Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3d90dd04-511a-483b-b519-db04bace02e7/be5423ca6a39811153598d57f01cbf5144cf0098.roa
File:                     be5423ca6a39811153598d57f01cbf5144cf0098.roa (raw, json)
Hash identifier:          9J8gNxYB/znfCVw5ADnY9Rn6giF6t9J0BA3V3uL3uWo=
Subject key identifier:   46:45:BE:95:12:04:2A:D8:DD:7D:2B:BE:C0:A6:50:1F:1D:91:7A:BA
Certificate issuer:       /CN=e2b62d0be638d98e406ee5e9dd9c9858052a3156
Certificate serial:       10EB4A
Authority key identifier: 89:8A:FF:77:82:DF:25:8E:51:D2:75:21:FE:A7:FE:DB:8B:67:2C:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e2b62d0be638d98e406ee5e9dd9c9858052a3156.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3d90dd04-511a-483b-b519-db04bace02e7/be5423ca6a39811153598d57f01cbf5144cf0098.roa
Signing time:             Wed 29 Mar 2023 00:30:33 +0000
ROA not before:           Sun 13 Nov 2022 13:47:39 +0000
ROA not after:            Fri 15 Nov 2024 13:47:39 +0000
asID:                     267929
IP address blocks:        45.179.244.0/24 maxlen: 24
                          45.179.245.0/24 maxlen: 24
                          45.179.246.0/24 maxlen: 24
                          45.179.247.0/24 maxlen: 24
                          2803:7e60::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1108810 (0x10eb4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2b62d0be638d98e406ee5e9dd9c9858052a3156
        Validity
            Not Before: Nov 13 13:47:39 2022 GMT
            Not After : Nov 15 13:47:39 2024 GMT
        Subject: CN=be5423ca6a39811153598d57f01cbf5144cf0098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:00:66:1d:a8:4d:b9:6e:47:be:b4:27:41:00:
                    73:cb:47:24:57:ff:6a:9b:81:04:f9:31:14:e1:fd:
                    c2:87:9d:e9:0f:f4:38:12:2b:94:28:51:c6:4c:12:
                    8c:f8:d6:11:99:00:5c:1a:7c:8a:52:d6:d8:79:5b:
                    66:67:15:84:93:df:88:8f:f1:59:6b:a7:39:c4:1a:
                    0c:04:dc:62:4a:58:03:42:2b:11:35:fe:c3:9a:d7:
                    a4:db:64:c1:23:de:c8:34:f6:f7:99:db:55:9c:af:
                    20:74:00:27:3c:44:e4:12:d5:38:13:fe:c7:a8:c0:
                    bc:95:cd:c5:9b:93:ea:d5:8a:eb:02:50:4e:97:2e:
                    dc:7e:da:fe:19:59:f5:e0:d2:b3:72:ac:78:0d:4a:
                    0d:20:0c:bd:c6:8a:49:0b:52:1e:16:11:50:f4:62:
                    a2:84:0d:18:4a:f3:d9:bd:fb:40:87:57:f3:36:46:
                    71:70:fe:0c:d5:f6:c0:a9:a1:54:ab:8a:73:58:9d:
                    a9:ee:ef:6e:bc:a8:7f:14:f0:77:22:34:35:6f:f3:
                    f9:6d:fa:c6:ed:8b:64:5a:4b:df:a3:91:2e:e2:02:
                    be:29:9d:0e:1b:af:bf:e6:49:a5:58:c4:1c:59:60:
                    7e:88:e1:dc:b1:99:b8:e6:3f:d7:1f:af:16:8b:07:
                    d6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:45:BE:95:12:04:2A:D8:DD:7D:2B:BE:C0:A6:50:1F:1D:91:7A:BA
            X509v3 Authority Key Identifier:
                keyid:89:8A:FF:77:82:DF:25:8E:51:D2:75:21:FE:A7:FE:DB:8B:67:2C:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e2b62d0be638d98e406ee5e9dd9c9858052a3156.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3d90dd04-511a-483b-b519-db04bace02e7/be5423ca6a39811153598d57f01cbf5144cf0098.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3d90dd04-511a-483b-b519-db04bace02e7/e2b62d0be638d98e406ee5e9dd9c9858052a3156.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.244.0/22
                IPv6:
                  2803:7e60::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:ca:6c:5b:c5:5e:1f:7e:77:61:ab:60:c9:44:ca:44:f9:8e:
         74:6c:3f:c3:c5:17:89:ed:80:b1:30:93:39:14:ec:31:62:c6:
         d8:d6:fb:13:37:9c:65:2f:e9:78:30:86:ec:d8:bf:7f:17:aa:
         8f:4c:9e:78:91:f2:23:5b:dd:76:ef:a7:6e:55:7c:7f:a1:da:
         58:65:c7:a9:48:ff:3a:80:2e:27:15:f7:6b:2f:e2:8a:e4:cd:
         4e:7c:67:a5:f9:9e:dc:db:cb:e8:85:03:c0:71:84:aa:5a:d0:
         ce:75:3e:48:f7:05:8a:c8:38:4d:f9:aa:9d:18:a4:da:40:f5:
         5a:fc:27:94:d9:9b:f8:2c:5f:4f:84:aa:9c:14:e5:55:4c:e7:
         c7:7b:77:7c:69:4a:00:fc:02:58:35:35:7c:6d:d8:0e:11:95:
         6c:b3:d6:82:d6:a0:e8:57:7a:4f:a3:e2:e8:a4:63:b4:6c:e4:
         ab:23:6c:5f:fe:ae:2c:22:22:ef:78:f3:30:85:82:bb:2e:8a:
         8b:0b:45:b0:ce:8a:38:11:f6:ea:e2:83:25:47:60:37:bf:1d:
         5d:a4:d1:d5:43:c1:ca:b5:ee:b0:22:96:2b:41:e4:6c:17:16:
         65:83:a4:d9:ef:08:af:2e:1a:5a:b5:18:d0:32:07:3a:86:ce:
         bf:63:11:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:30 2023 by rpki-client on console-ams.rpki-client.org