Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/dfb86e2810ca3dfcb924f03435f668d9efa87927.roa
File:                     dfb86e2810ca3dfcb924f03435f668d9efa87927.roa (raw, json)
Hash identifier:          bm7bqoTpNrxlwyQJjntKE6KVbyp1iOkWlNLV/5GJixI=
Subject key identifier:   08:57:5E:60:CE:68:53:D1:C5:C2:C8:E8:74:EE:D4:12:12:B3:DF:9C
Certificate issuer:       /CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
Certificate serial:       0E09A2
Authority key identifier: B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/dfb86e2810ca3dfcb924f03435f668d9efa87927.roa
Signing time:             Wed 24 Mar 2021 14:41:09 +0000
ROA not before:           Wed 24 Mar 2021 14:41:08 +0000
ROA not after:            Tue 24 Mar 2026 14:41:08 +0000
asID:                     19114
IP address blocks:        181.198.23.0/24 maxlen: 24
                          186.101.4.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 919970 (0xe09a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
        Validity
            Not Before: Mar 24 14:41:08 2021 GMT
            Not After : Mar 24 14:41:08 2026 GMT
        Subject: CN=dfb86e2810ca3dfcb924f03435f668d9efa87927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a6:11:53:23:42:cd:b5:5f:7e:f0:b7:4f:fb:
                    f3:e8:76:72:56:bd:54:21:f8:26:37:d7:02:7a:80:
                    37:de:55:fa:b0:1e:f8:3e:e5:e6:f4:49:af:aa:95:
                    c7:16:d3:a9:e9:28:41:92:d6:40:86:fc:1a:81:d2:
                    32:7d:7a:7a:6d:e9:e5:29:c8:85:6c:61:96:d8:e4:
                    c5:7e:d9:f8:90:4e:75:99:6e:6e:2d:41:17:35:68:
                    8b:68:4b:5f:78:34:a9:f7:b4:6b:c7:4d:53:2f:6d:
                    16:cc:ef:44:6b:c7:83:1a:4e:e4:5c:d6:07:b8:0b:
                    f9:03:04:43:3d:12:12:65:36:6b:bd:53:71:bb:67:
                    5d:f8:f8:6d:e6:36:65:9a:ae:9d:df:a2:da:e8:68:
                    b8:8e:69:a2:76:f5:36:a0:4d:9c:98:9f:15:0b:6d:
                    d8:3e:74:33:cc:fe:2b:96:10:3e:b3:e5:cd:d3:56:
                    f9:7c:b2:67:42:3f:f5:7c:2e:8d:60:50:62:6f:98:
                    bb:14:1f:db:03:f8:1a:bf:bf:89:4c:bf:a1:8a:38:
                    07:6f:11:24:19:6e:b3:2e:51:e6:7b:b6:09:52:b4:
                    6f:ae:cc:8b:06:51:bf:53:b9:fa:27:9d:10:fe:07:
                    9c:20:22:aa:13:59:3d:3a:56:d4:de:3e:f9:30:dd:
                    15:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:57:5E:60:CE:68:53:D1:C5:C2:C8:E8:74:EE:D4:12:12:B3:DF:9C
            X509v3 Authority Key Identifier:
                keyid:B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/dfb86e2810ca3dfcb924f03435f668d9efa87927.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.198.23.0/24
                  186.101.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:fd:8e:93:25:8d:56:32:fb:c3:93:ed:2a:3e:80:18:77:ab:
         e7:4d:a0:02:ad:d9:d6:d2:9f:f0:64:75:8d:78:22:a7:0c:ff:
         2b:3d:70:de:47:d8:bc:ec:f9:27:dd:cb:ba:03:50:93:ae:1c:
         fd:3d:c2:cd:bd:7a:c3:33:71:26:f1:b4:17:19:80:7f:c6:37:
         c5:ea:d6:c9:44:55:f0:56:f5:f6:02:fd:2e:4d:3e:eb:e6:fb:
         5e:b9:b3:6c:3b:5a:37:3c:a2:dc:15:0d:82:0e:3f:a9:71:a5:
         10:4a:dc:d8:34:41:b6:6a:09:72:1f:89:af:8f:9d:8a:3a:f7:
         3c:cc:f2:6a:2d:cc:fe:db:09:46:2a:01:3d:38:b6:14:2f:21:
         f6:69:7c:28:66:eb:cf:e8:ff:e3:f5:d4:72:e1:b4:5f:3b:8d:
         3f:e7:11:93:82:1d:41:99:c4:3b:52:42:aa:d4:97:35:86:29:
         bd:c4:18:8c:29:3d:8d:8e:38:0a:00:82:53:43:05:c6:1c:cc:
         83:dc:e8:b2:fe:96:23:e1:7b:49:b5:c6:18:11:c6:26:f1:b1:
         ff:6e:1d:e4:9f:2c:59:94:0c:0b:d5:81:d1:94:07:74:1f:00:
         3a:ab:06:23:0b:f0:56:fb:9e:65:11:1c:a1:fe:19:5f:c3:c6:
         fe:27:c6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:58 2023 by rpki-client on console-ams.rpki-client.org