Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/cebac805d08fe2ac6a16e5a523c4462245ff564a.roa
File:                     cebac805d08fe2ac6a16e5a523c4462245ff564a.roa (raw, json)
Hash identifier:          97jHSKZ0qQvmbONI41TXZJN+p5Gzp0k+y8VzxS6qDSE=
Subject key identifier:   8F:8F:8D:AE:47:64:29:7B:6B:CC:1B:04:1E:B3:A1:74:43:5E:77:54
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0EDC14
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/cebac805d08fe2ac6a16e5a523c4462245ff564a.roa
Signing time:             Wed 24 Mar 2021 14:29:31 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     52323
IP address blocks:        181.16.167.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 973844 (0xedc14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=cebac805d08fe2ac6a16e5a523c4462245ff564a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:57:19:58:1b:d7:35:ea:b5:af:39:96:cd:06:
                    50:bd:84:a9:3b:c7:20:0c:a3:5c:69:fd:5f:16:44:
                    29:22:5c:f4:be:c5:67:8e:5b:d9:8a:0a:2b:cd:15:
                    f0:ee:b7:e8:2b:54:24:19:d9:6d:96:8f:b5:76:f0:
                    22:12:98:ab:74:3d:1e:e0:73:70:ed:cc:43:80:44:
                    4d:18:33:7a:06:6e:23:e2:f9:59:0b:01:61:f8:b8:
                    c5:a4:ea:08:ff:7c:1e:93:99:22:a0:b6:22:8c:e9:
                    89:e2:6d:2a:15:25:2c:1b:9a:fb:94:f6:6a:75:4a:
                    fe:6b:87:0d:b9:ce:07:d1:ca:45:54:42:6a:53:69:
                    24:38:22:07:d5:f7:95:90:0e:33:39:e7:32:5e:88:
                    7f:a6:a7:8a:f5:21:6d:66:6e:2d:83:43:82:83:58:
                    b6:ad:20:bc:a9:42:0c:3e:19:25:01:04:63:01:50:
                    ec:0a:bc:bd:c5:4f:ea:23:84:bf:b1:16:44:a8:f2:
                    08:29:d8:70:a6:a5:89:f4:23:04:e6:bf:86:87:77:
                    12:b5:22:f9:13:28:d3:1c:d2:63:9a:89:6f:35:c9:
                    49:02:3c:30:c7:32:cb:c1:23:32:76:5c:63:b8:c5:
                    8e:05:66:0d:24:fa:a3:a1:1d:a7:78:50:4f:86:3f:
                    38:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:8F:8D:AE:47:64:29:7B:6B:CC:1B:04:1E:B3:A1:74:43:5E:77:54
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/cebac805d08fe2ac6a16e5a523c4462245ff564a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:87:0d:9b:02:6b:43:16:1a:75:a5:3c:b4:ea:cb:a9:cc:c6:
         8a:16:96:60:b0:5c:38:a9:a0:89:23:e0:29:e3:74:c0:d8:d9:
         04:7c:a0:0b:62:76:9b:cf:33:a7:9a:39:56:11:d1:ee:24:d6:
         05:39:43:02:8e:46:c9:a0:96:bf:30:d5:ff:14:ec:ec:28:39:
         f1:96:dd:9d:0d:c6:d5:bd:de:e2:a8:3a:23:94:ff:20:87:88:
         4b:c3:c5:6e:68:ef:1e:de:d5:ba:48:1a:4e:2c:9f:38:66:99:
         87:45:54:81:46:e7:2d:94:00:87:ea:fa:f1:dd:e6:1c:3d:4e:
         0b:d4:8f:f8:ba:c4:25:3e:54:1e:19:ed:d6:74:08:3c:95:07:
         5b:6b:b5:8e:11:df:37:67:13:fe:00:0b:3c:45:c1:2c:4e:0e:
         5f:01:7c:2f:eb:8f:5f:3a:89:37:68:08:d9:07:2e:40:5d:1a:
         17:89:71:8f:d1:f8:49:46:c9:0e:ea:20:26:80:5e:62:84:c8:
         52:65:d2:e1:04:a9:60:59:f2:20:38:ba:93:f8:a6:ef:3f:b3:
         dd:b7:8b:c7:47:40:4d:b5:4f:19:b8:4d:37:89:84:85:11:85:
         f7:4f:0c:47:7c:33:c4:a8:44:da:92:26:6a:fa:c3:c0:5c:17:
         0b:74:8c:14
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDtwUMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ1
ZjViMzYwZjYzOTZmMzVjYWM3NmZlNzcyNzE0OGFmMmVhOTUwZDkwHhcNMjEwMzI0
MTQyOTI2WhcNMjYwMzI0MTQyOTI2WjAzMTEwLwYDVQQDEyhjZWJhYzgwNWQwOGZl
MmFjNmExNmU1YTUyM2M0NDYyMjQ1ZmY1NjRhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApVcZWBvXNeq1rzmWzQZQvYSpO8cgDKNcaf1fFkQpIlz0vsVn
jlvZigorzRXw7rfoK1QkGdltlo+1dvAiEpirdD0e4HNw7cxDgERNGDN6Bm4j4vlZ
CwFh+LjFpOoI/3wek5kioLYijOmJ4m0qFSUsG5r7lPZqdUr+a4cNuc4H0cpFVEJq
U2kkOCIH1feVkA4zOecyXoh/pqeK9SFtZm4tg0OCg1i2rSC8qUIMPhklAQRjAVDs
Cry9xU/qI4S/sRZEqPIIKdhwpqWJ9CME5r+Gh3cStSL5EyjTHNJjmolvNclJAjww
xzLLwSMydlxjuMWOBWYNJPqjoR2neFBPhj84bQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFI+Pja5HZCl7a8wbBB6zoXRDXndUMB8GA1UdIwQYMBaAFDhm0VThBCuywxEi
OWrLDWDwet3JMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDVmNWIz
NjBmNjM5NmYzNWNhYzc2ZmU3NzI3MTQ4YWYyZWE5NTBkOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTY0YjYwODgtODVhNi00MzYzLWExMWYtMjBkNzI1
YmJhM2Y3L2NlYmFjODA1ZDA4ZmUyYWM2YTE2ZTVhNTIzYzQ0NjIyNDVmZjU2NGEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NjRiNjA4OC04NWE2LTQzNjMtYTExZi0yMGQ3
MjViYmEzZjcvZDVmNWIzNjBmNjM5NmYzNWNhYzc2ZmU3NzI3MTQ4YWYyZWE5NTBk
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALUQpzANBgkqhkiG9w0BAQsFAAOCAQEAdYcNmwJrQxYadaU8
tOrLqczGihaWYLBcOKmgiSPgKeN0wNjZBHygC2J2m88zp5o5VhHR7iTWBTlDAo5G
yaCWvzDV/xTs7Cg58ZbdnQ3G1b3e4qg6I5T/IIeIS8PFbmjvHt7VukgaTiyfOGaZ
h0VUgUbnLZQAh+r68d3mHD1OC9SP+LrEJT5UHhnt1nQIPJUHW2u1jhHfN2cT/gAL
PEXBLE4OXwF8L+uPXzqJN2gI2QcuQF0aF4lxj9H4SUbJDuogJoBeYoTIUmXS4QSp
YFnyIDi6k/im7z+z3beLx0dATbVPGbhNN4mEhRGF908MR3wzxKhE2pImavrDwFwX
C3SMFA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:46 2023 by rpki-client on console-ams.rpki-client.org