Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7026ef52-79b0-4fc9-b4fe-006e1d7be606/5ad0b2cd9ed2d2f43c54433abbf56d9292376eb8.roa
File:                     5ad0b2cd9ed2d2f43c54433abbf56d9292376eb8.roa (raw, json)
Hash identifier:          XqrSvORjrV3mSgl/GSeuLsVcpygikpwMEDbdWUMweqc=
Subject key identifier:   B3:A5:3F:7D:B3:09:67:34:48:B8:D1:01:99:01:9F:73:3C:84:17:10
Certificate issuer:       /CN=d21f7315b565f88e18de69169de5a1119c25988f
Certificate serial:       0D3167
Authority key identifier: 9A:0B:7E:6F:2B:9E:A4:D9:78:9C:53:3D:D2:BE:7E:AD:01:C6:2D:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d21f7315b565f88e18de69169de5a1119c25988f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7026ef52-79b0-4fc9-b4fe-006e1d7be606/5ad0b2cd9ed2d2f43c54433abbf56d9292376eb8.roa
Signing time:             Wed 24 Mar 2021 14:45:26 +0000
ROA not before:           Wed 24 Mar 2021 14:45:26 +0000
ROA not after:            Tue 24 Mar 2026 14:45:26 +0000
asID:                     52468
IP address blocks:        186.148.96.0/22 maxlen: 24
                          186.148.100.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 864615 (0xd3167)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d21f7315b565f88e18de69169de5a1119c25988f
        Validity
            Not Before: Mar 24 14:45:26 2021 GMT
            Not After : Mar 24 14:45:26 2026 GMT
        Subject: CN=5ad0b2cd9ed2d2f43c54433abbf56d9292376eb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8a:89:3a:25:47:18:94:51:1c:99:94:ce:d1:
                    c8:16:d6:b0:8e:c1:95:81:18:44:aa:42:5e:5e:86:
                    4b:e3:51:a5:af:2c:57:2a:af:4b:1e:36:f5:46:8d:
                    b6:4e:d8:8b:92:dd:6c:65:66:5a:72:aa:5c:dd:df:
                    c7:5f:2d:da:22:46:0c:4d:92:d5:05:90:8a:1f:0f:
                    9e:27:dc:dc:76:9d:be:3d:4a:69:6e:e5:ef:3f:ab:
                    3c:4f:57:49:93:2f:26:f3:ca:af:11:7b:00:9e:37:
                    1e:09:f2:0f:f6:7a:16:b2:f1:32:5a:8e:07:57:8a:
                    91:7f:1a:22:32:8f:d3:e6:52:fd:42:24:ac:d8:bb:
                    5d:59:cf:d7:67:ee:c7:80:35:c6:89:a8:8d:be:15:
                    f5:a1:9c:97:71:ac:8b:53:83:d4:8b:3b:8b:fb:9a:
                    ba:73:75:d0:14:da:9e:85:6f:72:25:49:53:96:4c:
                    cf:2b:f7:37:13:f8:19:69:00:ef:fc:31:74:04:c9:
                    00:04:8a:75:8d:c8:d2:dd:34:51:e7:bf:72:98:ca:
                    8c:35:90:c4:2f:e3:36:59:e4:27:36:08:92:79:0d:
                    6a:0d:84:d0:bb:2c:a4:51:25:70:17:27:ff:c6:79:
                    dc:ba:82:3e:91:51:45:b8:c6:bb:db:d0:9c:19:0a:
                    e2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A5:3F:7D:B3:09:67:34:48:B8:D1:01:99:01:9F:73:3C:84:17:10
            X509v3 Authority Key Identifier:
                keyid:9A:0B:7E:6F:2B:9E:A4:D9:78:9C:53:3D:D2:BE:7E:AD:01:C6:2D:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d21f7315b565f88e18de69169de5a1119c25988f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7026ef52-79b0-4fc9-b4fe-006e1d7be606/5ad0b2cd9ed2d2f43c54433abbf56d9292376eb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7026ef52-79b0-4fc9-b4fe-006e1d7be606/d21f7315b565f88e18de69169de5a1119c25988f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         72:da:e0:67:99:f9:3d:4a:a4:20:87:a9:cb:ca:c5:f3:22:c7:
         5b:8e:9f:a8:35:2e:de:93:aa:a6:14:c0:e0:ca:a5:ec:46:8d:
         39:ea:68:f1:2f:d7:35:2b:53:41:05:de:68:2b:52:9a:cd:51:
         13:f6:73:44:37:18:62:bb:5f:73:4e:d7:a6:78:0c:00:3b:7e:
         3e:ef:be:96:61:bb:a9:39:34:7b:a0:59:2a:47:b0:e0:00:cd:
         32:22:4b:12:fe:15:ce:ef:e9:98:ff:3d:3a:26:bb:34:27:5c:
         08:35:c5:e7:18:f6:77:db:b6:26:14:8b:83:ea:7e:2e:2e:bc:
         c5:98:55:12:bd:3c:23:53:ad:3a:80:64:d2:4b:35:aa:25:57:
         d2:f8:de:66:49:1d:fc:d9:49:08:5a:39:eb:d0:80:dc:85:2e:
         92:7b:8f:45:90:36:38:8a:d7:61:33:93:fc:94:b0:ad:8f:cd:
         bf:0f:1f:08:9d:e7:88:d0:fb:a8:13:19:53:d5:74:ed:12:d8:
         fd:48:7b:fa:1f:ce:81:27:da:a1:c8:b4:24:38:1c:82:e0:48:
         ed:c0:3b:bd:8f:e7:15:d8:cd:41:f5:50:89:ab:b6:a4:a0:75:
         9e:7b:27:93:e1:20:0f:8c:34:c0:de:44:b2:c3:f2:59:29:f7:
         c5:e9:a9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:24 2023 by rpki-client on console-fra.rpki-client.org