Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e6721c4b-94c6-4f4e-a280-7c44be73f635/ff7332e279bd7f855a90a35aa10090e791ce340c.roa
File:                     ff7332e279bd7f855a90a35aa10090e791ce340c.roa (raw, json)
Hash identifier:          G0DvanzAqODJgvJ3ASQUwXzoD3aod5R5cJrXXUnUfTs=
Subject key identifier:   79:04:8A:9A:49:33:08:90:CA:58:77:70:BA:82:67:17:E0:6A:04:E8
Certificate issuer:       /CN=bbbbe2003ec2621c31929aaf5d5c9344a23f7a47
Certificate serial:       263CBD
Authority key identifier: C1:93:99:2A:29:78:CE:60:54:5B:6A:9B:61:3E:4C:B5:5A:85:22:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bbbbe2003ec2621c31929aaf5d5c9344a23f7a47.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e6721c4b-94c6-4f4e-a280-7c44be73f635/ff7332e279bd7f855a90a35aa10090e791ce340c.roa
Signing time:             Tue 28 Nov 2023 08:52:23 +0000
ROA not before:           Tue 28 Nov 2023 08:52:23 +0000
ROA not after:            Fri 28 Nov 2025 08:52:23 +0000
asID:                     265760
IP address blocks:        181.224.164.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Sat 16 Mar 2024 08:13:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2505917 (0x263cbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbbbe2003ec2621c31929aaf5d5c9344a23f7a47
        Validity
            Not Before: Nov 28 08:52:23 2023 GMT
            Not After : Nov 28 08:52:23 2025 GMT
        Subject: CN=ff7332e279bd7f855a90a35aa10090e791ce340c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8e:56:42:39:61:27:77:70:7d:d0:ca:0c:9a:
                    04:48:5a:9b:24:e7:ff:7c:2a:c4:1d:6f:5b:a7:82:
                    40:27:b1:a2:26:0b:62:6f:91:37:4f:8e:75:5c:9c:
                    8a:6b:4d:21:ab:3d:e0:b5:d5:78:b3:6f:b0:9b:e3:
                    d5:d2:18:dd:2a:ac:d9:6a:9e:54:b3:7b:0d:01:f8:
                    9e:0e:95:cf:fe:91:ae:a9:df:68:65:74:13:e1:57:
                    49:b6:08:6f:2a:80:37:20:ab:35:b5:0f:90:24:ec:
                    c9:57:94:04:9f:e0:f2:79:11:48:ec:af:fb:9b:5c:
                    00:11:d4:0f:7e:cd:e9:01:c2:a4:dc:c3:16:48:53:
                    39:b2:f7:19:34:fc:29:ab:6b:8a:1f:c2:55:ce:f4:
                    b3:74:0e:cd:2a:49:80:cf:2b:19:ef:9b:6f:47:9b:
                    42:f3:6b:9c:44:f0:12:1d:ba:6f:b6:22:cb:5a:98:
                    a4:16:75:2b:20:62:13:12:17:9e:ec:be:ab:1a:6b:
                    4b:40:90:f1:ee:8a:95:f6:02:60:e3:9f:6a:5f:0e:
                    01:a5:77:98:b4:40:58:af:fd:02:da:21:31:3f:09:
                    63:2b:8c:05:bc:a5:6f:66:65:51:66:34:da:51:8a:
                    14:0f:d0:61:6e:6f:81:bc:bd:c1:9f:0f:2e:9b:15:
                    75:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:04:8A:9A:49:33:08:90:CA:58:77:70:BA:82:67:17:E0:6A:04:E8
            X509v3 Authority Key Identifier:
                keyid:C1:93:99:2A:29:78:CE:60:54:5B:6A:9B:61:3E:4C:B5:5A:85:22:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bbbbe2003ec2621c31929aaf5d5c9344a23f7a47.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e6721c4b-94c6-4f4e-a280-7c44be73f635/ff7332e279bd7f855a90a35aa10090e791ce340c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e6721c4b-94c6-4f4e-a280-7c44be73f635/bbbbe2003ec2621c31929aaf5d5c9344a23f7a47.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         be:48:8f:d7:2a:19:40:03:a5:e0:31:1f:26:f2:0e:f6:b4:26:
         46:92:4c:c5:71:97:06:c9:21:e2:e2:11:1f:04:8e:9a:04:c9:
         ae:32:4a:55:02:64:31:d0:e5:72:0d:c7:af:99:b2:70:10:e8:
         14:f6:03:cc:bf:9c:11:f0:5f:bd:2c:93:ca:4e:7f:5f:0d:c1:
         e9:41:a0:ef:56:3f:71:10:71:25:5c:8f:23:62:3c:5b:33:6b:
         56:6a:ff:bc:c4:13:71:6c:ce:8d:76:03:49:71:2d:ed:c8:08:
         88:ba:73:5c:5c:7e:01:6d:c5:7c:6b:ac:a5:66:e0:40:b0:1f:
         ea:cc:b2:0c:3c:8a:0b:70:97:78:d1:dc:44:eb:4f:f6:d3:5d:
         63:99:75:a1:e6:d8:fb:2d:99:6d:ac:02:4e:57:5b:7b:36:08:
         60:14:66:ae:25:fa:2d:f9:4d:87:97:e4:94:40:f8:10:ea:e6:
         d8:33:ca:35:8a:f7:f4:36:ea:b8:fc:62:a2:e0:b4:45:ef:96:
         a6:1d:b7:29:3f:e8:4b:84:28:8c:99:57:ef:74:25:34:2b:ef:
         39:43:b8:10:86:75:b3:0c:47:21:b2:49:df:8f:bf:30:65:a0:
         cf:78:a5:da:67:c2:7a:11:62:2b:e2:65:84:7b:59:69:37:99:
         6d:34:78:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 16 09:04:00 2024 by rpki-client on console-ams.rpki-client.org