Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f47499f854cb662a4164ce5786f67c2010ca837f.roa
File:                     f47499f854cb662a4164ce5786f67c2010ca837f.roa (raw, json)
Hash identifier:          gPEm04TG2Ea9isC4hcB6V0olyuua+36j8tnnZcpqTM8=
Subject key identifier:   04:17:99:2A:BD:10:04:EC:2B:A2:4C:9E:7E:6D:9F:56:B0:84:8D:2E
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       13D999
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f47499f854cb662a4164ce5786f67c2010ca837f.roa
Signing time:             Wed 12 May 2021 15:18:44 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     27895
IP address blocks:        181.94.197.0/24 maxlen: 24
                          181.94.208.0/23 maxlen: 24
                          181.94.210.0/24 maxlen: 24
                          181.94.212.0/22 maxlen: 24
                          181.94.216.0/21 maxlen: 24
                          181.94.224.0/21 maxlen: 24
                          181.94.232.0/22 maxlen: 24
                          181.94.236.0/23 maxlen: 24
                          181.94.238.0/24 maxlen: 24
                          181.94.241.0/24 maxlen: 24
                          181.94.242.0/23 maxlen: 24
                          181.94.244.0/22 maxlen: 24
                          181.94.248.0/23 maxlen: 24
                          181.94.250.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1300889 (0x13d999)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=f47499f854cb662a4164ce5786f67c2010ca837f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d2:f2:58:c8:cf:1b:c4:cd:09:96:a5:a0:c6:
                    d9:a0:e4:cb:32:1b:57:3b:0a:5d:eb:bf:d8:bd:b8:
                    76:c4:32:df:0a:64:9b:1d:ca:64:dc:25:c4:f2:e5:
                    bd:87:56:f1:12:d8:5c:4a:47:3a:00:27:e8:16:f2:
                    80:c6:82:c3:b3:24:d3:a9:96:ac:e7:00:20:7e:b2:
                    98:af:5e:f8:a2:33:dc:9c:69:d2:6c:bb:27:de:b1:
                    2e:02:0b:f6:26:28:5c:01:ce:a7:e5:49:f6:c8:17:
                    57:48:95:0f:a1:0b:c8:22:b2:2c:57:3b:b5:5f:c6:
                    c1:d0:3a:6d:aa:98:36:32:8b:5c:7f:26:c9:48:8a:
                    2f:8e:b6:86:a0:8d:ed:78:f2:cd:10:33:ed:88:d0:
                    37:6f:1b:fa:ec:f2:6e:da:37:f8:b6:57:fa:ca:31:
                    7b:7d:9a:f6:8e:3f:fb:3e:39:5d:4e:b0:75:bd:b8:
                    e6:8c:56:b1:ae:c1:26:dd:8c:5f:90:15:87:7c:d1:
                    58:25:b2:3d:e6:8b:57:be:5e:fb:ae:84:3e:e1:35:
                    38:ea:6c:f1:42:3c:d7:6d:08:c1:64:f3:75:e4:30:
                    27:30:6b:bc:04:3b:97:55:b6:52:ac:9f:30:44:bd:
                    b6:9e:81:56:04:64:f9:bc:85:8a:8d:d9:55:2f:22:
                    c4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:17:99:2A:BD:10:04:EC:2B:A2:4C:9E:7E:6D:9F:56:B0:84:8D:2E
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f47499f854cb662a4164ce5786f67c2010ca837f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.94.197.0/24
                  181.94.208.0-181.94.210.255
                  181.94.212.0-181.94.238.255
                  181.94.241.0-181.94.250.255

    Signature Algorithm: sha256WithRSAEncryption
         79:1d:48:3d:74:8f:86:19:0f:44:14:b1:ef:20:6f:29:18:50:
         75:db:c9:4a:9b:d3:74:82:27:bf:4b:39:cd:a4:d4:c6:94:50:
         ab:d3:b4:00:b8:18:bd:ac:b6:ce:c1:23:4a:d5:9a:fc:31:a5:
         91:3e:b7:d3:f5:ae:b2:24:90:71:0f:a9:70:8a:dd:01:8c:9c:
         ee:5c:fb:af:90:1a:d5:b7:08:04:c2:8c:0a:c6:37:d6:ba:d5:
         2a:ec:a1:69:02:97:ff:2c:e1:c9:f7:81:17:b1:80:a1:55:d7:
         55:a2:9f:0e:21:20:d6:5e:86:4e:72:73:a5:f9:a9:63:1b:96:
         44:0d:69:be:b6:cf:72:1f:c8:9d:b9:a6:e8:0c:bc:c1:e7:13:
         99:f0:b7:07:fa:ac:95:5a:e1:29:e4:58:87:f0:18:65:3d:68:
         a7:d7:51:53:99:ac:60:94:a0:2c:28:1c:a5:d0:9c:01:74:1d:
         bf:37:cc:3b:8d:34:5c:5a:15:a3:4c:60:1e:d0:2a:d5:8d:6f:
         07:01:9d:d0:c4:e0:09:6b:e7:ca:f0:f1:90:af:7c:45:4c:b2:
         02:f9:f8:3f:d4:41:f2:36:12:66:14:a5:97:32:81:73:9c:b7:
         e5:0b:27:78:e7:07:0e:f4:25:b4:7d:71:5d:5f:c3:3c:4d:7c:
         6b:58:5e:57
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:34 2023 by rpki-client on console-ams.rpki-client.org