Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/8178d3c8f92cdeeb1a00df33bbb62b79dfcd789e.roa
File:                     8178d3c8f92cdeeb1a00df33bbb62b79dfcd789e.roa (raw, json)
Hash identifier:          Rq6TkiLYmM1Sm73Vl4O+oH+jajNERzyY4bzT8lFFojw=
Subject key identifier:   8C:7C:3B:6C:63:8E:AF:A8:54:57:68:F1:8F:3C:79:7F:0B:73:32:18
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       11ED7D
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/8178d3c8f92cdeeb1a00df33bbb62b79dfcd789e.roa
Signing time:             Fri 16 Apr 2021 01:56:40 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     269861
IP address blocks:        181.13.58.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1174909 (0x11ed7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=8178d3c8f92cdeeb1a00df33bbb62b79dfcd789e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7d:a3:50:96:34:96:e0:66:d7:9b:ac:c9:83:
                    cd:68:a3:64:47:aa:41:e1:3d:9e:61:4c:e5:d0:c5:
                    14:0f:17:f6:49:bd:f8:90:24:4c:86:51:34:a7:4e:
                    95:34:c8:ba:1f:73:3a:1c:48:75:27:95:90:49:7c:
                    9f:4e:6d:8c:4a:78:d6:02:6e:94:78:78:cf:4e:34:
                    b0:62:0e:a2:f9:92:9f:eb:a4:d2:c8:a2:c1:93:74:
                    67:ba:9f:d3:47:ce:43:3a:a6:4b:dc:38:e8:c2:db:
                    86:e2:62:2d:5c:d1:e0:45:b0:79:96:fb:77:e0:2f:
                    98:ee:6d:93:c5:c5:b6:15:7f:dc:41:68:ed:a8:4c:
                    73:e3:e6:ce:04:30:61:bf:23:4a:82:3f:5d:3c:29:
                    d2:23:d2:88:d5:c8:e6:e9:a7:99:00:e9:b9:3d:56:
                    e3:66:55:ed:c2:00:8a:e8:0d:4a:24:05:b3:e0:14:
                    70:14:03:5b:56:94:50:87:03:00:10:1f:82:48:05:
                    49:a2:f8:91:fa:54:44:fa:08:20:58:ba:2c:ba:78:
                    37:49:4f:b4:70:3a:d7:b0:79:c6:ba:aa:ae:11:2d:
                    1f:5d:0e:ad:d1:79:b9:64:02:cf:e6:5b:1a:81:d0:
                    40:23:37:84:ab:c6:df:df:9f:cd:30:41:ad:29:58:
                    0e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:7C:3B:6C:63:8E:AF:A8:54:57:68:F1:8F:3C:79:7F:0B:73:32:18
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/8178d3c8f92cdeeb1a00df33bbb62b79dfcd789e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.13.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:40:4d:7a:b9:dc:b6:e2:ac:de:55:c0:e8:13:90:b0:e8:0e:
         3c:ea:38:3b:5b:9c:ed:50:47:a1:b5:f3:10:d8:f0:03:dc:ef:
         ce:4c:d9:c2:50:d8:b8:fd:4a:83:e3:4b:14:0f:54:91:89:0d:
         7d:6f:2c:05:3a:dd:07:03:4f:e8:58:50:ff:77:93:97:f9:4d:
         af:45:52:c7:eb:20:b4:47:31:96:9f:b3:b4:04:64:13:58:05:
         fb:7f:c9:2b:5e:24:05:1e:bf:35:cf:b9:e3:99:d9:26:96:49:
         a2:ce:7d:f5:a9:7d:13:64:3e:fc:9f:87:57:4b:2c:ed:49:0f:
         54:42:90:92:40:22:e8:d3:fd:e6:b4:d6:7a:b7:11:1c:b6:4f:
         55:ac:84:6f:d7:23:1e:5f:55:af:b9:87:a9:d1:a6:c7:35:b9:
         09:10:a1:08:83:2f:d7:de:3a:45:fc:54:fc:7e:65:5d:6a:f6:
         f0:00:cb:6c:3b:68:ad:d5:68:4b:54:2c:aa:09:61:11:0c:ab:
         03:0a:18:36:24:03:11:bc:9f:b0:55:d1:a1:35:5a:7d:3e:b7:
         06:26:22:8e:82:f0:b0:c0:39:ee:ac:0e:48:30:60:9b:c6:19:
         b0:8c:f4:2a:b6:dd:1a:73:7c:a8:15:7b:ea:bb:86:23:83:40:
         d5:9e:bf:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:19 2023 by rpki-client on console-fra.rpki-client.org