Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/d2e3d4ff5384f48f965f75d6077d42ba36f909bc.roa
File:                     d2e3d4ff5384f48f965f75d6077d42ba36f909bc.roa (raw, json)
Hash identifier:          7vSymbQrBhWRugpVR5k8m61e6mY7H2kroSewDJ85TV4=
Subject key identifier:   A5:E4:99:B0:0D:C3:6A:61:B6:ED:13:BC:46:E0:C2:18:75:A4:C1:0D
Certificate issuer:       /CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Certificate serial:       0DB450
Authority key identifier: C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/d2e3d4ff5384f48f965f75d6077d42ba36f909bc.roa
Signing time:             Wed 24 Mar 2021 14:40:24 +0000
ROA not before:           Wed 24 Mar 2021 14:40:23 +0000
ROA not after:            Tue 24 Mar 2026 14:40:23 +0000
asID:                     264668
IP address blocks:        181.188.215.0/24 maxlen: 24
                          181.188.216.0/24 maxlen: 24
                          181.188.202.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 898128 (0xdb450)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
        Validity
            Not Before: Mar 24 14:40:23 2021 GMT
            Not After : Mar 24 14:40:23 2026 GMT
        Subject: CN=d2e3d4ff5384f48f965f75d6077d42ba36f909bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ae:fd:24:33:07:53:4c:d3:a5:d7:1a:49:2f:
                    3c:a9:34:0c:2b:cc:8b:87:23:d6:af:1a:b8:ee:7d:
                    e3:e3:a6:30:67:94:d6:b7:01:60:37:e6:66:5c:c2:
                    f3:e4:b4:22:3e:61:16:a0:00:b3:b1:b7:c0:a6:38:
                    68:2c:c1:59:79:ab:8e:23:41:e9:36:6f:ce:8a:56:
                    ba:58:7b:4a:72:c9:14:92:85:37:d9:ce:87:7e:2f:
                    c0:a6:1f:36:fe:fb:9a:d9:f3:28:2d:4a:f7:e6:fc:
                    b0:25:de:45:39:44:bd:b1:c6:43:dd:40:95:ac:bc:
                    04:56:50:59:a4:76:bf:08:ba:2f:b4:26:6b:cf:41:
                    5f:21:df:11:2a:12:1d:98:81:68:96:fd:e1:d5:30:
                    96:4d:67:5c:ad:34:20:3d:88:01:54:d9:df:aa:04:
                    df:16:cc:62:4e:9b:5f:e2:1b:9c:8c:8d:99:22:18:
                    0c:e1:10:c4:94:7e:e3:75:bd:b2:58:9d:e5:27:a1:
                    91:96:20:b4:9d:ac:34:6c:42:c5:f6:00:c5:91:a7:
                    2d:b9:8b:1b:32:cf:39:93:af:8f:52:6a:1a:bd:74:
                    50:0e:26:ed:76:8b:82:7a:f5:f4:59:ad:b5:d7:f7:
                    1c:bc:75:34:7c:56:e2:57:4d:2d:e6:5c:1b:b1:04:
                    af:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E4:99:B0:0D:C3:6A:61:B6:ED:13:BC:46:E0:C2:18:75:A4:C1:0D
            X509v3 Authority Key Identifier:
                keyid:C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/d2e3d4ff5384f48f965f75d6077d42ba36f909bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.202.0/23
                  181.188.215.0-181.188.216.255

    Signature Algorithm: sha256WithRSAEncryption
         5f:29:2e:b7:39:f9:e1:70:fa:fb:6d:5d:3f:5a:ca:aa:d8:0e:
         5c:49:ab:46:e1:d2:7a:8c:87:a6:e2:9d:1a:dd:8b:b0:81:80:
         2b:8e:5a:b3:0b:a7:f0:01:a3:e7:15:56:10:eb:1b:5d:86:fb:
         90:d7:4e:55:1b:95:44:84:92:a6:8d:9f:72:b7:bd:08:69:08:
         20:bb:8b:7c:f4:1f:09:b9:8e:b0:3f:8b:c2:ab:96:d0:e1:46:
         96:f8:fc:15:0c:e8:c1:94:34:b5:62:aa:32:79:93:ff:98:66:
         ba:10:2c:e3:b2:88:a5:54:99:6a:69:ad:20:db:ed:08:99:18:
         95:c3:76:6d:05:cf:d4:4a:13:0b:bb:9f:6c:0b:7e:fa:5b:40:
         80:13:ff:54:88:3e:0c:e2:50:d3:d2:06:d5:f8:fa:91:c8:19:
         38:74:21:f6:b7:a3:9a:5c:76:06:e3:71:3d:7f:e2:b3:35:31:
         0f:08:5a:e2:af:ff:3d:f2:e7:de:87:48:d1:e9:f6:1f:84:2f:
         9c:4e:15:b3:6d:d7:78:06:11:72:ad:a4:42:cd:72:a2:bc:e2:
         78:e3:99:77:c2:b4:9a:bc:1e:8e:5c:ef:2b:1b:88:6e:fe:c2:
         1a:ca:69:fd:0c:73:39:c5:c7:70:e4:31:36:b2:cd:44:43:1b:
         47:1c:3c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:35 2023 by rpki-client on console-ams.rpki-client.org