Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/7ed18f638448ac19caaab42a1a121cc0fc77e24e.roa
File:                     7ed18f638448ac19caaab42a1a121cc0fc77e24e.roa (raw, json)
Hash identifier:          JHgIOhpL4motba0ngwWYZBFGtgl0b2vbvjOZQxATkfg=
Subject key identifier:   15:AB:67:3E:A4:AD:9C:3C:69:98:F5:48:86:F1:A5:75:16:A5:17:99
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       124C53
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/7ed18f638448ac19caaab42a1a121cc0fc77e24e.roa
Signing time:             Tue 03 Aug 2021 14:32:49 +0000
ROA not before:           Tue 03 Aug 2021 03:00:00 +0000
ROA not after:            Thu 03 Aug 2023 03:00:00 +0000
asID:                     52323
IP address blocks:        181.16.171.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1199187 (0x124c53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Aug  3 03:00:00 2021 GMT
            Not After : Aug  3 03:00:00 2023 GMT
        Subject: CN=7ed18f638448ac19caaab42a1a121cc0fc77e24e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:02:14:58:cf:cd:9d:7f:12:29:ee:f8:2d:88:
                    80:a4:5b:22:1f:ba:cb:0d:ae:44:2f:82:e8:8d:1f:
                    5d:60:0a:04:ef:79:1d:e1:7e:15:d8:f3:13:e3:b0:
                    c3:48:bc:05:ef:d2:c8:d7:65:1e:8f:d7:50:37:3d:
                    2d:1a:7e:a9:80:f3:bf:2b:1a:ee:a4:fc:b3:27:be:
                    64:49:0e:5d:c5:94:b2:b2:c8:02:d7:9e:0a:49:e9:
                    e2:0e:7e:68:ca:6e:5b:6f:a7:23:02:f9:24:ef:e9:
                    1d:b5:4a:1d:8a:60:92:d3:72:ce:9e:e0:3d:5f:9f:
                    6e:07:cc:d5:66:73:54:30:33:35:d3:04:2c:0c:39:
                    02:c7:a1:ec:73:c5:b6:1e:70:fd:45:f8:6e:6a:88:
                    3e:ef:8b:1e:e0:1c:0b:bc:a6:62:bb:13:02:d1:05:
                    f9:dd:7e:44:f4:e9:77:b9:0f:55:01:4b:c2:f0:56:
                    f3:7f:5d:a3:23:ea:48:2d:50:42:0e:46:d1:5a:c3:
                    67:5b:7a:99:f2:9a:ea:85:a5:a2:69:12:98:9f:1e:
                    d9:b3:60:f8:6e:60:98:37:f3:08:3e:98:61:3c:d0:
                    d0:b6:57:3e:2c:95:8c:cc:5d:89:d2:2d:85:f1:99:
                    01:fa:2f:ac:56:71:0b:5d:10:da:2f:02:1a:54:4e:
                    68:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:AB:67:3E:A4:AD:9C:3C:69:98:F5:48:86:F1:A5:75:16:A5:17:99
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/7ed18f638448ac19caaab42a1a121cc0fc77e24e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:36:85:96:2b:3d:30:0f:1a:f2:e5:96:f3:cd:d5:02:f3:c7:
         b0:e7:5a:a0:fa:bc:63:c7:49:db:19:56:72:f8:7b:ea:a2:74:
         36:6a:57:a0:4f:27:51:4d:49:95:bf:05:c0:c1:94:b3:f3:fa:
         26:c0:a6:49:33:de:fb:0d:26:92:ce:14:51:d2:39:ab:e8:2e:
         69:4e:ca:2d:4a:1e:08:60:f3:31:45:60:01:43:38:56:e2:33:
         7d:64:72:d7:6d:de:96:ea:74:4f:d0:64:5e:f4:4f:26:20:93:
         26:ba:3e:95:16:04:12:4c:72:8d:dc:19:c2:35:7e:de:7a:f0:
         33:75:ca:e8:d5:66:83:2b:27:c6:75:30:56:f7:d2:f2:62:01:
         a5:48:c5:ac:4b:46:68:c9:36:4b:de:f3:77:ee:e1:5e:bc:c5:
         17:6a:6c:a2:26:3d:46:44:a2:4b:e5:fc:76:27:f0:23:3b:06:
         47:a5:ca:98:98:f3:7b:b6:c7:14:f9:67:1d:d7:3e:98:f7:1a:
         37:87:a8:61:b9:a7:65:d5:3c:9e:71:cf:d9:a5:4f:cb:50:af:
         72:f2:bc:58:9a:a9:ab:4e:ed:7b:bf:a8:e0:48:31:39:f9:88:
         d3:81:9d:be:0a:d7:e9:fc:6e:74:ff:ba:54:9c:6f:44:83:2c:
         93:fe:73:13
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEkxTMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ1
ZjViMzYwZjYzOTZmMzVjYWM3NmZlNzcyNzE0OGFmMmVhOTUwZDkwHhcNMjEwODAz
MDMwMDAwWhcNMjMwODAzMDMwMDAwWjAzMTEwLwYDVQQDEyg3ZWQxOGY2Mzg0NDhh
YzE5Y2FhYWI0MmExYTEyMWNjMGZjNzdlMjRlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvAIUWM/NnX8SKe74LYiApFsiH7rLDa5EL4LojR9dYAoE73kd
4X4V2PMT47DDSLwF79LI12Uej9dQNz0tGn6pgPO/KxrupPyzJ75kSQ5dxZSyssgC
154KSeniDn5oym5bb6cjAvkk7+kdtUodimCS03LOnuA9X59uB8zVZnNUMDM10wQs
DDkCx6Hsc8W2HnD9Rfhuaog+74se4BwLvKZiuxMC0QX53X5E9Ol3uQ9VAUvC8Fbz
f12jI+pILVBCDkbRWsNnW3qZ8prqhaWiaRKYnx7Zs2D4bmCYN/MIPphhPNDQtlc+
LJWMzF2J0i2F8ZkB+i+sVnELXRDaLwIaVE5oqwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBWrZz6krZw8aZj1SIbxpXUWpReZMB8GA1UdIwQYMBaAFDhm0VThBCuywxEi
OWrLDWDwet3JMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDVmNWIz
NjBmNjM5NmYzNWNhYzc2ZmU3NzI3MTQ4YWYyZWE5NTBkOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTY0YjYwODgtODVhNi00MzYzLWExMWYtMjBkNzI1
YmJhM2Y3LzdlZDE4ZjYzODQ0OGFjMTljYWFhYjQyYTFhMTIxY2MwZmM3N2UyNGUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NjRiNjA4OC04NWE2LTQzNjMtYTExZi0yMGQ3
MjViYmEzZjcvZDVmNWIzNjBmNjM5NmYzNWNhYzc2ZmU3NzI3MTQ4YWYyZWE5NTBk
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALUQqzANBgkqhkiG9w0BAQsFAAOCAQEAMDaFlis9MA8a8uWW
883VAvPHsOdaoPq8Y8dJ2xlWcvh76qJ0NmpXoE8nUU1Jlb8FwMGUs/P6JsCmSTPe
+w0mks4UUdI5q+guaU7KLUoeCGDzMUVgAUM4VuIzfWRy123elup0T9BkXvRPJiCT
Jro+lRYEEkxyjdwZwjV+3nrwM3XK6NVmgysnxnUwVvfS8mIBpUjFrEtGaMk2S97z
d+7hXrzFF2psoiY9RkSiS+X8difwIzsGR6XKmJjze7bHFPlnHdc+mPcaN4eoYbmn
ZdU8nnHP2aVPy1CvcvK8WJqpq07te7+o4EgxOfmI04GdvgrX6fxudP+6VJxvRIMs
k/5zEw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:31 2023 by rpki-client on console-fra.rpki-client.org