Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d355cfa8fe3b1465e62553435cec0ee9c4cd7ec2.roa
File:                     d355cfa8fe3b1465e62553435cec0ee9c4cd7ec2.roa (raw, json)
Hash identifier:          ROKT7iDWIZUnTTpi6GU5PYSep8mODXo+1UuoLLst4dE=
Subject key identifier:   88:5E:9C:00:B9:A5:7D:80:AA:62:B3:E9:7B:69:61:6B:3D:6B:5B:7B
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       117C3E
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d355cfa8fe3b1465e62553435cec0ee9c4cd7ec2.roa
Signing time:             Thu 15 Apr 2021 23:21:37 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     52436
IP address blocks:        181.10.236.0/23 maxlen: 24
                          181.13.56.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1145918 (0x117c3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=d355cfa8fe3b1465e62553435cec0ee9c4cd7ec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d0:c5:3b:d2:ea:5d:af:e3:ee:b9:5f:45:e4:
                    55:4b:ab:a4:5c:a9:80:9b:ba:a2:a9:75:2b:f5:09:
                    61:48:59:80:94:e3:db:8c:6d:22:99:00:a4:07:ca:
                    70:07:8e:7b:a6:b8:b2:09:51:49:10:6d:c7:8f:9e:
                    5e:04:e1:fb:fe:b0:c3:3f:72:8a:2c:ea:d2:d8:0f:
                    49:b4:f4:31:0d:1a:d5:41:4d:d3:99:34:c2:6e:2f:
                    c7:17:29:90:7a:70:68:5b:29:10:7d:8a:8f:5b:27:
                    8d:d9:1c:40:12:a4:46:ce:e1:30:81:b4:89:75:bb:
                    30:42:bd:46:01:7f:9a:10:09:0e:df:df:5b:4e:e7:
                    55:b8:dc:2b:54:9b:52:e7:9c:e7:d6:13:7f:60:d6:
                    c4:3f:2f:55:6a:fa:47:f8:eb:5e:73:c9:3e:f6:f6:
                    f0:6d:6a:95:fa:24:1b:8f:3f:ee:5f:27:4e:0f:b6:
                    e1:08:fe:99:d2:13:6c:2f:f7:dc:e2:5c:ed:e3:fb:
                    20:3f:e0:76:d2:58:db:b8:01:b6:c7:b4:bf:f1:f7:
                    39:89:93:5a:6f:93:59:38:9c:51:31:e7:f1:81:be:
                    d3:00:da:a2:aa:2c:08:1d:61:9c:12:13:17:c0:a4:
                    9d:a2:7b:46:f3:c2:63:e0:80:2a:37:14:50:8c:6b:
                    b2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:5E:9C:00:B9:A5:7D:80:AA:62:B3:E9:7B:69:61:6B:3D:6B:5B:7B
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d355cfa8fe3b1465e62553435cec0ee9c4cd7ec2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.10.236.0/23
                  181.13.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:96:54:d0:c4:a4:a7:f3:2d:73:64:c7:09:69:25:2f:5b:19:
         91:1f:7c:62:fa:d6:7f:80:41:bb:fa:85:c0:ef:ad:f3:31:e3:
         7e:22:2d:48:f2:12:37:f0:61:65:46:fe:ad:4f:8c:8c:cd:92:
         83:2e:e2:da:26:75:39:d2:5d:e2:68:3d:4c:75:30:b5:b0:d5:
         74:71:c8:4d:8e:30:f4:76:3a:75:60:76:cd:fc:9e:e5:6a:3e:
         6b:31:c7:86:f0:8c:4f:c1:98:29:1d:24:a2:23:99:82:79:9f:
         d9:88:7d:3d:d1:c0:e2:8d:42:0b:87:41:62:f3:ef:75:8f:83:
         f9:21:79:27:c5:40:5e:e1:e9:87:d0:9d:91:f3:7b:c2:c0:c1:
         a3:22:4a:2d:d4:d2:fb:97:3a:76:83:b4:21:3c:bf:71:b4:a5:
         78:a2:bc:d2:5b:65:d2:76:29:cf:76:e3:8c:10:fa:cc:e5:c7:
         c2:e0:e9:63:3d:3f:8a:da:c5:08:36:c3:56:9b:fe:95:8d:0d:
         e1:4f:ab:25:f2:36:d0:be:88:73:3d:ed:76:2f:b6:da:75:94:
         be:0d:cd:11:4c:8e:9b:4b:ea:c2:a6:9b:10:ff:82:8a:86:6a:
         e0:76:d6:f9:2f:c3:cb:43:81:40:07:cd:1b:ee:7d:63:37:7a:
         28:22:8a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:19 2023 by rpki-client on console-fra.rpki-client.org