Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c2100589edecb96174f09860080b030ca2ed146d.roa
File:                     c2100589edecb96174f09860080b030ca2ed146d.roa (raw, json)
Hash identifier:          XTXspj6GTfntniGvo3lyA90tK5tDxPzCV6lQoj8aCM8=
Subject key identifier:   35:3B:E6:1E:40:6D:1E:C6:5C:35:BA:B0:B0:95:8C:F5:30:AA:C1:8F
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       11A754
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c2100589edecb96174f09860080b030ca2ed146d.roa
Signing time:             Thu 15 Apr 2021 23:48:53 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     264753
IP address blocks:        181.10.188.0/24 maxlen: 24
                          181.10.187.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1156948 (0x11a754)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=c2100589edecb96174f09860080b030ca2ed146d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:24:99:1e:86:3c:59:a7:32:6e:4d:08:fc:4a:
                    df:6f:63:f0:1b:db:8e:31:14:a0:d4:49:66:35:98:
                    ba:c5:d9:20:e3:fd:5e:e2:58:48:ab:bd:00:eb:0f:
                    bd:d7:dc:e1:22:1a:bc:8f:e3:01:a9:31:1d:da:07:
                    2c:84:34:4d:ac:c3:f6:93:73:ac:13:84:c2:d7:65:
                    37:7a:1a:bf:07:b9:59:51:5a:e6:ae:51:7f:8e:1e:
                    22:18:29:3f:75:9c:e6:aa:f1:d0:fb:84:f9:a0:e5:
                    e5:25:69:11:36:2a:20:ea:b2:1d:90:cc:49:5a:4c:
                    78:e6:99:5a:48:ff:fa:eb:eb:3a:fa:65:7a:12:d9:
                    c3:c9:eb:00:0b:1a:84:e7:43:96:25:52:d4:85:79:
                    0f:ac:97:f1:6c:cf:0c:95:11:f3:59:ce:9b:ab:0f:
                    fc:5c:ad:59:a1:19:75:79:34:06:d8:cd:2f:f4:1d:
                    df:32:b6:96:12:50:e9:53:ca:ec:59:a1:56:50:8a:
                    c6:c3:5c:94:68:91:93:1a:2d:43:f6:be:87:0a:c7:
                    4c:24:df:f0:e2:18:a4:b2:70:0e:57:d3:51:56:c3:
                    b9:3f:ae:58:fc:fa:e7:c7:d3:e1:ea:7a:0f:42:6c:
                    ed:d0:1a:c3:d6:be:35:65:a6:41:b6:da:9a:7d:a6:
                    2e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:3B:E6:1E:40:6D:1E:C6:5C:35:BA:B0:B0:95:8C:F5:30:AA:C1:8F
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c2100589edecb96174f09860080b030ca2ed146d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.10.187.0-181.10.188.255

    Signature Algorithm: sha256WithRSAEncryption
         5e:c5:3e:da:ed:5c:79:aa:6b:c6:b9:b0:18:b3:1f:a4:4e:48:
         77:4f:c9:28:9a:0a:d5:1e:b3:95:c3:95:20:cf:3a:eb:a4:c9:
         23:fd:22:07:a9:97:f5:ef:9a:6d:59:dd:59:4a:df:99:b6:c9:
         95:ba:64:ab:b9:a0:3e:10:59:11:ff:ba:14:a5:61:5c:dd:c0:
         64:7e:b8:27:6d:64:89:99:2e:03:68:ef:24:25:4a:22:60:27:
         67:93:34:dc:fd:80:5b:9d:67:e2:d9:af:0a:83:54:23:56:35:
         16:49:dc:c6:c1:23:e4:8f:35:09:9e:32:18:dc:e8:18:29:32:
         62:af:e5:fc:a5:a1:d0:17:38:e7:77:cc:51:c7:31:b0:9e:0e:
         eb:ae:c8:5e:eb:bb:99:e7:18:53:f1:1d:12:42:25:a0:09:d2:
         9a:eb:cc:aa:2f:13:3e:e6:35:5c:5b:41:97:e0:df:04:71:f7:
         b5:e8:cd:00:5e:30:a0:07:fb:72:d5:45:c4:d3:b3:3f:dc:48:
         41:11:67:47:bf:61:47:47:12:b7:7d:0d:c0:e4:5e:7b:de:35:
         74:ad:c9:58:43:e9:f1:69:a5:c8:e0:35:86:54:66:82:d4:37:
         50:c9:8d:01:97:b1:e7:6e:bd:8e:5a:6d:b2:c6:ca:66:fd:ee:
         0b:6d:5c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:19 2023 by rpki-client on console-fra.rpki-client.org