Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/eed83c9ec4c1e936e9077df120908d1cf960f468.roa
File:                     eed83c9ec4c1e936e9077df120908d1cf960f468.roa (raw, json)
Hash identifier:          cY36AjcNSRyva/Oz5GdYtyCPdXhOyu0qTYVbCGkhccU=
Subject key identifier:   F3:F0:07:92:DA:F0:95:BE:00:24:FC:4C:74:16:F2:BB:A5:C5:71:73
Certificate issuer:       /CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
Certificate serial:       02433A
Authority key identifier: 42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/eed83c9ec4c1e936e9077df120908d1cf960f468.roa
Signing time:             Wed 24 Mar 2021 14:48:09 +0000
ROA not before:           Wed 24 Mar 2021 14:48:09 +0000
ROA not after:            Tue 24 Mar 2026 14:48:09 +0000
asID:                     7908
IP address blocks:        161.22.32.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148282 (0x2433a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
        Validity
            Not Before: Mar 24 14:48:09 2021 GMT
            Not After : Mar 24 14:48:09 2026 GMT
        Subject: CN=eed83c9ec4c1e936e9077df120908d1cf960f468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e6:e6:5f:57:91:63:2e:23:07:99:36:d2:21:
                    07:29:10:45:1d:d9:55:67:02:c4:0f:fa:d6:c6:dc:
                    29:c6:25:6e:01:66:7b:e9:7b:37:e7:fe:a2:92:4e:
                    89:d5:eb:14:03:15:b2:27:56:0f:ea:55:85:c9:cb:
                    b1:09:59:78:43:43:f5:20:e0:03:c3:02:07:b2:42:
                    46:f2:7d:96:6d:62:f2:38:16:b1:3b:9a:e3:9e:1a:
                    fd:c8:f9:fc:01:ea:a5:93:c4:35:27:35:36:88:74:
                    af:06:7d:3f:5c:fd:20:09:34:55:b3:35:5c:d9:51:
                    67:6e:bf:d3:18:04:52:a6:a9:5a:6a:1a:9b:7f:f2:
                    fe:b9:e5:59:2d:b5:49:39:d6:e2:5d:3e:6c:ec:95:
                    dd:95:77:a5:e1:d1:17:73:20:d6:3a:8c:bd:54:d6:
                    55:dd:0b:32:7f:09:3c:4a:d6:ee:19:31:e6:b6:20:
                    0e:28:b2:69:64:3c:0b:02:4f:94:d4:23:43:85:62:
                    63:ee:3e:1c:01:4d:66:57:69:58:a0:bf:68:1f:ad:
                    a1:f8:d5:b8:d4:fc:80:1d:b9:77:07:2e:5e:30:01:
                    fc:b2:46:68:60:d0:2d:04:33:8a:2d:ed:b7:f0:eb:
                    24:f6:a4:9c:c6:5e:91:6d:6b:e3:40:60:40:67:bd:
                    c6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F0:07:92:DA:F0:95:BE:00:24:FC:4C:74:16:F2:BB:A5:C5:71:73
            X509v3 Authority Key Identifier:
                keyid:42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/eed83c9ec4c1e936e9077df120908d1cf960f468.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:d4:cd:84:44:97:9e:b2:08:5e:27:41:94:25:31:83:24:0e:
         0b:a2:46:28:31:42:be:51:20:4d:2a:c1:0b:ef:1c:70:db:46:
         76:aa:7a:22:d3:f2:56:2f:9b:37:01:e2:37:39:79:10:89:68:
         f9:e4:71:b1:83:33:53:1b:ae:44:7c:91:0c:4d:ec:e8:2f:45:
         bf:f3:a4:a4:c8:c8:e9:cd:17:03:0c:de:91:f9:a3:a0:e6:38:
         11:32:12:de:65:84:4c:35:e7:bb:5c:71:be:c9:e2:cb:a8:15:
         ac:e0:bc:4f:01:02:fe:ba:de:9f:cc:6c:19:63:50:a1:be:09:
         34:7b:75:80:ba:35:28:d2:66:08:fd:6b:07:62:a2:81:c9:64:
         ef:d2:b3:ff:bc:a5:19:ce:5a:38:a3:c4:00:71:b0:d6:0f:8f:
         81:cf:00:5f:0f:2f:0c:38:92:12:fd:71:f7:5f:d8:9a:1b:06:
         ec:c3:c5:69:4a:9e:c6:8f:18:f1:a6:f1:05:db:3a:73:0c:ad:
         92:8f:6e:6a:c6:58:ce:d9:2b:c5:e6:4a:df:e4:90:7c:85:fc:
         d2:5f:b1:ed:12:3d:dd:31:0b:18:7f:11:f8:36:81:81:69:13:
         40:2c:80:35:cb:5b:02:99:7b:ac:3f:52:3b:a4:63:41:e3:e7:
         47:4c:4f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:48 2023 by rpki-client on console-ams.rpki-client.org