Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b6eb975e-95cc-435b-93e7-5336029da54a/efacaa8845d26fdd215bac6a11c8861b5ecc0b72.roa
File:                     efacaa8845d26fdd215bac6a11c8861b5ecc0b72.roa (raw, json)
Hash identifier:          c02IFXCF6iJrTHq+NpFH6pVWBdNwb0kKYCfOo7eOXN8=
Subject key identifier:   15:6C:C1:6A:E7:5D:4C:9B:1D:DD:C0:A5:BC:70:58:1D:13:D6:85:3E
Certificate issuer:       /CN=6e1291537c801e1886268f46675ed50433e38e93
Certificate serial:       0BA3F3
Authority key identifier: 78:2B:BB:89:A9:2C:DC:88:66:B2:A9:12:DB:EF:87:57:DA:B9:07:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e1291537c801e1886268f46675ed50433e38e93.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b6eb975e-95cc-435b-93e7-5336029da54a/efacaa8845d26fdd215bac6a11c8861b5ecc0b72.roa
Signing time:             Wed 24 Mar 2021 14:32:24 +0000
ROA not before:           Wed 24 Mar 2021 14:32:24 +0000
ROA not after:            Tue 24 Mar 2026 14:32:24 +0000
asID:                     264642
IP address blocks:        181.177.0.0/18 maxlen: 24
                          186.190.128.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 762867 (0xba3f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e1291537c801e1886268f46675ed50433e38e93
        Validity
            Not Before: Mar 24 14:32:24 2021 GMT
            Not After : Mar 24 14:32:24 2026 GMT
        Subject: CN=efacaa8845d26fdd215bac6a11c8861b5ecc0b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5c:b8:79:8e:4b:87:6c:47:50:5f:36:91:21:
                    2d:14:66:55:cb:43:37:60:f2:12:18:5a:0f:f0:fd:
                    76:0c:d1:8e:1b:4b:57:4a:c3:87:d7:f4:a2:77:5d:
                    e4:d5:53:90:55:88:c7:17:38:54:58:bb:df:3b:a1:
                    63:52:1c:e9:5f:45:6b:0a:d7:03:79:12:67:5a:51:
                    0e:9d:53:c5:43:4e:9f:21:d0:c5:cf:69:d4:02:05:
                    00:e8:d8:93:22:05:fb:59:37:a7:e6:f9:15:58:a2:
                    50:ef:76:71:58:7f:42:4f:33:d2:71:f0:7f:19:c1:
                    13:2a:64:26:12:86:06:2c:c2:32:a9:15:6c:0b:f7:
                    db:f8:cf:39:4f:81:75:7b:cc:2c:21:86:c2:bc:43:
                    e1:54:7a:b2:69:cd:ae:09:cf:dc:08:bd:f2:4f:44:
                    6e:dd:21:97:25:31:82:ab:d4:a3:2c:c0:dd:f8:95:
                    a7:4c:25:46:ac:a5:cf:9c:42:52:69:2a:e5:f4:f2:
                    ad:ea:7b:73:22:af:56:fe:15:b3:18:47:0f:02:51:
                    b9:5b:c5:b2:04:de:2d:5d:81:7f:b8:ad:20:4c:60:
                    9e:64:3d:51:c6:ef:54:69:78:b5:25:9b:c0:95:17:
                    d9:2e:1e:a1:bb:73:32:c2:de:5e:29:a4:cc:a0:3e:
                    d9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:6C:C1:6A:E7:5D:4C:9B:1D:DD:C0:A5:BC:70:58:1D:13:D6:85:3E
            X509v3 Authority Key Identifier:
                keyid:78:2B:BB:89:A9:2C:DC:88:66:B2:A9:12:DB:EF:87:57:DA:B9:07:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e1291537c801e1886268f46675ed50433e38e93.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b6eb975e-95cc-435b-93e7-5336029da54a/efacaa8845d26fdd215bac6a11c8861b5ecc0b72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b6eb975e-95cc-435b-93e7-5336029da54a/6e1291537c801e1886268f46675ed50433e38e93.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.177.0.0/18
                  186.190.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         01:e4:1f:a2:99:05:a1:62:8b:9f:b9:20:38:9c:a2:12:f2:3c:
         c7:21:64:dd:41:f0:8c:1c:55:45:4c:cb:dc:70:1b:fb:52:65:
         90:26:e1:e5:a8:68:4b:b5:17:39:b6:b9:72:74:01:ad:52:6a:
         91:c2:30:91:a5:5e:2e:ae:b8:ea:a6:ff:e5:45:0a:cd:5c:5f:
         f6:2c:dc:b2:8a:e8:30:f8:07:c0:f4:bf:f8:c2:6d:ab:80:eb:
         1f:ca:66:94:ee:48:4d:1a:eb:54:e1:a2:40:67:77:31:1a:81:
         c0:97:fe:8c:9d:33:eb:7d:8c:f5:35:a0:b3:76:e6:d8:d9:76:
         01:44:56:da:07:49:d9:78:56:29:18:ba:ec:c0:c5:2a:25:9e:
         cb:0a:ef:ad:a3:82:9a:06:52:fd:08:2d:29:39:26:47:57:3a:
         ba:27:b6:f3:8d:14:09:a1:9f:db:0c:29:b0:c5:c6:43:0b:fb:
         75:13:ce:35:15:46:e9:e2:ba:66:ce:c4:0a:28:07:35:90:07:
         87:44:5f:ba:5f:6b:2d:5f:c1:ec:84:48:cc:95:ef:82:24:87:
         e1:fc:4c:b1:0e:7e:67:93:8b:c3:ae:b0:23:d8:6e:2e:b0:65:
         a5:c5:ec:b6:2f:0e:11:0d:f4:9f:72:ec:18:d3:db:8b:48:db:
         91:43:b2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 20:54:42 2023 by rpki-client on console-fra.rpki-client.org