Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/55aa9cec962577615546988f2f893866ba8cc0c2.roa
File:                     55aa9cec962577615546988f2f893866ba8cc0c2.roa (raw, json)
Hash identifier:          n6uB/eWNqa5CyC2L/gV7zAHdjuUXf/7Adxsepqlds+k=
Subject key identifier:   0B:90:7E:37:D7:EB:F6:1F:2D:D4:10:62:AB:61:9F:1C:99:13:29:26
Certificate issuer:       /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial:       051A
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/55aa9cec962577615546988f2f893866ba8cc0c2.roa
Signing time:             Fri 03 Mar 2023 15:55:05 +0000
ROA not before:           Thu 02 Mar 2023 15:52:56 +0000
ROA not after:            Mon 03 Mar 2025 15:52:56 +0000
asID:                     7418
IP address blocks:        181.162.0.0/15 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1306 (0x51a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
        Validity
            Not Before: Mar  2 15:52:56 2023 GMT
            Not After : Mar  3 15:52:56 2025 GMT
        Subject: CN=55aa9cec962577615546988f2f893866ba8cc0c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:cb:40:28:f9:7c:8d:80:19:6f:73:eb:8a:a9:
                    2a:c2:b1:fa:f7:bd:20:78:62:d1:c8:e9:bc:65:e7:
                    68:b5:94:30:3d:11:15:d4:46:3c:c9:d0:a7:01:5f:
                    50:4e:c9:17:f6:7d:4c:33:f1:f6:12:a2:0e:2f:d1:
                    9f:5f:29:17:f3:95:3a:d1:ff:1f:4c:b6:56:c1:18:
                    ac:9d:75:56:20:7c:33:c5:88:db:5c:01:1c:05:57:
                    b8:db:89:b8:4c:ea:a9:cb:0a:f1:97:c9:8f:65:10:
                    9a:da:12:e7:ee:3d:14:85:bc:d6:b9:8f:d0:03:f4:
                    a6:74:f8:a6:a7:d1:4d:36:bf:f4:5e:6e:bf:cb:e9:
                    fe:46:09:46:40:55:98:3a:9a:73:cb:28:4d:e3:93:
                    df:8e:06:67:57:56:a1:aa:79:3a:27:86:93:d2:72:
                    c5:8b:a7:97:fd:5e:e2:39:13:77:30:a2:4a:e7:41:
                    71:7e:c2:87:6c:f3:64:cb:b7:ab:93:58:1e:5d:69:
                    18:3c:6e:5d:a9:fe:60:66:10:7a:a1:6a:32:f6:a5:
                    b1:94:9d:f5:89:ca:fb:e0:6a:dc:dc:65:dd:40:63:
                    27:48:77:00:2a:07:e6:5b:b3:44:f2:7f:ac:ba:fa:
                    8b:49:ac:df:21:c8:5a:d3:39:83:fe:b2:df:a8:1c:
                    a4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:90:7E:37:D7:EB:F6:1F:2D:D4:10:62:AB:61:9F:1C:99:13:29:26
            X509v3 Authority Key Identifier:
                keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/55aa9cec962577615546988f2f893866ba8cc0c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.162.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         5c:68:6a:a8:a4:80:39:40:37:b4:70:90:f0:9d:7c:c5:05:cc:
         44:74:8e:6a:e1:08:f2:58:98:f0:cd:fd:1a:34:18:7c:0f:14:
         27:ec:45:a3:23:d6:89:76:e3:e1:95:8f:63:33:1f:77:28:f9:
         58:b4:00:bb:68:29:e3:e0:cd:ed:00:9b:55:11:eb:fc:be:25:
         de:d8:3c:7d:70:ec:68:6a:35:53:86:87:ee:69:0e:de:bd:ba:
         10:31:e4:cf:4a:fd:e5:d7:3b:ed:9a:87:60:79:6c:d8:ed:6a:
         31:4d:fd:9b:14:41:26:d2:94:61:a8:d9:11:10:c2:d1:bd:0c:
         fe:14:aa:77:9b:19:d5:a3:fc:cd:df:5e:df:5d:c1:13:d5:76:
         42:21:89:b8:22:d5:19:21:34:21:bc:0b:68:70:25:6b:41:14:
         46:d6:49:5b:39:e8:cd:6b:87:7f:fd:43:5c:0c:2e:12:13:0b:
         07:b8:43:80:f0:da:7d:75:32:c4:69:08:b3:88:a0:30:71:0f:
         73:3f:2f:f0:6d:09:e3:5d:d1:38:3c:83:f1:72:5e:73:0b:76:
         ce:f4:2e:86:d7:19:f6:55:37:d7:bf:5c:4e:d6:23:6a:47:2f:
         58:00:03:52:53:03:7c:a0:5b:f9:db:84:23:82:5b:d2:a7:10:
         af:f6:6e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:22 2023 by rpki-client on console-fra.rpki-client.org