Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7026ef52-79b0-4fc9-b4fe-006e1d7be606/ee0a94e00fe1270a82801feeb2afeefe83729882.roa
File:                     ee0a94e00fe1270a82801feeb2afeefe83729882.roa (raw, json)
Hash identifier:          aZ4fEQxVqilK4xJqaxtRhIVszkefU6ggi4Nn6jXjPxY=
Subject key identifier:   84:4C:ED:70:B2:F7:61:5F:15:7D:B1:29:F2:FD:1A:7F:11:7F:D9:33
Certificate issuer:       /CN=d21f7315b565f88e18de69169de5a1119c25988f
Certificate serial:       0D346F
Authority key identifier: 9A:0B:7E:6F:2B:9E:A4:D9:78:9C:53:3D:D2:BE:7E:AD:01:C6:2D:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d21f7315b565f88e18de69169de5a1119c25988f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7026ef52-79b0-4fc9-b4fe-006e1d7be606/ee0a94e00fe1270a82801feeb2afeefe83729882.roa
Signing time:             Wed 24 Mar 2021 14:45:26 +0000
ROA not before:           Wed 24 Mar 2021 14:45:26 +0000
ROA not after:            Tue 24 Mar 2026 14:45:26 +0000
asID:                     52468
IP address blocks:        186.148.108.0/22 maxlen: 24
                          186.148.105.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 865391 (0xd346f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d21f7315b565f88e18de69169de5a1119c25988f
        Validity
            Not Before: Mar 24 14:45:26 2021 GMT
            Not After : Mar 24 14:45:26 2026 GMT
        Subject: CN=ee0a94e00fe1270a82801feeb2afeefe83729882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4d:14:2c:0b:56:3f:48:3a:46:b4:ea:57:46:
                    81:7e:74:53:4c:e9:c6:ba:fc:2d:cb:11:a1:23:f3:
                    d3:46:4e:90:6d:ba:a1:35:70:a1:8c:cf:7e:37:16:
                    ff:9d:b7:51:74:18:8f:ff:6c:c1:6c:14:f5:38:38:
                    a6:05:d5:2c:13:8c:52:5f:b4:d7:b6:c6:f3:89:fb:
                    2a:3b:fa:40:ba:52:4e:5d:d9:cc:43:66:48:13:0c:
                    44:82:89:98:52:96:f3:25:94:7d:62:e4:dc:1a:f3:
                    67:89:a5:c5:62:fc:cf:a2:99:c5:19:dd:84:95:c8:
                    74:6d:42:6f:c2:30:83:c8:db:1a:31:a4:bd:fd:11:
                    2d:e4:20:49:11:0f:f0:58:aa:0d:3e:d7:3a:d3:e4:
                    92:ad:50:69:db:fb:67:39:ea:d0:94:b9:5a:50:c7:
                    b8:08:e3:b3:ee:80:bf:97:17:55:33:87:e7:9f:c2:
                    62:f5:ca:2c:bc:0c:b7:9e:8d:7f:4f:0d:3f:ed:7e:
                    69:d9:e9:e3:d8:5f:f6:a3:42:59:47:b1:7d:4d:f3:
                    d1:40:da:e9:fb:04:3d:63:0d:80:87:69:b3:40:2a:
                    66:9b:e0:e4:4a:3b:4f:ae:b8:b2:3b:51:cd:b9:fb:
                    f4:9a:ef:5a:ce:67:df:62:c9:92:35:2a:6c:f6:c8:
                    26:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:4C:ED:70:B2:F7:61:5F:15:7D:B1:29:F2:FD:1A:7F:11:7F:D9:33
            X509v3 Authority Key Identifier:
                keyid:9A:0B:7E:6F:2B:9E:A4:D9:78:9C:53:3D:D2:BE:7E:AD:01:C6:2D:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d21f7315b565f88e18de69169de5a1119c25988f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7026ef52-79b0-4fc9-b4fe-006e1d7be606/ee0a94e00fe1270a82801feeb2afeefe83729882.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7026ef52-79b0-4fc9-b4fe-006e1d7be606/d21f7315b565f88e18de69169de5a1119c25988f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.105.0/24
                  186.148.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:76:74:68:0f:ae:42:85:9c:fd:30:1d:f4:06:11:29:ee:cc:
         3d:73:b7:ea:5b:3e:55:78:a4:7a:09:7a:71:ea:8a:20:a1:4c:
         80:9d:d4:85:a1:1a:ad:fc:88:95:a3:32:04:66:04:e4:b9:ec:
         6b:5b:97:22:90:79:0e:24:8e:78:9b:a9:cf:b5:37:a0:45:10:
         92:e6:da:0b:35:9b:8d:a1:1c:65:c1:7b:d7:cf:cc:af:d4:7e:
         5a:b9:07:2b:99:b6:75:53:e5:da:aa:66:57:1f:55:b7:b9:14:
         4f:fc:ec:94:7d:e7:9d:6c:3e:62:64:05:98:38:66:74:88:0e:
         25:c4:ca:b4:c5:7c:78:62:ae:aa:38:56:ee:78:ea:b7:38:9d:
         ac:dd:e2:81:1c:f7:bc:d8:46:c5:f5:dc:ce:0c:b9:b0:44:e1:
         76:bb:ad:cc:05:35:64:2f:31:c1:99:8f:37:4d:b7:59:a5:ee:
         37:45:43:fc:10:8a:7d:9d:2c:13:fe:50:87:fc:d3:54:fc:d8:
         4b:8b:de:73:1c:88:da:2a:e0:18:bb:0f:45:79:96:d3:2e:d1:
         84:69:07:65:f5:d4:75:c9:76:71:f1:98:27:78:ed:2e:32:0d:
         8b:88:56:fb:b9:ca:56:99:36:cd:67:a6:32:09:9e:fd:8f:d6:
         99:99:d0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:24 2023 by rpki-client on console-fra.rpki-client.org