Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ee05017-be87-47c8-9b37-4613be36b7d7/95fc0438110b46b6c85d81e5fbc4a2aed0c801f2.roa
File:                     95fc0438110b46b6c85d81e5fbc4a2aed0c801f2.roa (raw, json)
Hash identifier:          uOK8fQsbcdOa7qKZ7LHIStAzM0Iu2FLF7cy0uBfolTw=
Subject key identifier:   92:B0:42:48:1B:5E:11:A6:87:1D:A1:83:70:C2:04:29:54:BA:DA:26
Certificate issuer:       /CN=392ca19b432c483d5aa2dbbefd00061b3e86b29c
Certificate serial:       0F20D2
Authority key identifier: 9B:CF:86:21:80:B5:A6:DC:7F:0E:B3:96:24:73:A8:E5:5D:49:83:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/392ca19b432c483d5aa2dbbefd00061b3e86b29c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ee05017-be87-47c8-9b37-4613be36b7d7/95fc0438110b46b6c85d81e5fbc4a2aed0c801f2.roa
Signing time:             Wed 08 Jun 2022 15:39:05 +0000
ROA not before:           Tue 07 Jun 2022 03:00:00 +0000
ROA not after:            Fri 07 Jun 2024 03:00:00 +0000
asID:                     266760
IP address blocks:        45.232.204.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 991442 (0xf20d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=392ca19b432c483d5aa2dbbefd00061b3e86b29c
        Validity
            Not Before: Jun  7 03:00:00 2022 GMT
            Not After : Jun  7 03:00:00 2024 GMT
        Subject: CN=95fc0438110b46b6c85d81e5fbc4a2aed0c801f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:eb:d1:84:05:6a:04:2b:05:58:69:00:06:49:
                    66:c2:63:01:34:36:0f:4a:97:da:1e:64:d5:d0:1c:
                    5b:0b:8b:25:72:48:11:87:c7:fc:9f:77:02:30:c3:
                    8f:99:b6:dd:d6:ac:22:62:2d:38:9f:cd:d8:86:eb:
                    a9:62:00:58:a5:22:03:5f:1d:2a:7b:37:dd:ca:59:
                    12:74:60:b0:de:46:f4:d3:67:74:10:18:69:33:81:
                    1f:fc:91:4b:af:c2:29:a3:fa:04:6d:52:df:a7:13:
                    03:41:58:97:0e:b9:a6:92:7e:5b:64:69:24:70:3f:
                    9a:8f:e0:74:e2:e3:6d:f2:23:81:bf:e6:2e:55:57:
                    d8:2d:50:80:a6:84:4b:a4:80:41:e3:02:2e:62:fa:
                    1e:1e:60:96:b2:5a:40:8c:33:a6:82:99:96:8a:e6:
                    cc:df:53:6c:fc:9d:57:41:0d:78:b1:7b:dc:5e:f6:
                    53:95:38:87:6b:0c:3c:c7:00:65:52:0a:f4:43:1b:
                    46:f6:bb:0c:6b:bc:46:e6:95:ef:f0:56:ab:86:a6:
                    33:74:8d:e0:ac:df:60:0a:9d:c2:06:3c:8c:39:4d:
                    c6:25:fa:90:03:e9:bc:c5:c0:1e:cb:36:24:02:ab:
                    16:f8:9b:70:88:7c:f0:95:f2:98:32:bf:85:f2:fa:
                    7f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B0:42:48:1B:5E:11:A6:87:1D:A1:83:70:C2:04:29:54:BA:DA:26
            X509v3 Authority Key Identifier:
                keyid:9B:CF:86:21:80:B5:A6:DC:7F:0E:B3:96:24:73:A8:E5:5D:49:83:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/392ca19b432c483d5aa2dbbefd00061b3e86b29c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ee05017-be87-47c8-9b37-4613be36b7d7/95fc0438110b46b6c85d81e5fbc4a2aed0c801f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ee05017-be87-47c8-9b37-4613be36b7d7/392ca19b432c483d5aa2dbbefd00061b3e86b29c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:e4:67:f3:66:17:8d:87:b3:f6:7e:0a:b1:a6:ad:4c:54:9d:
         9d:e9:8e:58:c8:46:c4:8e:15:a3:f2:20:82:e4:27:f9:a4:39:
         8b:59:f2:4a:3b:a5:b7:85:79:9a:ed:53:6f:97:e6:d7:e9:39:
         e3:50:8f:40:73:70:d7:56:b7:ae:46:17:a0:de:ce:5c:f1:fb:
         dd:4d:65:bc:3b:12:32:c3:57:e4:53:1b:dd:83:48:52:2f:fe:
         f9:8c:23:44:8e:6b:3b:fb:7a:e3:35:60:8c:ea:2c:fe:ef:26:
         08:6d:07:70:98:81:cd:56:76:d0:46:5e:f6:77:72:b3:bb:9b:
         b0:cb:96:65:94:40:65:38:98:b3:f2:57:ed:6d:c9:36:59:4d:
         6e:33:f4:72:94:1a:e2:e6:ef:a5:99:de:50:fd:d0:55:c5:7d:
         d8:c1:95:5b:06:d0:67:ff:77:ab:30:f5:46:20:9f:f0:bc:da:
         43:2c:f1:2e:69:38:be:b2:50:54:f6:0e:29:2f:1e:9b:22:e5:
         ad:a4:e1:d2:e8:08:6c:3f:71:69:13:6b:d8:0b:a3:83:58:15:
         89:ca:66:48:e6:a6:07:cd:67:9d:85:bd:c7:e8:70:0e:bd:e0:
         dc:d9:88:6a:5c:1d:03:1d:b4:c4:ba:a9:85:ad:2d:f3:5a:b7:
         2c:ea:19:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:34 2023 by rpki-client on console-fra.rpki-client.org