Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/a5ca56df7ed3e1c5ceb059afe8b2dd84143bc9a4.roa
File:                     a5ca56df7ed3e1c5ceb059afe8b2dd84143bc9a4.roa (raw, json)
Hash identifier:          t2B4lGUGG5bvWdn5MtvFqhi2olBa/DCp1rPJ9Ba/Jpg=
Subject key identifier:   64:74:17:39:CF:5A:06:4C:A9:5E:80:91:48:D1:7A:F1:64:93:99:C2
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0EAAB0
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/a5ca56df7ed3e1c5ceb059afe8b2dd84143bc9a4.roa
Signing time:             Wed 24 Mar 2021 14:29:30 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     52323
IP address blocks:        181.16.178.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 961200 (0xeaab0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=a5ca56df7ed3e1c5ceb059afe8b2dd84143bc9a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c9:a0:16:46:2a:70:67:7a:56:5c:ca:76:4d:
                    fb:b7:e1:e0:ff:ec:56:c1:71:d2:27:6d:02:f1:57:
                    4d:c5:c9:a9:d0:2f:4e:ea:40:5f:a4:ad:62:0b:2c:
                    2c:e5:30:62:de:79:40:5e:1f:bd:ba:db:d5:62:16:
                    67:95:10:2c:8f:6b:6f:20:1a:6d:a0:3d:cd:ec:53:
                    ab:7a:49:3d:f2:70:68:93:c2:40:c0:bb:fa:5b:1b:
                    db:e7:29:f2:3c:66:f4:31:8d:63:e2:7e:eb:e3:96:
                    13:9d:a6:04:6e:ff:b3:65:be:cf:a0:0c:f2:5a:a5:
                    b5:9d:61:53:4b:4c:59:af:5d:b1:8f:bd:0d:2d:53:
                    78:f4:15:7e:32:b4:0a:54:2d:ce:8c:65:75:57:85:
                    12:ea:60:11:61:2d:77:64:fb:c5:5d:7a:78:73:f1:
                    cc:66:31:44:97:86:4a:ce:48:42:25:4d:cd:9b:bd:
                    9d:06:26:b6:0c:0b:ab:7d:09:39:e2:2e:02:3e:71:
                    31:85:cf:d0:b1:5f:aa:c5:51:78:02:ac:f0:1d:f5:
                    e8:4e:3a:bf:9c:74:19:2c:28:1b:b9:e3:8a:26:5d:
                    f7:7d:33:40:7a:a9:aa:35:23:8b:a2:42:a7:c7:98:
                    a3:78:44:34:e7:14:25:24:f4:31:d7:15:8a:0f:fd:
                    72:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:74:17:39:CF:5A:06:4C:A9:5E:80:91:48:D1:7A:F1:64:93:99:C2
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/a5ca56df7ed3e1c5ceb059afe8b2dd84143bc9a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:39:34:f3:df:3a:07:a0:23:23:c9:2f:51:76:df:6f:ae:78:
         d2:5e:cc:99:dd:fd:7d:02:4e:6e:16:b8:4b:be:68:81:e1:43:
         15:f4:57:56:c3:c3:1b:82:a8:e1:b6:34:0e:6f:04:b4:49:0c:
         b4:b2:b1:88:1a:39:20:74:f0:47:4a:64:f8:9a:3d:3d:06:ad:
         26:b1:67:cd:6f:1f:14:e1:d7:69:e0:96:97:c7:42:9e:71:28:
         be:d2:a5:eb:85:a5:50:25:d7:ef:e9:bf:42:db:d9:77:64:1d:
         61:f2:21:1e:58:6f:d8:20:d8:bd:a1:a0:29:92:90:20:b1:48:
         d8:17:37:d5:94:d0:3f:a2:ff:f3:44:49:27:c6:ab:cc:b7:30:
         8e:b3:eb:9f:4b:f4:38:be:22:c6:2c:91:21:d7:41:61:a1:09:
         bb:1c:4c:fb:c3:d7:ca:85:8c:f8:fa:7f:a1:50:e4:5e:ea:20:
         32:7f:fa:06:2f:00:c7:14:36:2e:95:1f:8b:d1:20:b1:dc:ef:
         36:75:8a:ca:0a:24:50:78:bb:71:93:97:7c:a8:c7:fd:d8:c5:
         bf:b0:d1:bc:9c:55:59:b5:49:ba:13:aa:01:cb:e8:7d:32:7e:
         dd:30:21:e3:e9:f8:19:da:98:d5:38:07:1a:22:9b:5c:d6:f1:
         df:7b:c7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:31 2023 by rpki-client on console-fra.rpki-client.org