Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d0fc6cda-e55e-4753-9c1b-3d65fa12c009/ea26dfe7c64676449f9519fca54af90bf6c99931.roa
File:                     ea26dfe7c64676449f9519fca54af90bf6c99931.roa (raw, json)
Hash identifier:          ZO0WRc2f7jvBIMTtE6PRX0qrge2vBKTDM3s8Z2e9Y1c=
Subject key identifier:   E0:5E:30:5B:94:14:CE:93:AF:C2:C7:D3:92:D0:03:D5:DF:30:32:11
Certificate issuer:       /CN=2f53f8bd7b3bbee9e49400d913e37c2f6eb10bdd
Certificate serial:       13BE5E
Authority key identifier: 54:86:A0:70:8A:EA:8F:83:DE:61:E5:CB:41:C7:82:FF:1E:6E:AA:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2f53f8bd7b3bbee9e49400d913e37c2f6eb10bdd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d0fc6cda-e55e-4753-9c1b-3d65fa12c009/ea26dfe7c64676449f9519fca54af90bf6c99931.roa
Signing time:             Tue 05 Jul 2022 07:44:46 +0000
ROA not before:           Tue 05 Jul 2022 03:00:00 +0000
ROA not after:            Fri 05 Jul 2024 03:00:00 +0000
asID:                     262253
IP address blocks:        181.224.225.0/24 maxlen: 24
                          181.224.226.0/24 maxlen: 24
                          181.224.227.0/24 maxlen: 24
                          181.224.228.0/24 maxlen: 24
                          181.224.229.0/24 maxlen: 24
                          181.224.231.0/24 maxlen: 24
                          181.224.232.0/24 maxlen: 24
                          181.224.235.0/24 maxlen: 24
                          181.224.236.0/24 maxlen: 24
                          181.224.237.0/24 maxlen: 24
                          181.224.238.0/24 maxlen: 24
                          181.224.239.0/24 maxlen: 24
                          181.224.240.0/24 maxlen: 24
                          181.224.241.0/24 maxlen: 24
                          181.224.242.0/24 maxlen: 24
                          181.224.243.0/24 maxlen: 24
                          181.224.244.0/24 maxlen: 24
                          181.224.245.0/24 maxlen: 24
                          181.224.246.0/24 maxlen: 24
                          181.224.247.0/24 maxlen: 24
                          181.224.248.0/24 maxlen: 24
                          181.224.249.0/24 maxlen: 24
                          181.224.250.0/24 maxlen: 24
                          181.224.251.0/24 maxlen: 24
                          181.224.252.0/24 maxlen: 24
                          181.224.253.0/24 maxlen: 24
                          181.224.254.0/24 maxlen: 24
                          181.224.255.0/24 maxlen: 24
                          2803:2500::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1293918 (0x13be5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f53f8bd7b3bbee9e49400d913e37c2f6eb10bdd
        Validity
            Not Before: Jul  5 03:00:00 2022 GMT
            Not After : Jul  5 03:00:00 2024 GMT
        Subject: CN=ea26dfe7c64676449f9519fca54af90bf6c99931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:32:fe:5f:d2:33:e2:fb:78:10:38:8d:66:ed:
                    a5:bd:4d:84:72:1a:3f:5a:e1:ac:b0:5b:b2:a8:a5:
                    52:64:34:dd:27:62:23:b8:2f:45:5d:22:b7:51:da:
                    c1:70:0e:d7:22:88:b2:40:cd:d5:38:68:5d:62:71:
                    50:5f:57:2b:bc:a8:7b:b3:0a:d5:1d:fb:ce:f7:f3:
                    9a:5b:e5:3d:f3:76:5c:98:12:f2:cd:29:4a:42:97:
                    32:f6:f6:8e:f2:58:eb:c5:ef:da:e8:ad:01:82:c3:
                    98:3b:61:e0:50:7d:5b:30:8a:11:8e:8d:52:67:59:
                    5d:64:ea:68:0d:5a:c4:ef:ac:03:78:53:64:80:c1:
                    ee:d6:b5:08:8a:dc:b2:bf:f7:0f:ce:af:8a:e1:c9:
                    fa:fd:cc:8d:68:ae:ea:71:dc:7d:94:63:4c:cc:54:
                    fc:c8:21:ae:0d:c7:e3:7c:a5:40:30:18:02:7a:bc:
                    0e:c5:75:1b:c9:52:db:b6:72:0c:e8:1d:53:22:52:
                    19:61:60:da:54:d8:de:4a:89:7d:9d:22:b2:3a:1c:
                    93:cc:d6:b7:07:ed:2c:8d:a0:fc:be:f5:29:23:83:
                    05:e6:96:79:c2:57:86:70:ec:c1:54:40:c2:6b:da:
                    d8:57:d9:7e:91:00:8c:40:be:17:a4:40:d2:62:73:
                    39:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:5E:30:5B:94:14:CE:93:AF:C2:C7:D3:92:D0:03:D5:DF:30:32:11
            X509v3 Authority Key Identifier:
                keyid:54:86:A0:70:8A:EA:8F:83:DE:61:E5:CB:41:C7:82:FF:1E:6E:AA:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2f53f8bd7b3bbee9e49400d913e37c2f6eb10bdd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d0fc6cda-e55e-4753-9c1b-3d65fa12c009/ea26dfe7c64676449f9519fca54af90bf6c99931.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d0fc6cda-e55e-4753-9c1b-3d65fa12c009/2f53f8bd7b3bbee9e49400d913e37c2f6eb10bdd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.225.0-181.224.229.255
                  181.224.231.0-181.224.232.255
                  181.224.235.0-181.224.255.255
                IPv6:
                  2803:2500::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:90:ed:ef:74:68:4e:eb:ed:38:85:58:0c:f9:ac:7d:fb:8a:
         c8:f3:bf:a7:4e:b1:87:70:32:be:fe:c1:c3:c2:9a:fd:40:0c:
         0e:4f:db:22:44:53:61:fd:f1:0b:3b:0c:82:44:e3:d1:a1:0c:
         d7:bd:5c:c1:1e:a0:64:53:cd:2f:6c:0e:ba:64:ba:be:16:ea:
         9f:fa:8c:7a:d9:89:31:8b:4a:53:26:34:23:4c:8e:c6:5f:6e:
         0f:77:70:8c:95:22:c9:68:e1:a2:2a:9f:8b:53:b1:a6:bb:99:
         83:53:6b:f8:c7:c1:d8:34:df:ec:ea:ec:90:a5:a6:c8:36:e1:
         c8:0e:17:b9:4b:36:0f:14:30:5b:c2:1a:6e:9b:70:69:ba:5f:
         95:14:21:a5:c4:96:f9:e0:a9:7f:0f:30:cc:b3:1e:db:eb:1a:
         e0:3b:58:b8:5b:eb:a2:77:b0:86:b6:56:58:84:38:80:dc:c2:
         33:a2:cd:52:68:15:3d:4b:5b:ed:ad:8a:f9:9a:77:0a:bf:fb:
         7f:03:14:c4:3b:9f:fc:53:85:b0:d9:fd:c8:0a:14:20:01:59:
         f2:7f:da:54:61:93:a5:d1:63:68:5f:9e:9f:77:ee:df:dd:97:
         e2:ce:9b:bd:ef:f6:47:63:c2:89:e9:37:3a:0c:0d:3b:b8:a8:
         35:66:13:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:40 2023 by rpki-client on console-fra.rpki-client.org