Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7dd2c100-dc30-40ac-85d2-5182570ac2be/10ade78c0a8ea3d0a2ab4c26e198ecc55e2661f9.roa
File:                     10ade78c0a8ea3d0a2ab4c26e198ecc55e2661f9.roa (raw, json)
Hash identifier:          o5ZwPU/L+mTBqwT5K2DjMrBJs2h4294qjThlpmvYFLo=
Subject key identifier:   61:48:26:E5:C5:8D:00:AA:D1:B4:9B:A7:E7:BB:46:66:25:2B:83:57
Certificate issuer:       /CN=89b05c9212d6b33b390c81f3fc8958af7050b896
Certificate serial:       17BC91
Authority key identifier: C5:61:39:2E:B1:6D:D9:6D:FB:14:BF:C3:26:82:38:A8:E9:81:83:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89b05c9212d6b33b390c81f3fc8958af7050b896.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7dd2c100-dc30-40ac-85d2-5182570ac2be/10ade78c0a8ea3d0a2ab4c26e198ecc55e2661f9.roa
Signing time:             Thu 12 May 2022 17:14:28 +0000
ROA not before:           Thu 12 May 2022 03:00:00 +0000
ROA not after:            Sun 12 May 2024 03:00:00 +0000
asID:                     52423
IP address blocks:        160.223.203.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1555601 (0x17bc91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89b05c9212d6b33b390c81f3fc8958af7050b896
        Validity
            Not Before: May 12 03:00:00 2022 GMT
            Not After : May 12 03:00:00 2024 GMT
        Subject: CN=10ade78c0a8ea3d0a2ab4c26e198ecc55e2661f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3d:0b:d3:72:84:c1:eb:10:6e:32:32:66:38:
                    f4:04:5c:54:6d:2f:fe:c6:b1:5a:c4:85:65:9f:f1:
                    e4:7a:d9:0b:15:6c:b7:93:3b:ce:0c:ab:7f:ab:7e:
                    45:d5:52:a8:c8:ec:2e:72:a2:d4:01:21:b4:75:32:
                    6f:ea:9f:f3:af:71:ec:67:32:0a:f2:a8:5f:21:5d:
                    f6:b1:7e:53:7e:6b:4c:2e:08:6b:63:48:2e:70:e3:
                    19:13:48:05:53:db:29:27:31:51:9b:4f:f5:d2:89:
                    1c:a2:fd:cb:ef:05:f2:c9:1f:fc:8f:c3:66:ee:25:
                    ec:9b:73:3b:ac:e8:83:1e:2c:01:aa:c9:50:33:1f:
                    e9:4a:ad:3d:73:58:0b:90:cc:bc:5c:df:eb:41:60:
                    b1:20:82:0d:7d:47:b1:66:b5:b0:f8:1a:86:01:f1:
                    d7:88:8f:17:ea:33:d5:df:e1:33:06:bd:d2:03:e7:
                    55:62:64:26:08:ac:a8:20:c3:b2:83:04:1a:ed:8a:
                    eb:cc:08:7d:2d:34:58:ec:e4:de:71:5e:61:fc:0f:
                    85:7e:89:3c:75:e2:b9:27:3a:68:b0:e1:01:df:f9:
                    b3:79:af:cc:e0:3d:82:22:d1:42:74:de:fb:e5:80:
                    1f:d3:9f:9f:46:fc:4a:83:76:dd:08:52:32:61:15:
                    1a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:48:26:E5:C5:8D:00:AA:D1:B4:9B:A7:E7:BB:46:66:25:2B:83:57
            X509v3 Authority Key Identifier:
                keyid:C5:61:39:2E:B1:6D:D9:6D:FB:14:BF:C3:26:82:38:A8:E9:81:83:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89b05c9212d6b33b390c81f3fc8958af7050b896.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7dd2c100-dc30-40ac-85d2-5182570ac2be/10ade78c0a8ea3d0a2ab4c26e198ecc55e2661f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7dd2c100-dc30-40ac-85d2-5182570ac2be/89b05c9212d6b33b390c81f3fc8958af7050b896.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.223.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:b3:b8:e6:a1:1f:4b:5f:5d:e7:35:93:73:e2:df:c1:02:4f:
         7e:a3:25:cd:b9:5e:63:89:89:38:47:4b:ee:f8:01:72:b2:58:
         5c:49:a1:0e:47:6c:6a:c5:01:8c:f0:98:58:f0:ba:90:b0:12:
         c0:86:9a:5b:da:59:40:de:bc:55:f0:a8:6c:04:0f:35:ee:b9:
         34:7f:1d:08:c3:e3:99:07:41:7e:e3:f3:67:e9:1b:d3:f2:39:
         6b:2c:2b:a1:46:3c:93:cc:f2:4d:18:1b:76:c5:37:d0:ed:d7:
         f3:87:89:44:94:0f:10:05:b2:81:38:53:56:c5:92:c5:96:61:
         b6:e2:a3:18:1f:f2:bb:25:ea:ee:32:fb:3b:aa:df:71:b8:93:
         a8:40:54:8b:53:dc:6c:50:c8:2d:b1:ca:ac:af:b7:92:17:32:
         f2:1c:23:c1:58:e6:96:19:1c:80:49:2a:e3:7f:36:ac:61:c0:
         0c:cc:4c:da:ac:59:75:bb:82:a3:e4:66:c8:ff:3d:6c:3e:a2:
         4b:38:4d:30:c0:2d:e9:68:78:df:2b:4b:68:22:1d:c8:ca:b3:
         bb:27:6e:f7:b1:8c:d8:9a:05:cf:df:d0:df:a0:43:f1:1c:91:
         d8:22:16:c8:47:33:02:20:6d:55:8b:48:f3:e5:15:5d:ed:e9:
         ff:47:d2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 2 19:55:06 2023 by rpki-client on console-fra.rpki-client.org