Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b6e2f395-b648-4842-80a7-8d854912bf23/e5fc18f63977e43a6d35b77a5e5eaa2e56ab30dc.roa
File:                     e5fc18f63977e43a6d35b77a5e5eaa2e56ab30dc.roa (raw, json)
Hash identifier:          JylL+/a2FZ+1UIIBK2yCGl4Hg+1dAFS3HF2XZAqAtJ0=
Subject key identifier:   DC:2A:35:07:22:09:59:BF:9F:6E:0B:1D:3F:BA:1E:6E:59:A8:0A:9E
Certificate issuer:       /CN=7daee1404660d04caeac4117f6572e478edbda00
Certificate serial:       1B123E
Authority key identifier: 97:9A:00:E1:38:42:91:5F:D5:A8:D7:8F:92:D0:F4:95:2F:8A:D8:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7daee1404660d04caeac4117f6572e478edbda00.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b6e2f395-b648-4842-80a7-8d854912bf23/e5fc18f63977e43a6d35b77a5e5eaa2e56ab30dc.roa
Signing time:             Tue 21 Nov 2023 00:34:17 +0000
ROA not before:           Tue 21 Nov 2023 00:34:17 +0000
ROA not after:            Fri 21 Nov 2025 00:34:17 +0000
asID:                     64123
IP address blocks:        186.148.224.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1774142 (0x1b123e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7daee1404660d04caeac4117f6572e478edbda00
        Validity
            Not Before: Nov 21 00:34:17 2023 GMT
            Not After : Nov 21 00:34:17 2025 GMT
        Subject: CN=e5fc18f63977e43a6d35b77a5e5eaa2e56ab30dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9c:aa:1d:96:a1:47:95:b4:30:b8:17:3c:a3:
                    7e:4a:65:8b:90:67:c4:6d:9c:e0:a3:76:a4:ea:c3:
                    0b:83:f9:1b:25:22:b0:7c:b7:33:c7:e3:56:a5:80:
                    8d:30:0d:58:47:14:7f:bb:e6:cf:e6:c1:4f:2e:08:
                    40:bf:04:7c:f2:d1:81:aa:5a:5e:a1:b7:47:f2:17:
                    1e:85:be:cf:1b:0e:bf:65:cf:95:c9:1d:4d:66:f8:
                    87:1a:15:81:de:79:17:a7:47:75:ad:2d:bd:89:be:
                    97:40:aa:32:21:3d:06:72:e4:b9:49:69:7a:1c:c2:
                    00:02:78:49:e1:99:04:c6:40:b7:0a:73:03:4c:be:
                    ec:1e:c1:23:79:1f:79:99:14:a0:0d:75:60:0e:05:
                    e9:d8:7a:29:78:7e:6e:0c:e5:e8:88:82:29:04:62:
                    4a:62:ca:cf:3b:f2:35:53:88:39:47:72:f9:54:f1:
                    1a:20:42:57:3e:eb:47:26:e3:28:50:81:22:19:d1:
                    b6:b7:ee:c6:56:10:40:b2:b4:e1:46:a2:d2:64:36:
                    ef:1f:03:4c:f6:3d:a0:ca:ae:4c:95:6d:dc:72:8c:
                    ec:48:29:97:0d:8f:56:1f:2a:d9:a8:ba:7a:a6:eb:
                    79:1f:ee:62:25:63:ae:da:1e:21:18:56:37:5f:7c:
                    44:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:2A:35:07:22:09:59:BF:9F:6E:0B:1D:3F:BA:1E:6E:59:A8:0A:9E
            X509v3 Authority Key Identifier:
                keyid:97:9A:00:E1:38:42:91:5F:D5:A8:D7:8F:92:D0:F4:95:2F:8A:D8:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7daee1404660d04caeac4117f6572e478edbda00.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b6e2f395-b648-4842-80a7-8d854912bf23/e5fc18f63977e43a6d35b77a5e5eaa2e56ab30dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b6e2f395-b648-4842-80a7-8d854912bf23/7daee1404660d04caeac4117f6572e478edbda00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:bb:d5:9c:db:f7:63:86:1b:c2:ba:86:ae:dd:f8:ca:94:56:
         71:58:bb:b9:52:91:3a:71:54:76:70:d4:4f:4c:37:a8:06:d9:
         fb:47:df:b9:85:ea:fa:b5:79:5f:94:9a:c4:29:d5:f3:be:99:
         4e:22:90:39:e7:23:e1:48:7b:95:77:07:cc:06:ee:94:89:29:
         2b:e9:76:ca:ce:6e:f5:f1:0d:45:f4:8b:b6:1f:db:83:78:8c:
         93:98:9f:fe:d1:6d:a4:d7:44:28:ce:c9:73:ef:97:4e:2f:4d:
         3b:be:a8:b2:21:99:1e:fc:80:38:5d:e5:c0:9c:92:a2:15:69:
         12:c4:2e:fd:f1:66:e1:ba:f9:52:95:45:e4:36:b0:08:33:8c:
         87:de:6a:d9:c8:6f:02:81:02:9a:9b:61:59:de:dd:bf:ac:10:
         7a:69:e1:d6:2d:1e:ca:75:4e:d7:2f:7d:62:fb:4a:4b:a7:a9:
         16:86:24:7f:b3:c2:57:e2:8a:d6:46:0c:df:56:20:6d:4e:98:
         1f:33:98:44:0b:81:73:a7:f0:40:60:6d:7b:2f:f9:8a:22:f9:
         5f:a1:fe:77:b8:30:1b:de:b7:2e:3d:49:24:35:0c:85:21:ec:
         ab:b2:4b:a4:84:a4:85:bb:56:3e:f4:5d:9e:c4:4d:3a:17:ec:
         42:70:bd:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 26 21:45:27 2023 by rpki-client on console-fra.rpki-client.org