Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/7cbf2a09b98ab7ff0a1bdc7b342f698d96476026.roa
File:                     7cbf2a09b98ab7ff0a1bdc7b342f698d96476026.roa (raw, json)
Hash identifier:          1a+8NTr7cFIou8powEgCDX7l7TflVxEncaxUE8a3PaE=
Subject key identifier:   EA:0E:20:EE:7E:D9:F2:CB:4A:33:7B:E9:83:17:4D:8D:8F:34:00:69
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       11DC7D
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/7cbf2a09b98ab7ff0a1bdc7b342f698d96476026.roa
Signing time:             Fri 16 Apr 2021 01:53:04 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     264791
IP address blocks:        181.80.10.0/24 maxlen: 24
                          181.80.9.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1170557 (0x11dc7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=7cbf2a09b98ab7ff0a1bdc7b342f698d96476026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b4:02:64:20:bd:9b:5b:fc:4e:9c:97:9a:e6:
                    da:e0:d1:95:e1:ab:dd:4e:f3:8c:6d:96:97:76:81:
                    98:50:30:fc:b1:d9:1c:10:f3:d6:95:b1:f5:93:3a:
                    5f:b4:17:eb:a2:94:b4:6b:60:39:47:67:88:45:fe:
                    ef:e3:65:a0:b1:42:bf:91:2c:08:17:73:8d:9e:b6:
                    60:4d:fb:ba:6f:1a:41:2c:7e:45:3c:35:94:cf:b3:
                    36:2a:b8:a0:49:0b:db:6a:c9:57:0a:5f:71:c2:ea:
                    ae:d3:7a:74:40:50:ab:8d:d4:6e:ac:ce:97:43:4d:
                    30:e3:de:cc:4e:e2:96:8f:f7:8f:d2:87:f2:36:ae:
                    56:12:2f:22:a8:e5:d7:30:71:39:f1:fe:54:c0:fa:
                    08:68:70:52:f5:fb:90:69:85:c9:52:34:e7:69:53:
                    e5:aa:2a:f3:26:42:e3:7b:ca:f4:91:b8:a8:c6:13:
                    5e:88:bd:48:0b:8e:6c:85:94:30:7e:1c:50:75:ee:
                    b2:da:c2:bc:ae:1c:d7:34:11:eb:77:9c:03:38:57:
                    c9:0f:96:c0:0a:ba:d6:5b:6d:8f:d4:0c:d5:88:8e:
                    58:6b:e3:c9:86:cd:9d:23:97:7d:20:56:a8:67:8b:
                    aa:2a:0c:03:4c:e9:06:c2:10:1a:21:63:2d:f0:b2:
                    32:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:0E:20:EE:7E:D9:F2:CB:4A:33:7B:E9:83:17:4D:8D:8F:34:00:69
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/7cbf2a09b98ab7ff0a1bdc7b342f698d96476026.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.80.9.0-181.80.10.255

    Signature Algorithm: sha256WithRSAEncryption
         a7:ea:72:a8:a9:81:cd:6c:3b:96:39:0d:0e:23:99:e1:c9:a1:
         d7:43:c8:bb:04:8b:e1:3a:f2:a6:43:f4:0c:b0:c2:83:41:bb:
         7b:1a:a5:fc:94:cb:52:c8:0d:e8:3f:4d:ff:10:ba:73:51:b1:
         ae:43:33:9f:ba:12:e0:d5:94:fc:43:f1:9c:20:cb:8b:7e:f7:
         dd:88:c3:12:49:eb:3d:68:c4:c0:08:4e:7d:17:b0:46:49:11:
         76:14:78:ab:88:28:d6:42:63:c6:c1:33:5a:22:4d:71:d1:2e:
         28:d7:6e:c0:0f:34:42:78:5c:b0:67:10:2b:82:36:6d:7d:ad:
         59:97:d7:2e:65:53:2b:c8:d7:08:a3:19:4b:f2:bc:d0:3b:69:
         ab:7b:af:e9:da:25:fc:49:16:07:f6:1d:4b:a1:6a:b9:7b:b8:
         27:43:7d:5c:07:66:8a:af:65:b9:c4:7a:56:6f:74:48:a5:d1:
         e4:b9:d6:a5:81:fe:72:f5:4e:2f:8d:81:3c:52:15:4a:fb:95:
         85:11:de:86:60:78:f4:e0:b6:ce:ba:fd:9a:a6:55:bf:ca:fc:
         a4:cb:d6:38:4e:d9:c5:df:91:12:f6:c9:e5:bd:87:29:86:44:
         ce:e7:13:13:56:a7:52:39:9e:e3:22:08:28:f3:6a:a9:94:f0:
         2a:72:d6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:34 2023 by rpki-client on console-ams.rpki-client.org