Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/ef2ed4aa7aae0a418a75389fddeb8cd221156277.roa
File:                     ef2ed4aa7aae0a418a75389fddeb8cd221156277.roa (raw, json)
Hash identifier:          A2Wy3xSXTtXyGHmHO8Z7Js2ur+wB8Xx2w9VsRuXUR1o=
Subject key identifier:   85:E7:4C:0B:A5:82:93:D7:6A:81:5D:AC:42:2E:9C:04:0E:9E:18:38
Certificate issuer:       /CN=337d330947d264c81b4503df3b1ef67d45cc2dc4
Certificate serial:       1D06F7
Authority key identifier: 61:B6:8D:FD:87:EB:CE:D6:CA:2B:24:E2:AA:8F:F7:07:DA:63:5E:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/337d330947d264c81b4503df3b1ef67d45cc2dc4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/ef2ed4aa7aae0a418a75389fddeb8cd221156277.roa
Signing time:             Mon 03 Oct 2022 13:52:27 +0000
ROA not before:           Wed 24 Mar 2021 14:36:23 +0000
ROA not after:            Tue 24 Mar 2026 14:36:23 +0000
asID:                     3816
IP address blocks:        186.183.232.0/23 maxlen: 23
                          186.183.240.0/22 maxlen: 22
                          186.183.254.0/23 maxlen: 23
                          190.13.16.0/21 maxlen: 21
                          190.13.48.0/21 maxlen: 21
                          190.13.56.0/21 maxlen: 21
                          190.96.136.0/21 maxlen: 21
                          190.96.144.0/21 maxlen: 21
                          190.96.152.0/21 maxlen: 21
                          190.96.184.0/21 maxlen: 21
                          190.96.200.0/21 maxlen: 21
                          190.96.224.0/21 maxlen: 21
                          190.96.232.0/21 maxlen: 21
                          190.96.240.0/21 maxlen: 21
                          190.96.248.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1902327 (0x1d06f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337d330947d264c81b4503df3b1ef67d45cc2dc4
        Validity
            Not Before: Mar 24 14:36:23 2021 GMT
            Not After : Mar 24 14:36:23 2026 GMT
        Subject: CN=ef2ed4aa7aae0a418a75389fddeb8cd221156277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:e0:11:a8:40:7a:cc:18:54:6a:3b:73:bb:48:
                    eb:63:ba:ac:43:f7:f3:f0:ca:71:22:d8:35:77:d3:
                    d9:e3:34:b9:1b:87:3b:a1:f3:7f:0d:df:5e:4b:55:
                    3c:d2:1b:dd:3d:b2:79:6a:a5:1e:03:db:0c:35:b7:
                    0f:26:67:a0:d1:b6:b1:e0:05:79:74:af:43:00:45:
                    c6:59:8e:af:f3:f2:86:3c:a7:5f:97:30:b1:51:e5:
                    cd:f4:5f:b0:2b:9d:3e:f3:4e:93:73:96:9a:f2:d7:
                    79:72:32:34:cb:75:d5:3e:f4:46:c3:15:99:31:45:
                    33:ef:48:ca:25:3f:f9:c0:07:9f:4d:b8:31:ec:a7:
                    c1:0d:e8:06:29:31:74:7a:fa:8b:5e:6f:24:8e:89:
                    d0:7e:52:01:8f:d3:0a:46:e1:54:77:ff:8b:b6:ae:
                    b9:1f:90:4a:26:4b:47:3c:08:24:7d:f2:5b:48:a7:
                    af:ea:c3:02:8c:82:29:b0:66:f0:35:e8:1f:0d:05:
                    b4:8f:ec:be:be:ca:04:72:98:a8:d5:e6:8d:98:6c:
                    99:40:5d:ab:17:ea:a1:30:30:b5:52:07:19:85:90:
                    f1:96:64:76:cd:5c:e9:8a:6d:a7:c7:34:a0:f0:19:
                    c1:0f:13:b4:f8:21:7b:c5:34:9e:98:43:ba:4e:28:
                    18:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E7:4C:0B:A5:82:93:D7:6A:81:5D:AC:42:2E:9C:04:0E:9E:18:38
            X509v3 Authority Key Identifier:
                keyid:61:B6:8D:FD:87:EB:CE:D6:CA:2B:24:E2:AA:8F:F7:07:DA:63:5E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/337d330947d264c81b4503df3b1ef67d45cc2dc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/ef2ed4aa7aae0a418a75389fddeb8cd221156277.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/337d330947d264c81b4503df3b1ef67d45cc2dc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.183.232.0/23
                  186.183.240.0/22
                  186.183.254.0/23
                  190.13.16.0/21
                  190.13.48.0/20
                  190.96.136.0-190.96.159.255
                  190.96.184.0/21
                  190.96.200.0/21
                  190.96.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         be:84:1d:e0:04:7e:da:a2:da:28:64:d5:b4:51:d6:07:4c:5e:
         45:a8:c1:34:12:4f:c4:fa:ef:60:89:e1:02:c5:f4:63:72:b7:
         cd:61:e1:03:0b:9a:85:61:8c:55:dd:9b:70:b2:ad:06:08:53:
         ed:3f:4b:a8:e9:0d:cb:b2:a4:d7:9f:4d:a0:8a:dc:ae:82:a3:
         d2:1e:bf:75:1a:6c:41:ea:94:12:90:37:d1:e1:de:ba:5b:05:
         bf:22:fe:bb:48:78:28:48:dd:48:53:87:24:40:3f:02:24:03:
         7e:cb:a7:a9:92:ae:d5:29:af:3f:a5:17:59:63:49:bf:a1:2f:
         fa:c1:ba:9a:4e:41:35:b4:14:eb:6c:26:37:b2:d6:9b:35:5a:
         f5:80:2e:10:12:bb:a7:f3:d0:8f:7e:15:61:3f:b6:b3:97:71:
         fd:1a:0f:51:59:2d:0e:76:7c:1b:27:68:4c:0a:d3:ce:37:19:
         f8:70:88:be:14:e9:e9:9f:10:5c:6a:33:4c:dd:81:ad:1b:9a:
         a4:31:17:df:e9:69:90:f8:97:12:7b:02:4e:0d:6a:3c:a2:ed:
         7f:d1:b4:86:8c:b5:7b:76:47:cc:2c:47:5b:a6:0e:23:01:cf:
         82:38:21:aa:f4:23:86:c8:d6:a5:c3:c7:37:7c:e6:d9:43:9c:
         9e:49:22:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:51 2023 by rpki-client on console-ams.rpki-client.org