Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/4592d8f54461a99db50dd0ab686a9ffa8c46b862.roa
File:                     4592d8f54461a99db50dd0ab686a9ffa8c46b862.roa (raw, json)
Hash identifier:          TDPtzW98wxICOAGWvbK/IRetVqvBCXQwUkgOLJjAStg=
Subject key identifier:   83:B7:BE:A1:1B:AF:DD:B0:84:7D:BC:16:4C:6A:D5:CA:B5:1C:33:9B
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0ECC2E
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/4592d8f54461a99db50dd0ab686a9ffa8c46b862.roa
Signing time:             Wed 24 Mar 2021 14:29:31 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     52323
IP address blocks:        181.16.143.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 969774 (0xecc2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=4592d8f54461a99db50dd0ab686a9ffa8c46b862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9b:8e:e5:b7:45:ed:ea:8c:74:a2:75:31:e8:
                    65:86:49:cf:7f:d1:30:d1:93:e9:95:a9:16:73:c2:
                    2e:24:56:3f:28:9f:04:31:53:36:f8:a3:a8:b5:35:
                    08:b8:0e:12:ce:a3:4e:2d:70:76:eb:f3:71:77:45:
                    01:b8:17:2b:89:97:60:03:67:1c:1a:83:91:3f:2c:
                    79:b1:80:19:d4:22:83:74:80:95:64:0a:1d:01:77:
                    16:4d:30:ff:42:eb:1d:6a:56:98:1b:7e:03:91:dd:
                    b8:f7:3a:41:c1:28:72:6f:cd:cc:1c:ea:dc:70:ef:
                    d6:85:f7:d6:56:78:5f:37:f1:97:7f:40:65:f8:c4:
                    1a:4b:63:7a:ed:99:d0:d1:7d:14:f5:2c:77:98:1f:
                    c6:3d:57:c4:f9:87:af:de:dd:34:92:93:51:eb:be:
                    eb:15:1f:22:31:d2:b0:99:65:11:09:2d:9b:2b:d3:
                    91:e6:67:c5:2e:11:ba:3f:d2:2d:23:5c:eb:96:98:
                    09:20:b0:c8:41:04:93:44:f7:fc:c9:54:19:26:e4:
                    8b:f6:7b:b9:68:07:d4:92:9b:f8:72:04:ae:76:5e:
                    ac:52:06:c5:7f:b3:fb:d8:8a:e9:ce:25:a7:85:34:
                    84:5d:af:7b:70:da:66:1d:62:3c:83:7b:52:74:4a:
                    66:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B7:BE:A1:1B:AF:DD:B0:84:7D:BC:16:4C:6A:D5:CA:B5:1C:33:9B
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/4592d8f54461a99db50dd0ab686a9ffa8c46b862.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:2e:b0:a9:dc:ba:93:9b:f2:8f:d8:52:4b:54:a5:84:b3:a5:
         a3:8d:ae:9b:3d:aa:36:c5:d6:44:13:10:a5:ae:05:98:7e:a5:
         07:69:44:31:51:73:af:a4:4e:fb:53:82:bd:96:f6:35:25:95:
         cd:4c:39:a7:75:95:3d:f1:1b:26:c8:bf:f7:96:14:9e:69:fc:
         b6:8a:e5:f3:ef:0b:29:b3:ee:ef:f7:3a:c1:c8:7c:d2:70:18:
         1b:c7:1e:21:3d:57:9f:3c:0b:f0:6d:f3:af:be:e8:a4:05:ae:
         11:7a:96:cd:cb:6f:0a:1e:fa:a9:a3:2a:25:c6:fc:bb:ec:ee:
         09:2c:4f:81:f0:06:0e:bb:66:44:8e:8d:c9:3f:60:13:b4:f9:
         da:ba:3e:1b:46:65:c4:f6:0a:f8:bb:74:73:6e:c4:cf:e1:53:
         cc:58:c2:ae:8e:4b:c3:33:bb:5d:1c:05:a5:c0:f3:e2:f1:54:
         d7:7a:f7:58:1c:d0:e2:31:37:d0:68:f9:78:6c:59:23:8b:87:
         ee:71:ea:f8:4b:94:68:4e:97:ff:4d:bf:17:3f:39:17:bd:80:
         0f:ef:87:ec:ec:25:e1:25:2f:32:09:aa:ff:bf:50:05:b8:56:
         85:62:8d:21:91:9d:2f:ea:c5:ff:90:ef:65:34:10:67:d9:f9:
         5b:4d:54:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:46 2023 by rpki-client on console-ams.rpki-client.org