Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/1112088418954cd2fc7319a836d35018f20c6b25.roa
File:                     1112088418954cd2fc7319a836d35018f20c6b25.roa (raw, json)
Hash identifier:          IiVagujZ1fRWp8i7UeNdvdzKcf5SkqSOb75onfT//co=
Subject key identifier:   7E:C0:48:DF:DD:E1:72:61:BE:33:E2:60:67:DE:34:78:30:64:46:C4
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       223970
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/1112088418954cd2fc7319a836d35018f20c6b25.roa
Signing time:             Thu 27 Apr 2023 15:55:53 +0000
ROA not before:           Wed 26 Apr 2023 15:55:49 +0000
ROA not after:            Sun 27 Apr 2025 15:55:49 +0000
asID:                     52323
IP address blocks:        181.16.160.0/23 maxlen: 24
                          181.16.168.0/24 maxlen: 24
                          181.16.170.0/23 maxlen: 24
                          181.16.175.0/24 maxlen: 24
                          181.16.176.0/23 maxlen: 24
                          181.16.180.0/23 maxlen: 24
                          181.16.184.0/22 maxlen: 24
                          181.16.192.0/22 maxlen: 24
                          181.16.196.0/23 maxlen: 24
                          181.16.206.0/23 maxlen: 24
                          181.16.204.0/22 maxlen: 24
                          181.16.208.0/21 maxlen: 24
                          181.16.208.0/22 maxlen: 24
                          181.16.130.0/23 maxlen: 24
                          181.16.136.0/21 maxlen: 24
                          181.16.145.0/24 maxlen: 24
                          181.16.146.0/24 maxlen: 24
                          181.16.156.0/23 maxlen: 24
                          181.16.236.0/22 maxlen: 24
                          181.16.236.0/22 maxlen: 24
                          181.16.240.0/24 maxlen: 24
                          181.16.254.0/23 maxlen: 24
                          2800:600:128::/48 maxlen: 48
                          2800:600:211::/48 maxlen: 48
                          2800:600::/32 maxlen: 48
                          2800:600:400::/48 maxlen: 48
                          2800:600:302::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2242928 (0x223970)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Apr 26 15:55:49 2023 GMT
            Not After : Apr 27 15:55:49 2025 GMT
        Subject: CN=1112088418954cd2fc7319a836d35018f20c6b25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:10:4a:9c:29:53:13:02:9b:4a:ee:58:16:2b:
                    4d:e9:1e:dd:12:df:3b:9c:6f:08:df:bc:7a:ed:fe:
                    f3:73:aa:01:3b:6a:60:74:70:fb:9e:33:53:37:a7:
                    95:d9:79:7f:3a:96:18:8f:c8:80:ad:79:36:df:3a:
                    17:90:55:1f:f1:4c:1d:92:81:25:51:61:9b:f6:ed:
                    29:c3:d8:8e:11:5d:e7:b5:50:e2:5a:9c:12:d6:c2:
                    b5:e7:a6:f7:cb:c8:b4:65:34:06:49:ee:e7:2a:58:
                    33:a6:8b:af:2e:87:d7:cc:15:61:dc:64:02:9c:ef:
                    51:44:e2:f2:ae:e9:a9:e5:19:46:eb:dd:e2:9e:e4:
                    ed:ae:97:36:48:b1:bb:45:cf:66:8f:a7:b6:03:c1:
                    2a:bf:2f:a1:1c:9a:88:a4:d4:05:6c:9d:53:25:a1:
                    d5:43:26:1b:fe:e9:ce:63:31:f7:0e:8e:65:e3:8d:
                    cf:4f:33:90:f1:d2:33:37:be:59:cd:5e:07:67:14:
                    89:a6:b4:67:09:f7:05:fb:6d:8a:b6:e4:51:1f:67:
                    af:e3:4f:8f:c7:b6:2f:95:48:8f:65:f7:0a:08:96:
                    33:45:6e:9d:73:38:c3:a3:37:9c:80:d2:90:7a:15:
                    e5:ec:2c:51:58:bb:00:38:89:df:c6:c7:3b:98:bd:
                    d2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C0:48:DF:DD:E1:72:61:BE:33:E2:60:67:DE:34:78:30:64:46:C4
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/1112088418954cd2fc7319a836d35018f20c6b25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.130.0/23
                  181.16.136.0/21
                  181.16.145.0-181.16.146.255
                  181.16.156.0/23
                  181.16.160.0/23
                  181.16.168.0/24
                  181.16.170.0/23
                  181.16.175.0-181.16.177.255
                  181.16.180.0/23
                  181.16.184.0/22
                  181.16.192.0-181.16.197.255
                  181.16.204.0-181.16.215.255
                  181.16.236.0-181.16.240.255
                  181.16.254.0/23
                IPv6:
                  2800:600::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:dc:89:0a:0e:54:38:17:fa:8d:0f:39:3d:16:ce:8e:57:79:
         94:5b:83:0c:67:73:fb:bf:4e:9d:25:9b:73:ae:de:48:c0:a6:
         d0:c8:4d:31:83:19:61:7d:0b:65:31:29:4e:68:74:63:5c:d3:
         5c:f7:20:ee:27:6c:b3:38:57:ff:23:7e:65:d0:87:7e:f4:72:
         8f:15:06:5d:25:62:65:07:94:9e:2d:21:f1:f9:c4:43:80:05:
         69:80:56:7d:c5:fb:66:4a:d8:d6:c0:cc:5a:ba:60:c6:22:cd:
         d8:e1:97:7f:07:14:46:a8:94:85:91:d9:2d:03:2e:37:18:46:
         42:8a:c7:4c:90:9c:8e:38:c8:d0:62:64:31:2a:f5:c5:20:e9:
         39:d0:e3:e6:17:9f:22:10:16:62:6b:2e:85:56:03:4c:f4:92:
         63:ac:e4:7b:fb:65:05:4d:08:5b:8e:9c:67:75:30:8c:d5:cf:
         c9:ca:f1:be:f5:cb:d9:08:ad:ce:05:49:17:cd:82:cd:83:41:
         27:25:34:40:d9:97:16:9a:06:7f:8c:37:de:8a:29:db:ff:57:
         1c:5d:0f:ed:6a:77:3c:d3:e4:ef:8d:f0:80:57:11:1a:a2:73:
         da:2e:f8:3a:b8:6b:e1:72:17:dc:c8:1c:ec:57:f8:0f:81:73:
         4d:08:51:fc
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIDIjlwMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ1
ZjViMzYwZjYzOTZmMzVjYWM3NmZlNzcyNzE0OGFmMmVhOTUwZDkwHhcNMjMwNDI2
MTU1NTQ5WhcNMjUwNDI3MTU1NTQ5WjAzMTEwLwYDVQQDEygxMTEyMDg4NDE4OTU0
Y2QyZmM3MzE5YTgzNmQzNTAxOGYyMGM2YjI1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjRBKnClTEwKbSu5YFitN6R7dEt87nG8I37x67f7zc6oBO2pg
dHD7njNTN6eV2Xl/OpYYj8iArXk23zoXkFUf8UwdkoElUWGb9u0pw9iOEV3ntVDi
WpwS1sK156b3y8i0ZTQGSe7nKlgzpouvLofXzBVh3GQCnO9RROLyrump5RlG693i
nuTtrpc2SLG7Rc9mj6e2A8Eqvy+hHJqIpNQFbJ1TJaHVQyYb/unOYzH3Do5l443P
TzOQ8dIzN75ZzV4HZxSJprRnCfcF+22KtuRRH2ev40+Px7YvlUiPZfcKCJYzRW6d
czjDozecgNKQehXl7CxRWLsAOInfxsc7mL3SYwIDAQABo4IC5DCCAuAwHQYDVR0O
BBYEFH7ASN/d4XJhvjPiYGfeNHgwZEbEMB8GA1UdIwQYMBaAFDhm0VThBCuywxEi
OWrLDWDwet3JMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDVmNWIz
NjBmNjM5NmYzNWNhYzc2ZmU3NzI3MTQ4YWYyZWE5NTBkOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTY0YjYwODgtODVhNi00MzYzLWExMWYtMjBkNzI1
YmJhM2Y3LzExMTIwODg0MTg5NTRjZDJmYzczMTlhODM2ZDM1MDE4ZjIwYzZiMjUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NjRiNjA4OC04NWE2LTQzNjMtYTExZi0yMGQ3
MjViYmEzZjcvZDVmNWIzNjBmNjM5NmYzNWNhYzc2ZmU3NzI3MTQ4YWYyZWE5NTBk
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCBpwYIKwYBBQUHAQcBAf8E
gZcwgZQwgYIEAgABMHwDBAG1EIIDBAO1EIgwDAMEALUQkQMEALUQkgMEAbUQnAME
AbUQoAMEALUQqAMEAbUQqjAMAwQAtRCvAwQBtRCwAwQBtRC0AwQCtRC4MAwDBAa1
EMADBAG1EMQwDAMEArUQzAMEA7UQ0DAMAwQCtRDsAwQAtRDwAwQBtRD+MA0EAgAC
MAcDBQAoAAYAMA0GCSqGSIb3DQEBCwUAA4IBAQB63IkKDlQ4F/qNDzk9Fs6OV3mU
W4MMZ3P7v06dJZtzrt5IwKbQyE0xgxlhfQtlMSlOaHRjXNNc9yDuJ2yzOFf/I35l
0Id+9HKPFQZdJWJlB5SeLSHx+cRDgAVpgFZ9xftmStjWwMxaumDGIs3Y4Zd/BxRG
qJSFkdktAy43GEZCisdMkJyOOMjQYmQxKvXFIOk50OPmF58iEBZiay6FVgNM9JJj
rOR7+2UFTQhbjpxndTCM1c/JyvG+9cvZCK3OBUkXzYLNg0EnJTRA2ZcWmgZ/jDfe
iinb/1ccXQ/tanc80+TvjfCAVxEaonPaLvg6uGvhchfcyBzsV/gPgXNNCFH8
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:46 2023 by rpki-client on console-ams.rpki-client.org