Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/2f0f11c2e18f6b4aa024c3e9b646827b72ee6078.roa
File:                     2f0f11c2e18f6b4aa024c3e9b646827b72ee6078.roa (raw, json)
Hash identifier:          2Ke8LdaooL3YcSYcFam41opQRxniDmwClIRc6MxK/8M=
Subject key identifier:   B8:0A:AB:6B:A1:1D:38:98:4B:42:10:CF:06:E7:A1:EA:06:A7:7F:5E
Certificate issuer:       /CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
Certificate serial:       0E06BC
Authority key identifier: B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/2f0f11c2e18f6b4aa024c3e9b646827b72ee6078.roa
Signing time:             Wed 24 Mar 2021 14:41:09 +0000
ROA not before:           Wed 24 Mar 2021 14:41:08 +0000
ROA not after:            Tue 24 Mar 2026 14:41:08 +0000
asID:                     27947
IP address blocks:        181.39.0.0/16 maxlen: 24
                          181.198.0.0/16 maxlen: 24
                          181.199.0.0/17 maxlen: 24
                          186.3.0.0/16 maxlen: 16
                          186.4.128.0/17 maxlen: 24
                          186.5.0.0/17 maxlen: 24
                          186.101.0.0/16 maxlen: 24
                          190.95.128.0/19 maxlen: 24
                          190.95.160.0/19 maxlen: 24
                          190.95.192.0/19 maxlen: 24
                          190.95.224.0/19 maxlen: 24
                          200.93.192.0/19 maxlen: 24
                          200.93.224.0/20 maxlen: 24
                          200.110.64.0/20 maxlen: 24
                          200.110.80.0/20 maxlen: 24
                          201.218.0.0/19 maxlen: 24
                          201.218.32.0/19 maxlen: 24
                          2800:2a0::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 919228 (0xe06bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
        Validity
            Not Before: Mar 24 14:41:08 2021 GMT
            Not After : Mar 24 14:41:08 2026 GMT
        Subject: CN=2f0f11c2e18f6b4aa024c3e9b646827b72ee6078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:81:34:09:c0:68:64:5d:65:66:3c:1e:28:94:
                    a3:de:e9:bf:97:e3:ec:34:e3:f5:9e:86:23:b6:cf:
                    2e:58:f4:f4:57:2d:84:99:a6:30:6a:83:42:9c:2d:
                    83:d2:3e:cc:b6:53:03:db:9c:f4:40:9b:74:4e:71:
                    1f:2d:7c:bc:20:57:53:4e:d2:01:b5:71:f0:51:6c:
                    ad:20:83:d5:a5:f1:31:05:5d:9f:7d:ff:95:08:84:
                    d0:cb:21:d8:c0:f5:9a:d4:27:36:42:f7:71:bc:90:
                    f0:8b:0c:c6:a1:b7:43:a9:b8:81:66:01:95:ea:60:
                    44:f3:b6:80:b4:aa:f3:e1:1a:fe:9d:84:54:6a:07:
                    c8:57:ac:42:e9:70:03:c5:b6:62:fd:b5:ff:1d:90:
                    af:d2:4f:18:b6:12:59:b0:99:2c:6e:52:ac:e8:53:
                    a3:a2:67:ee:68:dd:13:81:d2:c6:fd:0b:5d:75:6d:
                    38:e0:f6:60:87:8f:55:7f:f0:89:1a:43:52:69:4b:
                    dc:3f:77:e6:ba:70:3c:21:a3:50:26:e1:8c:c8:ff:
                    3d:b9:d1:13:0b:c2:f0:66:aa:57:15:ab:ca:5f:86:
                    35:4c:e4:75:42:55:c4:c2:30:28:17:5d:d0:2b:71:
                    ca:60:f8:14:fe:b5:e2:99:00:f3:cb:62:f8:cd:52:
                    aa:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:0A:AB:6B:A1:1D:38:98:4B:42:10:CF:06:E7:A1:EA:06:A7:7F:5E
            X509v3 Authority Key Identifier:
                keyid:B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/2f0f11c2e18f6b4aa024c3e9b646827b72ee6078.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.39.0.0/16
                  181.198.0.0-181.199.127.255
                  186.3.0.0/16
                  186.4.128.0-186.5.127.255
                  186.101.0.0/16
                  190.95.128.0/17
                  200.93.192.0-200.93.239.255
                  200.110.64.0/19
                  201.218.0.0/18
                IPv6:
                  2800:2a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:7d:5f:a7:fb:18:2e:0c:73:b0:de:25:4a:72:6e:fe:19:5e:
         ca:f8:4f:fb:d2:c3:a6:83:08:9e:a5:4f:9f:3d:8f:df:06:2d:
         03:1a:39:e1:7e:26:45:76:f5:48:a0:30:5e:c9:7d:55:c3:57:
         43:8e:5a:03:11:cc:f7:b5:c7:ce:d2:f1:e4:d1:7e:94:30:42:
         c1:16:0e:a2:95:18:45:bb:64:9c:a2:08:2c:28:b2:f6:eb:3b:
         b7:97:19:00:b7:c8:d2:ad:dd:58:30:d4:f9:8c:b6:8f:09:40:
         69:a7:fa:a5:80:74:b6:e5:0e:37:f8:96:1a:84:f6:12:eb:d1:
         4f:41:90:c9:87:98:17:2f:27:46:b2:82:56:53:46:14:1b:a5:
         f3:42:da:bf:3a:d8:b7:56:a9:b7:cc:59:85:8c:db:a5:53:1a:
         dc:d1:a4:fb:b2:6b:21:d0:d8:99:04:28:3c:8c:10:f7:4a:9e:
         9d:56:41:63:42:b8:5b:9f:3d:5a:0c:10:62:d3:99:5e:2c:ae:
         2b:11:5b:f9:3e:34:21:9d:fa:f6:b3:bc:f6:92:5f:7a:06:40:
         d5:cb:ad:29:a1:39:97:4b:b2:dc:80:48:f1:01:cb:c2:92:83:
         fb:9c:9c:8d:34:64:c8:e3:01:fd:96:6a:2e:f5:8f:a9:77:82:
         7b:f1:b1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 17:43:41 2023 by rpki-client on console-ams.rpki-client.org