Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/041a3270750a5ac8c9a6e3f7c22a0484c7c93fb5.roa
File:                     041a3270750a5ac8c9a6e3f7c22a0484c7c93fb5.roa (raw, json)
Hash identifier:          PZ+XZZtOXbjKHvW74mRWtaADQ9RtMk+CUFuOOZkk8Xw=
Subject key identifier:   B5:61:4E:65:2C:B5:15:8A:64:E0:E2:24:0B:47:B1:C7:42:2B:71:2A
Certificate issuer:       /CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
Certificate serial:       1BF8FE
Authority key identifier: B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/041a3270750a5ac8c9a6e3f7c22a0484c7c93fb5.roa
Signing time:             Thu 13 Oct 2022 17:09:51 +0000
ROA not before:           Tue 23 Mar 2021 14:41:08 +0000
ROA not after:            Tue 24 Mar 2026 14:41:08 +0000
asID:                     19114
IP address blocks:        181.198.23.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1833214 (0x1bf8fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
        Validity
            Not Before: Mar 23 14:41:08 2021 GMT
            Not After : Mar 24 14:41:08 2026 GMT
        Subject: CN=041a3270750a5ac8c9a6e3f7c22a0484c7c93fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:59:05:1d:ae:70:f6:1e:24:f6:18:01:46:ad:
                    0a:8f:fc:ad:05:ad:b9:b7:6d:06:91:f4:1e:16:3f:
                    e9:50:68:cb:34:f9:ca:70:9f:26:8c:bc:9d:2d:f8:
                    01:16:32:eb:55:90:e4:1c:0e:c4:e1:ce:6e:d5:24:
                    7e:9a:df:b1:76:da:ab:4a:63:a0:20:2d:63:91:a6:
                    6f:2c:7e:66:63:be:28:f1:bc:5e:7a:4e:08:b1:db:
                    6e:31:fa:ab:73:8d:fd:88:9b:79:a6:6f:79:f3:25:
                    50:81:32:8d:c4:d7:e1:a3:46:d8:12:0a:ce:88:5f:
                    70:59:73:13:c4:40:5f:7d:2b:31:72:16:e1:32:32:
                    eb:b7:fb:bb:84:cd:ed:95:89:09:e2:16:d9:2c:0f:
                    ee:f0:df:8d:fa:7c:d2:8e:2a:f3:99:99:88:bc:d5:
                    b4:08:a3:a9:a6:1b:c9:7f:a0:6e:90:84:0f:b7:a2:
                    fe:1b:4d:9f:66:0c:ac:eb:74:98:8c:e0:82:f4:39:
                    70:3c:cc:be:88:cd:66:82:81:71:e1:b7:b6:ca:68:
                    ce:da:e6:db:bd:2e:35:9c:41:16:3d:a1:c7:99:14:
                    e4:95:1c:35:28:5f:4c:1e:86:ad:2d:69:f7:6c:a6:
                    a9:30:9c:1a:34:b7:54:ae:1a:4f:c7:80:97:26:50:
                    96:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:61:4E:65:2C:B5:15:8A:64:E0:E2:24:0B:47:B1:C7:42:2B:71:2A
            X509v3 Authority Key Identifier:
                keyid:B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/041a3270750a5ac8c9a6e3f7c22a0484c7c93fb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.198.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:a5:f8:cf:41:a9:68:bc:42:da:e2:02:65:77:0c:da:a8:aa:
         2a:ab:9e:2b:23:1a:e8:7c:e1:4a:01:f1:c3:cf:bf:e8:50:e1:
         ec:cf:0a:bf:ca:9b:7d:d2:42:64:2d:de:f3:9c:f5:06:4c:c2:
         99:79:dd:83:86:f4:0f:46:90:cc:ff:20:f8:a7:bf:0d:f5:13:
         60:dd:01:3f:db:ef:df:a1:19:cf:19:9d:16:aa:a3:15:7d:0b:
         94:52:72:93:c9:82:1b:b5:7e:3d:a3:4a:37:71:f2:8e:60:a8:
         bd:7a:50:94:ca:47:44:9c:18:ad:f5:41:b4:36:17:d2:f7:f1:
         64:36:87:f7:81:0c:33:41:96:27:f0:cc:05:62:bf:46:7b:e8:
         10:88:b9:02:42:14:ca:3e:94:4f:a2:0d:7a:e9:9d:45:fe:60:
         2c:af:19:a9:51:8e:e9:b6:8d:98:cf:67:ad:6b:77:86:19:60:
         57:02:8d:c6:84:26:06:ba:5b:a3:40:71:38:cc:64:a1:c0:c2:
         45:a1:f8:01:c6:3c:b5:6d:ad:00:00:2b:3c:3c:8f:48:76:88:
         c3:a7:bf:8d:f5:71:c5:e3:88:79:b2:ad:6b:77:98:45:f4:59:
         88:f0:cf:c7:5c:48:ef:73:92:20:3b:8b:e4:b4:35:a0:48:e7:
         04:5e:79:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 17:34:07 2023 by rpki-client on console-fra.rpki-client.org