Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/c52c9c41983f63d4f2053d33ae1d4487163f747a.roa
File:                     c52c9c41983f63d4f2053d33ae1d4487163f747a.roa (raw, json)
Hash identifier:          cVjY+vszakFfH/vs7ccue56sTP9Gh24SrhRuukDzi1w=
Subject key identifier:   BA:08:4F:B3:34:02:15:81:62:F5:8D:20:06:56:06:EA:73:BB:D5:59
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0E6F93
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/c52c9c41983f63d4f2053d33ae1d4487163f747a.roa
Signing time:             Wed 24 Mar 2021 14:29:29 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     52323
IP address blocks:        181.16.136.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 946067 (0xe6f93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=c52c9c41983f63d4f2053d33ae1d4487163f747a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:24:52:58:6f:fc:e2:0b:09:1b:22:c3:81:27:
                    88:3d:80:73:5b:61:c2:ca:6d:2e:68:25:86:1d:4b:
                    f5:38:ff:8a:6f:ed:52:fe:0c:a8:30:fe:a8:61:fc:
                    a5:5e:2c:44:03:92:86:39:37:39:6b:70:cf:a5:9a:
                    9c:6f:bb:66:3a:c7:48:81:15:97:5d:46:10:2e:2c:
                    2a:30:7a:1d:e5:5f:fa:f1:c1:89:6b:8a:0d:7d:65:
                    91:7a:95:dc:6e:94:01:17:97:3d:af:2c:da:ca:2e:
                    bc:14:0e:ed:6c:54:c0:b9:12:50:31:55:db:e2:b1:
                    e5:5c:85:7e:8f:57:76:70:18:0e:1d:55:82:98:92:
                    29:23:d8:33:d5:b0:5c:7d:a7:52:d7:18:50:3d:c7:
                    d8:a5:a5:a2:bd:7a:38:38:94:75:4e:bb:a2:06:fd:
                    05:5c:34:65:d5:44:a9:20:89:6c:62:e2:f2:97:a5:
                    b6:b7:bf:0e:10:09:d5:08:45:eb:d8:48:7a:ae:df:
                    fd:f1:a9:c8:4d:cf:59:01:78:fb:2e:06:4b:64:f6:
                    1c:09:8b:44:b5:cd:4a:f9:17:ea:41:db:fe:83:99:
                    8a:f8:33:a9:5a:97:60:fe:c2:b2:f9:80:f1:a8:d2:
                    8b:45:59:c1:6e:97:cc:0b:9f:43:b5:dd:97:30:d9:
                    89:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:08:4F:B3:34:02:15:81:62:F5:8D:20:06:56:06:EA:73:BB:D5:59
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/c52c9c41983f63d4f2053d33ae1d4487163f747a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:b4:00:ff:68:df:24:03:3d:0b:41:49:99:fa:68:ae:d3:12:
         41:e2:a9:45:6f:dc:ca:ed:18:7f:84:f8:93:72:50:a7:a9:d8:
         5e:e0:08:22:5a:f4:ba:a0:37:9b:eb:34:b1:c0:7a:d3:16:ae:
         0f:ba:2b:e1:6d:b3:21:1e:80:47:50:34:d9:5e:5e:d5:a2:a5:
         58:a1:5f:92:58:d0:d1:13:c7:d9:af:bd:d8:fe:ec:76:61:05:
         f0:0f:e1:a2:65:d0:95:f8:4a:c2:e0:74:13:1e:f3:c7:3e:a6:
         fb:0b:a5:ad:cc:92:27:96:4f:83:d6:e2:c8:25:cf:08:1f:51:
         e3:1a:01:d7:73:ea:6d:ee:28:49:23:8f:5c:90:fa:36:6a:ff:
         87:ff:52:95:1d:95:bd:b7:3f:81:8b:57:20:c4:ce:b9:5a:00:
         81:d4:42:7d:b9:2c:ca:ff:5a:fc:e8:61:64:14:18:c2:9b:28:
         e7:34:d8:26:e9:ff:2e:bb:1d:d4:c8:6a:db:38:32:58:09:bb:
         11:cd:1c:b0:b1:e3:34:bf:6c:36:20:ec:03:91:4d:2e:16:c8:
         4a:7b:df:1f:e5:18:5e:3b:af:a5:cf:a4:13:80:07:bb:8d:55:
         6c:b8:2f:90:dd:d4:d6:86:2c:a0:7a:aa:d4:97:c3:34:2d:c1:
         e0:e6:0c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:31 2023 by rpki-client on console-fra.rpki-client.org