Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/3151047afb17465746ffb7c9d978067737ac6398.roa
File:                     3151047afb17465746ffb7c9d978067737ac6398.roa (raw, json)
Hash identifier:          qpsEzHxW/nk9UwQnh+iHfKsekYbJJKpNtnugz0UihNg=
Subject key identifier:   10:89:76:2C:FC:E0:AB:1D:17:D3:6A:D1:57:17:E6:D2:99:DC:61:10
Certificate issuer:       /CN=b12012502b7ca3b0da125f250315dfe19bfb18d5
Certificate serial:       1277E5
Authority key identifier: A0:AA:33:C0:E5:EA:9C:31:8A:E1:96:B6:D8:72:02:35:9C:67:12:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b12012502b7ca3b0da125f250315dfe19bfb18d5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/3151047afb17465746ffb7c9d978067737ac6398.roa
Signing time:             Mon 11 Oct 2021 16:49:08 +0000
ROA not before:           Mon 11 Oct 2021 03:00:00 +0000
ROA not after:            Wed 11 Oct 2023 03:00:00 +0000
asID:                     26617
IP address blocks:        181.189.132.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1210341 (0x1277e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b12012502b7ca3b0da125f250315dfe19bfb18d5
        Validity
            Not Before: Oct 11 03:00:00 2021 GMT
            Not After : Oct 11 03:00:00 2023 GMT
        Subject: CN=3151047afb17465746ffb7c9d978067737ac6398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:20:8e:42:a1:c0:f6:e9:0a:8c:44:13:42:9b:
                    c2:70:33:c4:51:2f:2d:73:d4:96:04:a2:46:39:d2:
                    64:cf:16:69:8a:62:91:a9:d9:49:a0:f0:b9:f3:a1:
                    ca:70:21:90:05:74:e3:17:c3:7a:9a:ca:9c:80:b9:
                    78:a5:fd:70:1c:14:16:d4:93:c2:72:fa:f5:bf:26:
                    2a:b0:49:bb:0e:17:09:99:c8:35:44:8b:ed:c0:b1:
                    e1:37:be:06:4f:fd:a4:32:b3:01:74:5a:90:db:ed:
                    fd:82:36:ca:83:3f:a3:fc:12:fd:95:86:cf:28:ff:
                    8c:7c:b1:22:55:55:3d:c7:b7:d9:c1:34:f4:81:d9:
                    a7:05:44:e4:b6:31:82:59:38:9f:f0:2b:39:d0:07:
                    40:01:d1:0e:cc:6e:dd:7c:75:9d:33:ac:51:bc:cf:
                    d1:5f:f8:64:6d:51:1c:e6:de:48:6a:85:01:f9:99:
                    23:f4:9e:e3:1e:65:cf:4e:b6:61:23:2c:47:45:bd:
                    c8:3c:97:b2:c9:a1:55:c9:bf:de:49:23:6d:94:3b:
                    9a:d8:a8:2e:a9:25:f4:21:3d:1c:92:19:f4:28:09:
                    c7:ce:38:2b:3c:57:2e:2f:ae:69:43:64:62:aa:f0:
                    ac:7f:a2:e4:5b:70:94:3a:6d:50:8f:19:54:1f:9c:
                    45:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:89:76:2C:FC:E0:AB:1D:17:D3:6A:D1:57:17:E6:D2:99:DC:61:10
            X509v3 Authority Key Identifier:
                keyid:A0:AA:33:C0:E5:EA:9C:31:8A:E1:96:B6:D8:72:02:35:9C:67:12:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b12012502b7ca3b0da125f250315dfe19bfb18d5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/3151047afb17465746ffb7c9d978067737ac6398.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/b12012502b7ca3b0da125f250315dfe19bfb18d5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:1b:34:5c:ea:b1:ef:62:b3:ae:6d:0a:a0:a8:4d:8d:0a:0f:
         e4:ba:ac:96:6e:c1:28:4c:4d:49:28:7f:74:7e:a1:ab:36:d4:
         ee:41:3b:18:1c:41:50:f1:4a:4d:3c:2d:c7:1b:cd:e2:c2:23:
         2c:f9:69:85:01:82:d4:8b:a7:0f:2b:98:f3:c0:47:bc:f5:64:
         c6:76:6d:88:b7:49:d6:ec:32:d9:3a:bc:58:a2:f5:5a:bf:75:
         50:ea:ac:12:81:e2:0c:39:f5:51:ae:42:44:62:de:e0:e7:a6:
         f7:f9:11:ee:f9:31:e2:f0:d6:70:a0:ad:c8:b2:44:b6:84:4f:
         5d:50:80:87:86:4e:d2:44:23:70:e7:c9:ff:b8:97:89:b3:df:
         54:da:69:de:6a:af:b8:58:b8:b5:c4:47:c6:da:d8:04:c4:70:
         2d:51:30:63:4c:f1:9f:30:bc:48:35:a8:7e:9e:45:b1:c8:ab:
         f1:51:11:61:19:43:0a:90:fc:86:79:c9:51:65:6d:0e:67:65:
         27:90:14:82:ad:34:7f:20:c9:50:d0:0e:67:18:09:90:22:7d:
         5f:3d:10:70:e6:d3:5a:df:e4:e1:5d:2f:55:21:12:d7:8c:4c:
         f9:1c:cf:15:89:b9:e8:68:f9:fd:9c:a8:28:12:55:d0:13:75:
         0f:67:58:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:35 2023 by rpki-client on console-ams.rpki-client.org