Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7cd328b4-73d3-4700-9ca9-b3e8ca53bd7c/0421a37b0d6dbf9c0f9526be5111164e58c58e0a.roa
File:                     0421a37b0d6dbf9c0f9526be5111164e58c58e0a.roa (raw, json)
Hash identifier:          dIlX1G2tE9CEaezxvgkTkLrTtX4NiLm2KXgp2R8xhxM=
Subject key identifier:   BC:98:AF:4A:01:BD:10:68:FA:F5:AD:31:9B:83:2B:0B:0F:61:42:1E
Certificate issuer:       /CN=8a25370ef6240a33a5dee984da551ba55fa78abf
Certificate serial:       0E4391
Authority key identifier: B4:C8:40:EA:6B:59:67:49:EF:C7:65:01:D1:D4:09:F0:B3:82:C4:0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a25370ef6240a33a5dee984da551ba55fa78abf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7cd328b4-73d3-4700-9ca9-b3e8ca53bd7c/0421a37b0d6dbf9c0f9526be5111164e58c58e0a.roa
Signing time:             Thu 15 Apr 2021 14:27:34 +0000
ROA not before:           Thu 15 Apr 2021 03:00:00 +0000
ROA not after:            Sat 15 Apr 2023 03:00:00 +0000
asID:                     264764
IP address blocks:        181.114.12.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 934801 (0xe4391)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a25370ef6240a33a5dee984da551ba55fa78abf
        Validity
            Not Before: Apr 15 03:00:00 2021 GMT
            Not After : Apr 15 03:00:00 2023 GMT
        Subject: CN=0421a37b0d6dbf9c0f9526be5111164e58c58e0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a6:a4:3b:b1:fb:d8:31:4b:59:40:34:e4:61:
                    ad:d8:97:88:34:59:d8:df:67:6a:85:19:e4:95:90:
                    53:fb:c7:34:24:39:40:9a:73:84:c2:ed:f1:d5:35:
                    4d:c7:7c:88:40:31:9a:60:1e:5d:76:85:bf:95:a3:
                    2e:db:39:80:37:4b:87:df:3e:e2:33:e5:02:1b:75:
                    1a:f9:5e:a5:7e:d4:3e:f4:d0:77:e6:0d:21:66:7e:
                    01:58:98:46:6f:29:bd:e4:46:5b:69:a0:f0:1b:9c:
                    de:88:15:6d:2b:ae:94:24:65:15:47:a5:41:4c:e2:
                    7e:61:25:c9:81:49:25:6b:be:99:d1:ec:7a:54:61:
                    69:c0:d7:41:17:fa:1d:b7:dc:86:df:e7:3f:20:2d:
                    91:8e:a6:a3:3b:b8:87:aa:3a:3e:10:68:94:a1:39:
                    79:51:02:4d:76:26:3b:43:95:9f:01:6f:8a:79:14:
                    ed:ab:ab:f6:6c:70:bb:6f:3b:a9:88:c6:06:4c:43:
                    1d:3f:dd:03:36:cd:a1:a8:12:56:b1:77:8d:00:f3:
                    c1:42:e4:3a:f3:e1:fa:62:9c:fe:1f:d5:13:3d:0e:
                    10:df:08:4b:18:17:27:39:4b:db:0c:e1:b2:64:14:
                    b4:fd:10:cc:92:d8:64:5a:1d:83:ca:2c:31:a3:d2:
                    59:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:98:AF:4A:01:BD:10:68:FA:F5:AD:31:9B:83:2B:0B:0F:61:42:1E
            X509v3 Authority Key Identifier:
                keyid:B4:C8:40:EA:6B:59:67:49:EF:C7:65:01:D1:D4:09:F0:B3:82:C4:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a25370ef6240a33a5dee984da551ba55fa78abf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7cd328b4-73d3-4700-9ca9-b3e8ca53bd7c/0421a37b0d6dbf9c0f9526be5111164e58c58e0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7cd328b4-73d3-4700-9ca9-b3e8ca53bd7c/8a25370ef6240a33a5dee984da551ba55fa78abf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.114.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:6c:54:91:1c:5f:b3:27:f7:8e:30:05:5c:de:65:36:8c:aa:
         f4:ff:b7:e3:fb:2e:78:a6:87:35:96:4f:8c:30:69:e4:dc:32:
         8b:4d:97:d0:83:20:92:f7:dd:52:6e:56:52:8c:84:9a:4c:91:
         b2:7e:45:80:63:0f:c2:1a:08:54:c7:0f:a4:cd:a4:6b:e7:fb:
         9e:ee:96:5a:c4:ec:64:fa:98:b2:29:17:ee:9a:16:7e:81:26:
         1c:b3:1a:4b:e0:e5:29:d5:34:0d:39:34:7f:eb:4f:ee:eb:18:
         a8:b1:67:46:30:18:da:29:9e:12:55:1a:fd:4b:94:b9:57:c5:
         a7:0d:7d:52:15:5c:bf:a1:1d:8c:ea:17:05:8b:e5:ee:c4:0d:
         f1:b2:06:49:b1:49:fe:dc:76:e3:d9:f9:46:70:aa:f3:ce:7c:
         e1:eb:6f:f0:ee:5d:7e:36:0f:95:9e:91:b8:f3:c7:45:a5:c1:
         0a:1c:4c:ab:d8:d4:ff:c5:a1:8c:5e:5b:85:2b:df:d4:a6:84:
         37:31:f0:32:29:33:d8:18:0c:9b:7c:06:0e:1d:6f:60:3b:05:
         a9:6f:22:5a:e8:8c:42:b2:7f:c7:80:73:ed:df:48:c7:b1:04:
         a7:54:d3:28:de:33:e0:b4:20:4f:bd:bd:0b:05:68:1c:78:51:
         72:c2:73:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:25 2023 by rpki-client on console-fra.rpki-client.org