Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/7572cc4aa5dc558f9f6238a13666318770a7b820.roa
File:                     7572cc4aa5dc558f9f6238a13666318770a7b820.roa (raw, json)
Hash identifier:          /Dfmyl9y7TUiBs+IJQsDKLjzm1ZY+iJtZLGj/8Lu0gw=
Subject key identifier:   22:60:C7:D3:B3:EC:4D:56:7A:F9:BB:5C:83:24:2E:40:AB:BC:09:80
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       0DE71C
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/7572cc4aa5dc558f9f6238a13666318770a7b820.roa
Signing time:             Wed 24 Mar 2021 14:34:59 +0000
ROA not before:           Wed 24 Mar 2021 14:34:57 +0000
ROA not after:            Tue 24 Mar 2026 14:34:57 +0000
asID:                     3816
IP address blocks:        181.236.0.0/19 maxlen: 20
                          181.236.32.0/20 maxlen: 20
                          181.236.160.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 911132 (0xde71c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Mar 24 14:34:57 2021 GMT
            Not After : Mar 24 14:34:57 2026 GMT
        Subject: CN=7572cc4aa5dc558f9f6238a13666318770a7b820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:87:2a:2c:ed:3f:9f:72:05:34:cd:59:6a:5f:
                    96:0a:bf:98:c7:4e:66:b3:f8:8f:81:5d:f9:99:25:
                    71:c3:e5:36:0f:35:59:32:a7:ad:ee:5d:1a:06:a4:
                    32:02:f0:b9:ca:f5:6d:94:bd:30:45:f1:f9:e0:50:
                    5e:e7:da:17:2a:e1:fd:9d:cc:d3:f9:44:75:13:47:
                    9a:94:41:d2:a1:fe:d9:7d:7f:75:9f:aa:50:f7:82:
                    7f:98:c4:80:51:02:71:9b:8e:a2:f4:72:7f:ee:a5:
                    4b:3e:15:cc:da:36:72:2c:56:8a:f4:8c:5b:e6:d8:
                    e7:8d:6a:e3:47:c9:b3:ff:ff:4d:c4:e2:2a:dd:44:
                    66:4a:47:1b:5f:5c:dc:21:06:fc:76:d0:a1:1e:43:
                    5a:5d:29:e7:15:d2:51:19:42:0c:8b:8e:80:94:c5:
                    48:05:11:be:29:83:6e:39:4e:aa:6e:44:9c:b2:d9:
                    64:a3:c6:c8:b0:35:23:1f:69:c0:d4:47:74:aa:17:
                    bd:71:b1:27:22:cf:3c:71:f6:46:7b:4c:73:53:4c:
                    e9:09:0d:8d:41:9a:9f:45:8d:d1:7d:1b:f0:f6:2e:
                    e0:f8:b3:73:c5:88:c9:d9:42:e8:99:f4:d9:22:e7:
                    63:61:62:6a:5d:9a:de:88:4c:cd:90:04:fb:c4:6b:
                    f6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:60:C7:D3:B3:EC:4D:56:7A:F9:BB:5C:83:24:2E:40:AB:BC:09:80
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/7572cc4aa5dc558f9f6238a13666318770a7b820.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.236.0.0-181.236.47.255
                  181.236.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         18:b5:23:12:35:ff:7f:48:c0:64:db:36:47:dd:b3:5c:73:6a:
         37:cf:c9:97:bc:8c:86:41:1a:5b:b2:16:1e:6e:01:88:67:60:
         37:9a:16:29:33:d6:35:62:63:10:7c:c6:e0:d7:2f:8d:8b:b3:
         11:61:c3:29:e5:77:00:40:01:dd:cb:c8:02:f4:0b:8e:1e:88:
         49:ee:15:e9:fa:61:81:ce:8d:08:6c:c7:b4:ed:c9:53:98:f1:
         13:e8:23:0f:7b:f5:db:26:49:81:06:bc:8c:66:b6:11:45:17:
         d4:fd:b1:77:9e:13:a9:d6:ef:a1:f6:25:a5:39:36:dc:d8:22:
         e1:0e:80:ea:0b:24:bc:3b:ae:61:22:53:6d:e2:b3:dc:9e:08:
         b8:7d:d2:d5:05:23:69:62:15:20:82:83:63:b3:e3:54:20:9a:
         ed:02:cd:ac:2c:90:7a:82:52:4e:f9:b8:7f:5d:b3:7d:df:eb:
         b2:da:bf:8f:16:f1:22:5c:b4:9e:8b:cd:21:f0:9c:d6:3b:ea:
         01:8e:18:8c:9a:3c:74:64:ce:a5:ce:0c:64:43:76:0f:dc:1b:
         68:a0:c6:d7:b3:d0:5b:e4:8e:82:f6:55:f8:c5:a9:4d:f0:b8:
         b4:b8:86:7a:c6:93:11:43:65:0c:5e:af:d1:d6:71:d2:7b:9d:
         30:fa:0b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:53 2023 by rpki-client on console-ams.rpki-client.org