen: 24
                          181.13.53.0/24 maxlen: 24
                          181.13.54.0/24 maxlen: 24
                          181.13.55.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1084995 (0x108e43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Mar 24 14:32:17 2021 GMT
            Not After : Mar 24 14:32:17 2026 GMT
        Subject: CN=01103a00b69b90482b5e5a34020e285a820a37c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9a:6f:18:d8:5a:b7:2e:0c:23:60:93:98:f2:
                    df:c9:7e:ac:79:8b:a7:44:69:6b:c9:44:fd:88:b9:
                    57:7c:48:4f:14:b9:97:91:b4:72:3c:6c:e9:76:a9:
                    4a:7b:83:dd:91:0f:74:71:f7:24:c0:44:cd:a8:db:
                    28:2a:e6:1a:59:89:53:58:0f:7f:66:80:e5:89:6f:
                    52:61:0a:b7:55:6f:4b:19:f3:80:01:3a:91:9f:15:
                    0c:0b:38:83:a1:f2:54:7d:63:3d:06:f7:59:72:08:
                    e0:1b:9a:24:4e:5b:4a:fd:fa:6a:ec:eb:53:dd:0d:
                    65:00:fa:8d:7d:c7:17:b7:2a:fc:60:0e:9b:e9:91:
                    d0:3a:85:ad:9a:9f:39:d6:bc:de:79:e3:30:97:5b:
                    f4:12:c4:a1:9c:48:fe:d9:f2:f4:be:1d:67:a8:12:
                    c9:b9:7a:63:b6:c5:3d:aa:23:f9:e4:cd:a5:aa:4a:
                    bc:5b:26:67:b2:52:3c:b5:d3:d4:f3:c6:be:1d:9f:
                    43:20:65:01:ba:d6:29:5d:2c:24:ae:9a:91:9d:91:
                    2e:36:ba:32:01:71:29:4a:b3:c3:1b:bd:ea:2d:2b:
                    5d:b0:66:ac:df:fe:0b:0a:36:d4:68:a2:30:cc:76:
                    5f:81:c9:08:61:f5:8b:50:88:b8:db:8e:03:f6:20:
                    be:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:CB:96:0C:4E:EF:F4:1C:26:C0:42:2C:AC:25:2D:89:B8:15:AD:F8
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/01103a00b69b90482b5e5a34020e285a820a37c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.13.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:e4:00:4d:eb:61:aa:d7:cb:c0:9d:36:09:f2:32:27:fc:7f:
         df:98:40:75:98:a6:33:b5:24:26:df:9c:c2:0f:ab:51:28:73:
         02:43:5a:a4:43:79:cf:bf:bc:e2:ff:3b:67:53:63:ed:aa:2f:
         3e:9c:08:f7:08:57:21:30:1a:f0:e1:af:25:38:9d:1e:20:47:
         e1:35:28:26:96:8b:42:cc:ab:ac:dc:79:ba:82:1d:93:94:77:
         28:d7:8b:6d:f5:22:36:d7:77:a1:07:19:46:e8:9c:63:3b:ff:
         bb:c3:38:a0:03:30:db:57:e3:63:9f:95:92:bc:33:7e:5e:55:
         b0:17:68:9a:e1:bf:dd:e8:c9:59:88:14:8e:dc:83:ad:cf:ea:
         78:a3:0b:00:95:eb:f3:bc:5b:72:87:d9:4e:c8:3c:aa:73:fd:
         0c:5d:ef:94:92:5b:1d:52:73:b8:57:97:e9:14:2f:fa:a1:59:
         d9:a7:00:77:9d:e6:4c:8d:7e:2c:9a:d8:09:67:3c:d4:b9:20:
         33:e7:81:cb:22:3f:26:be:bb:ef:a4:bb:f3:20:d8:e6:c5:a1:
         40:df:fa:a7:7a:b9:53:e3:d1:4e:c0:8b:0a:e9:9b:0e:8a:e7:
         26:45:00:79:87:65:73:12:5a:6b:9d:ef:d5:f4:21:f2:1f:50:
         2b:e2:72:67
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEI5DMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ5
M2E0NDRkMDYxZmM0ZDkxNGRjNTZkODAzMWE5YzQ1NzRjYTU3YWQwHhcNMjEwMzI0
MTQzMjE3WhcNMjYwMzI0MTQzMjE3WjAzMTEwLwYDVQQDEygwMTEwM2EwMGI2OWI5
MDQ4MmI1ZTVhMzQwMjBlMjg1YTgyMGEzN2MwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsJpvGNhaty4MI2CTmPLfyX6seYunRGlryUT9iLlXfEhPFLmX
kbRyPGzpdqlKe4PdkQ90cfckwETNqNsoKuYaWYlTWA9/ZoDliW9SYQq3VW9LGfOA
ATqRnxUMCziDofJUfWM9BvdZcgjgG5okTltK/fpq7OtT3Q1lAPqNfccXtyr8YA6b
6ZHQOoWtmp851rzeeeMwl1v0EsShnEj+2fL0vh1nqBLJuXpjtsU9qiP55M2lqkq8
WyZnslI8tdPU88a+HZ9DIGUButYpXSwkrpqRnZEuNroyAXEpSrPDG73qLStdsGas
3/4LCjbUaKIwzHZfgckIYfWLUIi4244D9iC+JwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAzLlgxO7/QcJsBCLKwlLYm4Fa34MB8GA1UdIwQYMBaAFMmcjKrH/3v04XrK
8I/d1uVu/M2tMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDkzYTQ0
NGQwNjFmYzRkOTE0ZGM1NmQ4MDMxYTljNDU3NGNhNTdhZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTMyYjIwOTctZWEwOC00NzgwLWI5NGYtMDNjMzM4
YjVhYTU3LzAxMTAzYTAwYjY5YjkwNDgyYjVlNWEzNDAyMGUyODVhODIwYTM3YzAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MzJiMjA5Ny1lYTA4LTQ3ODAtYjk0Zi0wM2Mz
MzhiNWFhNTcvZDkzYTQ0NGQwNjFmYzRkOTE0ZGM1NmQ4MDMxYTljNDU3NGNhNTdh
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEArUNNDANBgkqhkiG9w0BAQsFAAOCAQEAauQATethqtfLwJ02
CfIyJ/x/35hAdZimM7UkJt+cwg+rUShzAkNapEN5z7+84v87Z1Nj7aovPpwI9whX
ITAa8OGvJTidHiBH4TUoJpaLQsyrrNx5uoIdk5R3KNeLbfUiNtd3oQcZRuicYzv/
u8M4oAMw21fjY5+Vkrwzfl5VsBdomuG/3ejJWYgUjtyDrc/qeKMLAJXr87xbcofZ
Tsg8qnP9DF3vlJJbHVJzuFeX6RQv+qFZ2acAd53mTI1+LJrYCWc81LkgM+eByyI/
Jr6776S78yDY5sWhQN/6p3q5U+PRTsCLCumbDornJkUAeYdlcxJaa53v1fQh8h9Q
K+JyZw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:34 2023 by rpki-client on console-ams.rpki-client.org