Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/42a3077947d7e047f971eeab8124d592e67ed568.roa
File:                     42a3077947d7e047f971eeab8124d592e67ed568.roa (raw, json)
Hash identifier:          hGY+rCRCjkt/l13ea6EburdFeiFAHp9e43dtT2nlAz8=
Subject key identifier:   33:37:6E:0C:C9:05:7F:5C:A2:F8:FB:33:BC:20:8C:BB:9A:56:F4:0C
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0EC941
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/42a3077947d7e047f971eeab8124d592e67ed568.roa
Signing time:             Wed 24 Mar 2021 14:29:31 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     52323
IP address blocks:        181.16.141.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 969025 (0xec941)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=42a3077947d7e047f971eeab8124d592e67ed568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fd:05:68:77:15:38:67:c5:5f:ec:14:04:40:
                    8d:82:85:1a:4d:8a:84:be:c0:03:c7:29:c9:7f:94:
                    8c:41:cc:bf:e2:3f:44:0b:d3:a2:72:5d:b0:52:0d:
                    c9:21:b3:a1:2f:35:d8:f2:57:6d:25:1c:20:29:3f:
                    7c:d0:12:77:c9:3b:56:2d:44:d2:65:c7:10:39:13:
                    e9:31:a9:e2:66:54:b0:a4:f3:8d:ed:1a:93:1a:d7:
                    1b:29:10:f6:b6:ca:5a:06:87:16:ff:fa:82:82:c9:
                    dd:a3:7d:a9:3c:7e:d5:b4:6d:26:88:4c:b1:f7:c3:
                    0d:ca:d9:a1:36:c9:8c:20:dd:90:7a:61:a0:78:d3:
                    3a:f4:09:3e:cc:ae:10:53:04:5e:97:8c:8a:48:62:
                    9b:17:ae:47:b5:3c:71:92:7b:b4:9f:34:f4:49:58:
                    aa:a0:90:3d:bf:09:0f:81:64:1c:09:98:63:fd:22:
                    4a:44:de:03:9f:5f:ba:22:e1:64:95:6d:46:27:7d:
                    f1:d4:47:bd:a6:dc:16:5f:a4:bb:5c:44:2a:8f:c7:
                    b9:e4:37:0d:bd:c2:92:70:fe:b2:64:a6:8e:2e:af:
                    f5:cd:60:d5:d4:ed:66:e7:e9:e2:0c:02:28:80:a3:
                    3a:c8:bd:89:ef:44:d5:27:ec:a4:93:fe:e1:78:a2:
                    4d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:37:6E:0C:C9:05:7F:5C:A2:F8:FB:33:BC:20:8C:BB:9A:56:F4:0C
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/42a3077947d7e047f971eeab8124d592e67ed568.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:fa:4d:21:bc:cd:dc:1d:30:07:5a:f8:1f:0a:2d:09:9f:24:
         5e:20:bd:33:d2:16:1a:16:cd:b9:c5:6c:d6:ac:b6:f7:e8:ce:
         21:12:5b:95:38:e6:f5:a5:0b:02:57:cc:7c:34:e2:61:24:7e:
         de:b6:8a:80:d8:81:44:42:01:3d:57:94:a1:ec:ec:26:1b:1d:
         14:55:1c:c0:db:d9:b2:3f:ea:d4:c1:7c:be:ab:0b:f9:95:af:
         56:a8:71:85:f0:f7:2c:e6:1a:75:46:03:cf:e3:4f:7e:87:66:
         aa:e4:22:98:98:b3:d5:2c:d0:ec:76:87:ee:4c:cd:94:2c:a2:
         30:08:02:95:39:cd:6f:6c:5e:08:09:a6:82:12:e4:d3:85:76:
         25:f9:b0:b0:ee:e2:4e:bb:dd:0e:f9:1b:73:0f:8f:85:ca:15:
         3a:37:d2:71:c4:5f:5f:42:fd:69:e3:3b:77:ad:0d:14:22:47:
         74:a2:f4:f9:34:8f:94:ea:24:07:ac:57:79:d3:f2:c7:25:22:
         8c:30:8c:dd:6e:c7:3c:9b:91:3c:3d:7c:49:98:1d:9f:27:79:
         78:60:d8:d2:7a:75:5d:31:a2:f2:53:b1:4e:e1:20:0b:ed:aa:
         2c:f6:f1:a9:23:e5:31:50:58:d8:f7:54:45:2a:ef:96:fb:c3:
         fa:75:c1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:46 2023 by rpki-client on console-ams.rpki-client.org