Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/6be1abe7a17e9033e71326d2a975570e8030ec2d.roa
File:                     6be1abe7a17e9033e71326d2a975570e8030ec2d.roa (raw, json)
Hash identifier:          qI4v1zZ0ny5ivwYFMPnlyTSETAjKHBEY6ez/nqku1r0=
Subject key identifier:   88:D9:3D:46:19:A3:46:33:AC:D2:37:9D:A3:7F:D6:49:2F:BD:74:CC
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0E7349
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/6be1abe7a17e9033e71326d2a975570e8030ec2d.roa
Signing time:             Wed 24 Mar 2021 14:29:29 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     52323
IP address blocks:        181.16.145.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 947017 (0xe7349)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=6be1abe7a17e9033e71326d2a975570e8030ec2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0d:37:d5:e1:8f:8b:5d:14:40:a1:27:fd:8a:
                    89:95:98:6c:98:60:62:56:07:4e:db:b6:38:37:e8:
                    9e:36:c3:c6:56:53:c6:be:d1:34:c2:54:40:d4:86:
                    8b:3a:7d:5b:b5:44:80:5d:72:c4:dc:8f:83:f4:80:
                    d5:04:35:f0:7d:48:6f:6e:4f:e7:28:39:a7:86:49:
                    53:d1:89:7c:e4:1c:b3:59:ff:ff:18:8d:5a:62:86:
                    80:a3:6e:e7:b7:8d:26:ab:9a:f9:ea:e8:e1:df:3d:
                    77:be:b6:98:0b:d4:b4:db:bb:b6:24:89:a3:12:de:
                    c5:63:8c:03:5b:ca:f3:8f:07:f5:ac:99:4f:2f:cf:
                    75:cb:32:3e:35:13:71:b4:e0:46:48:43:4d:a5:73:
                    9e:ba:ad:ad:3d:32:7d:f9:2a:16:a5:7c:68:98:aa:
                    e8:14:88:2b:32:14:56:40:52:b2:38:4d:f1:62:02:
                    ea:fb:79:30:a8:8c:72:4f:42:8b:57:dc:dd:49:c8:
                    5b:1e:d2:aa:b4:4e:12:89:8d:3c:0d:f5:f7:a5:43:
                    9f:93:a5:17:ff:dd:6b:a4:88:9b:ef:fe:1b:98:8f:
                    a1:82:70:c2:df:a2:af:51:c1:09:f6:48:e0:a9:d8:
                    da:d1:0f:5d:84:a0:6a:29:af:75:22:70:77:f7:1c:
                    d5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D9:3D:46:19:A3:46:33:AC:D2:37:9D:A3:7F:D6:49:2F:BD:74:CC
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/6be1abe7a17e9033e71326d2a975570e8030ec2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:ad:b1:a6:23:a0:ac:f9:f4:76:97:45:fd:c7:4d:06:4d:67:
         d9:51:a4:2c:8c:7d:87:8c:14:a0:eb:4f:b2:4f:62:6f:a0:87:
         f4:dc:43:03:f6:f1:36:ef:c7:54:1c:a3:34:2b:31:0f:84:47:
         1f:2a:85:47:c1:bd:39:9c:6f:07:5a:5f:99:f8:b6:74:eb:24:
         ee:a3:66:dc:c5:b1:3c:49:8c:57:a2:8b:30:1b:cb:d0:94:38:
         76:56:12:d2:2a:b0:33:ee:73:99:4c:c4:bd:3c:66:6b:7b:90:
         3b:7b:8b:15:c4:86:36:38:51:a5:de:b2:82:28:ce:c5:4a:a3:
         ee:1e:55:66:94:c8:34:6e:1a:1b:6e:f0:6f:b2:63:92:cc:96:
         b2:0b:fe:94:33:c5:91:43:93:93:74:7f:0c:db:53:c9:43:4b:
         cc:29:2d:26:a2:72:4e:56:c0:4b:38:fe:55:0b:21:65:bd:78:
         b2:78:2f:51:ec:4c:20:77:8c:48:a1:93:7c:28:b0:b9:e3:46:
         d5:64:ab:62:6e:18:34:40:5c:b2:bd:56:19:ec:c8:13:a3:a9:
         2e:c5:e4:a3:61:9c:54:c3:94:89:1d:86:7e:ec:e4:58:73:2b:
         d3:15:fb:10:db:da:99:cd:cf:b1:04:2f:08:d7:2f:6a:90:81:
         2e:63:d1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:46 2023 by rpki-client on console-ams.rpki-client.org