Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/894bc067-9783-40c6-8491-782e35c5c1c3/5de9c2db30698075616b750ddc1df8c0d8cd77aa.roa
File:                     5de9c2db30698075616b750ddc1df8c0d8cd77aa.roa (raw, json)
Hash identifier:          wcinUnMdTtNtxFjrxbMzCuTEQdn9PJK6PQuazY0rAsc=
Subject key identifier:   28:1C:E8:53:53:0F:5B:1F:51:54:08:60:3B:D4:09:19:E1:65:ED:17
Certificate issuer:       /CN=5a93fb330793d475d283f90d1a40a536c6ec17d3
Certificate serial:       0257
Authority key identifier: D4:CB:17:FF:BA:9F:0B:4B:04:60:B5:8C:75:05:DB:3B:B0:93:F7:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a93fb330793d475d283f90d1a40a536c6ec17d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/894bc067-9783-40c6-8491-782e35c5c1c3/5de9c2db30698075616b750ddc1df8c0d8cd77aa.roa
Signing time:             Fri 04 Mar 2022 15:21:41 +0000
ROA not before:           Fri 04 Mar 2022 03:00:00 +0000
ROA not after:            Mon 04 Mar 2024 03:00:00 +0000
asID:                     271835
IP address blocks:        181.233.24.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 599 (0x257)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a93fb330793d475d283f90d1a40a536c6ec17d3
        Validity
            Not Before: Mar  4 03:00:00 2022 GMT
            Not After : Mar  4 03:00:00 2024 GMT
        Subject: CN=5de9c2db30698075616b750ddc1df8c0d8cd77aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c8:28:d6:ff:89:00:cc:3c:87:b0:3a:ec:9f:
                    8b:44:9b:25:8c:a4:07:45:2e:49:c4:2d:e5:3d:8b:
                    57:c1:c0:b2:89:81:73:15:ef:42:eb:bb:1c:1d:7a:
                    4a:ce:47:0a:b7:92:f8:e2:06:c1:5e:59:7e:f5:5c:
                    ca:d1:41:c6:aa:17:fc:74:6e:45:d2:41:f6:df:bb:
                    6c:f1:20:78:7c:a4:5b:90:8c:d1:75:3a:e8:e9:39:
                    03:9c:de:a1:26:ce:bd:a9:65:57:90:f1:12:53:03:
                    e5:a0:74:5a:82:98:24:21:b0:6d:c2:29:1f:1a:1c:
                    96:fa:0e:9b:01:66:d8:e6:2a:73:25:08:36:3d:0e:
                    8f:c8:2c:fe:fd:e0:02:d9:f4:24:a2:2d:ac:59:3d:
                    5f:6e:07:f9:c4:4b:f4:0e:26:9d:ec:9a:92:e0:9a:
                    5b:a9:2b:8a:3d:80:85:e1:e0:19:77:8f:ef:76:d0:
                    c9:37:56:00:dd:83:e4:14:a1:22:f0:28:6b:5d:09:
                    5a:1a:53:99:84:b9:2d:fb:57:67:3f:81:3e:e7:69:
                    b1:1e:3d:ff:d5:8b:27:da:f0:89:bc:68:f9:8f:0f:
                    e4:71:74:65:1b:88:e7:af:fe:49:bf:d2:78:3f:d5:
                    dd:81:e5:09:60:13:54:33:80:17:a5:4c:64:a7:6c:
                    28:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:1C:E8:53:53:0F:5B:1F:51:54:08:60:3B:D4:09:19:E1:65:ED:17
            X509v3 Authority Key Identifier:
                keyid:D4:CB:17:FF:BA:9F:0B:4B:04:60:B5:8C:75:05:DB:3B:B0:93:F7:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a93fb330793d475d283f90d1a40a536c6ec17d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/894bc067-9783-40c6-8491-782e35c5c1c3/5de9c2db30698075616b750ddc1df8c0d8cd77aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/894bc067-9783-40c6-8491-782e35c5c1c3/5a93fb330793d475d283f90d1a40a536c6ec17d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:7b:70:d0:8f:a2:29:ce:ea:2d:d6:de:7c:b0:5b:e9:c5:46:
         f0:2e:1a:30:eb:aa:6d:0d:2e:5a:49:23:74:67:1e:01:0c:7b:
         d1:0c:b1:c8:51:a5:b3:8b:22:78:c0:91:a2:65:b9:0b:dd:79:
         02:37:30:0f:59:15:c5:db:c0:f6:71:59:92:6e:35:6d:a5:db:
         c6:6d:b8:00:1c:23:02:76:02:51:f7:4e:7d:4b:06:7a:74:47:
         e3:96:ce:4c:2b:f8:0d:dd:ec:77:bb:e5:08:ff:cc:d9:66:3a:
         1c:d7:9e:b1:02:f2:8a:6c:c4:ea:5d:31:c8:77:9d:ed:41:3e:
         50:31:13:56:bf:74:a6:f3:96:16:5c:c7:6d:39:66:f8:fe:4a:
         f7:57:8c:33:07:eb:f0:b6:42:9c:3b:21:7b:4f:6f:ef:8f:49:
         da:fb:0d:b8:b1:18:73:d8:c1:5f:9d:00:00:75:b1:aa:3c:89:
         b6:24:09:1d:72:9b:db:51:eb:b4:77:3a:73:89:27:74:57:60:
         24:07:f5:e0:e4:1a:3f:32:d7:51:d2:1c:7c:a6:58:99:af:a3:
         ff:3d:5e:7d:a1:fa:4f:4a:ad:6b:db:05:6b:14:43:20:ea:55:
         b9:1a:6f:67:8a:7f:be:89:6f:60:25:75:36:2d:c4:35:48:9e:
         cd:15:cf:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 16 14:08:47 2023 by rpki-client on console-ams.rpki-client.org