Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b4342c21-5813-4eb7-a533-c2047e2eb38c/797f72dffb75c0e143b6f6e7bae4a4d00181a796.roa
File:                     797f72dffb75c0e143b6f6e7bae4a4d00181a796.roa (raw, json)
Hash identifier:          EuYphSmDSNUYmZtOLrOYVelyxPNG9dSbF42Oe201e1E=
Subject key identifier:   BF:95:7E:F9:2F:18:79:4D:2D:15:F8:0F:D0:FE:4A:FE:84:F6:41:40
Certificate issuer:       /CN=e17587a4cdec02d0d1592726772c8b9bee90f10a
Certificate serial:       0E9E4C
Authority key identifier: 98:64:4A:C3:63:0B:C4:C7:12:A9:C5:42:FA:FF:1F:39:AC:5F:34:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e17587a4cdec02d0d1592726772c8b9bee90f10a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b4342c21-5813-4eb7-a533-c2047e2eb38c/797f72dffb75c0e143b6f6e7bae4a4d00181a796.roa
Signing time:             Mon 24 May 2021 17:58:50 +0000
ROA not before:           Mon 24 May 2021 03:00:00 +0000
ROA not after:            Wed 24 May 2023 03:00:00 +0000
asID:                     32034
IP address blocks:        181.199.141.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 958028 (0xe9e4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e17587a4cdec02d0d1592726772c8b9bee90f10a
        Validity
            Not Before: May 24 03:00:00 2021 GMT
            Not After : May 24 03:00:00 2023 GMT
        Subject: CN=797f72dffb75c0e143b6f6e7bae4a4d00181a796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9d:9b:24:52:ec:1d:ec:be:c7:ca:e6:56:72:
                    db:c8:0e:70:e5:c8:e9:3f:f8:cb:9a:31:8b:f2:be:
                    4b:59:c0:c5:ec:bd:f4:f4:70:db:20:8d:99:6b:da:
                    a1:7b:58:6f:7b:ec:09:bc:98:1e:5d:f6:8e:10:93:
                    6a:65:b6:03:5c:c5:ba:74:ad:e2:ed:46:30:94:5f:
                    32:38:16:bf:a6:1f:25:f0:68:59:b8:3e:6a:e5:4c:
                    ee:97:49:59:f3:fd:1b:d5:a6:d8:d8:12:1d:28:d0:
                    55:3a:3e:ab:e8:9f:e5:8c:f4:01:89:1c:57:60:44:
                    80:14:e9:8f:cc:39:95:95:25:72:2f:bb:5f:6b:cb:
                    73:77:df:3a:6c:40:d5:ee:4a:d6:88:64:d3:50:79:
                    0f:ef:44:98:19:19:7e:f9:9f:f3:69:e4:55:48:e2:
                    73:ad:ff:e2:19:e9:59:a3:ee:57:8d:be:a1:1f:79:
                    d5:6c:aa:30:8c:0c:17:13:e4:e7:fa:8e:97:38:17:
                    98:72:00:20:a2:d6:2d:08:e2:6b:f5:37:d2:8a:ce:
                    a3:54:6f:24:6b:86:0a:c1:aa:2b:df:35:57:70:ea:
                    da:20:36:54:03:fb:f3:9a:30:db:2b:2e:75:c6:7a:
                    fe:c1:34:ad:e3:c9:56:4b:09:0e:be:df:d5:7f:fe:
                    d3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:95:7E:F9:2F:18:79:4D:2D:15:F8:0F:D0:FE:4A:FE:84:F6:41:40
            X509v3 Authority Key Identifier:
                keyid:98:64:4A:C3:63:0B:C4:C7:12:A9:C5:42:FA:FF:1F:39:AC:5F:34:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e17587a4cdec02d0d1592726772c8b9bee90f10a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b4342c21-5813-4eb7-a533-c2047e2eb38c/797f72dffb75c0e143b6f6e7bae4a4d00181a796.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b4342c21-5813-4eb7-a533-c2047e2eb38c/e17587a4cdec02d0d1592726772c8b9bee90f10a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.199.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:8b:f2:0b:79:8c:a0:b7:b5:bd:5f:64:26:17:a8:11:af:ad:
         9e:db:17:ad:e4:35:7a:6f:b7:ef:a4:ae:7d:cd:21:b3:3b:07:
         37:38:e9:6b:6d:25:23:0c:63:ea:ce:ab:8c:a7:45:82:4f:db:
         b4:33:e3:6b:b7:fd:35:6a:b1:00:6e:e0:c1:61:a0:e6:98:df:
         be:f7:15:39:1a:3f:c1:a5:66:fa:74:ca:c4:aa:c7:18:75:9c:
         68:c3:c8:49:ce:c5:d9:c6:4c:89:c7:d0:de:25:94:a3:34:62:
         e6:37:f4:1f:01:98:30:71:6d:fb:1e:4c:5f:cf:f9:85:de:2c:
         09:c3:f9:e4:19:59:d6:fb:58:c0:ae:3b:d6:d1:4a:4c:80:77:
         c8:38:e2:bd:fb:b2:2d:cf:43:aa:33:de:99:12:a6:75:64:bf:
         1e:a7:1c:3f:e0:75:26:c1:cd:55:19:a0:40:f3:5a:d0:80:4f:
         a1:10:d8:af:0d:d2:c2:37:35:c1:90:20:44:e9:96:bd:5e:4b:
         4c:e4:a4:22:8e:f2:34:32:02:f6:d2:e3:91:1c:96:4d:d8:d4:
         3c:61:15:3f:f7:7e:a7:79:ad:0f:70:18:bb:35:e2:19:fe:d6:
         b1:ac:fe:60:c6:ab:f5:c7:33:39:2c:a2:84:73:26:07:6b:35:
         6e:f1:f9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:37 2023 by rpki-client on console-fra.rpki-client.org