Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5eeaf313-69f6-417b-8c15-e36b29868830/baa9424a48ac9a17041de13a167e3a816221ddb3.roa
File:                     baa9424a48ac9a17041de13a167e3a816221ddb3.roa (raw, json)
Hash identifier:          lsv2on7DOpNqJsXTPBuSx/Aa+owpyg4ikO4Rhy2JYDE=
Subject key identifier:   40:83:68:F1:C1:35:E8:7A:14:FC:A3:66:0D:8F:8D:46:41:35:C5:D8
Certificate issuer:       /CN=25d19738e269ec170203b5c4767bdf0fe844b512
Certificate serial:       025C4D
Authority key identifier: 9E:5D:4F:6F:81:61:00:0E:20:0B:D2:5B:CA:8C:2A:BF:01:77:D3:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/25d19738e269ec170203b5c4767bdf0fe844b512.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5eeaf313-69f6-417b-8c15-e36b29868830/baa9424a48ac9a17041de13a167e3a816221ddb3.roa
Signing time:             Fri 29 Jul 2022 14:41:46 +0000
ROA not before:           Fri 29 Jul 2022 03:00:00 +0000
ROA not after:            Mon 29 Jul 2024 03:00:00 +0000
asID:                     58349
IP address blocks:        181.233.127.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154701 (0x25c4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25d19738e269ec170203b5c4767bdf0fe844b512
        Validity
            Not Before: Jul 29 03:00:00 2022 GMT
            Not After : Jul 29 03:00:00 2024 GMT
        Subject: CN=baa9424a48ac9a17041de13a167e3a816221ddb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4c:e8:62:87:b7:54:94:fe:b9:51:12:9e:4a:
                    58:55:eb:73:4e:7b:ac:ac:d4:fe:9b:b0:63:a3:ce:
                    03:1c:04:b9:a6:90:ea:5a:d3:a1:90:60:5f:3e:5e:
                    77:d1:fe:66:4d:21:4f:d4:94:4d:65:fe:f8:77:28:
                    dd:d7:83:67:97:3f:07:2e:9f:00:fc:54:de:d2:ef:
                    47:e7:ee:da:10:d1:5f:22:6f:09:1a:5d:b7:70:03:
                    cf:ff:da:b5:bf:4f:69:dc:39:dd:13:e1:92:ed:10:
                    5a:e8:18:9a:0c:aa:d9:6a:e3:4a:da:1a:99:61:58:
                    a5:b1:9a:c0:eb:65:65:27:91:78:ce:31:30:61:89:
                    16:48:42:57:21:14:eb:f6:bf:bf:d5:4b:fd:fe:6a:
                    06:23:70:1e:db:98:22:33:c1:45:41:f8:c0:94:35:
                    bf:8d:74:8c:78:86:04:b3:5c:a5:0c:9e:0f:ce:8b:
                    2a:9b:42:ad:d7:a9:a3:f5:2c:d1:ce:3a:c6:bb:e8:
                    82:63:29:06:bf:0b:f1:ec:20:c6:31:2f:25:3b:d7:
                    af:63:60:27:a1:04:bb:5c:31:5b:aa:2a:14:ff:65:
                    55:f6:ea:fc:eb:e3:02:e8:47:33:28:40:83:54:2e:
                    0a:2f:d3:66:b2:e4:29:09:50:04:45:bb:b1:e6:eb:
                    47:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:83:68:F1:C1:35:E8:7A:14:FC:A3:66:0D:8F:8D:46:41:35:C5:D8
            X509v3 Authority Key Identifier:
                keyid:9E:5D:4F:6F:81:61:00:0E:20:0B:D2:5B:CA:8C:2A:BF:01:77:D3:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/25d19738e269ec170203b5c4767bdf0fe844b512.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5eeaf313-69f6-417b-8c15-e36b29868830/baa9424a48ac9a17041de13a167e3a816221ddb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5eeaf313-69f6-417b-8c15-e36b29868830/25d19738e269ec170203b5c4767bdf0fe844b512.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:d8:06:0f:0f:73:22:70:41:a8:70:39:1b:da:9b:c3:1a:52:
         3c:91:0e:7c:12:32:4c:9c:46:a2:e7:20:3c:de:e9:89:0a:77:
         27:fc:e1:aa:e5:3d:54:09:28:92:6e:af:17:51:96:2b:a1:e7:
         54:38:e0:be:14:57:9d:e7:e0:07:8d:02:fa:09:97:7a:d2:4b:
         b4:11:9f:8e:b1:15:0a:c9:cc:b7:38:05:f7:aa:f1:0f:c8:70:
         b5:49:f0:96:aa:3b:79:ff:60:2e:19:50:75:82:28:57:0c:30:
         49:b5:81:9d:00:8d:fa:c4:88:9c:b0:25:51:82:df:9e:5b:e7:
         36:0f:75:3c:9c:e4:e9:d3:5a:63:93:70:2b:61:d0:4d:2a:7f:
         b4:ce:9b:75:c5:60:8e:bd:9e:5b:6a:95:73:47:3f:a6:c6:d8:
         d0:f4:1d:05:c0:52:61:99:04:19:04:36:46:b4:07:b2:01:17:
         8f:30:48:ac:02:3e:fe:47:24:34:58:20:d7:ea:98:a1:e3:e9:
         d2:55:a1:3b:86:bc:37:31:38:bb:94:35:6e:c0:43:17:9b:b4:
         4e:5c:31:7d:59:c8:13:ca:44:a9:b4:96:fb:c0:b8:cf:25:a4:
         30:87:6a:7e:21:90:88:a6:50:32:cc:2f:d4:ab:cf:82:39:69:
         25:60:45:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 27 10:32:53 2023 by rpki-client on console-fra.rpki-client.org