Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e3617b10-3c45-4925-bbdf-6372eaa49bb4/ac8db1ae12d261c2e488759849db0b5331be8b94.roa
File:                     ac8db1ae12d261c2e488759849db0b5331be8b94.roa (raw, json)
Hash identifier:          B5OcmKqFMyoA+GyaLKVFdpLI2+i94/zwgQH2h0umS08=
Subject key identifier:   E2:F1:3A:56:22:BC:85:E1:0C:BE:A5:8E:A0:9E:0F:72:7E:1C:05:33
Certificate issuer:       /CN=bf01c8b5c661e4a83900b9cf88863f17432603dd
Certificate serial:       05C5
Authority key identifier: F2:9E:A1:22:8F:3A:E6:32:66:6D:60:45:B3:0D:F9:6D:C4:B7:01:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf01c8b5c661e4a83900b9cf88863f17432603dd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e3617b10-3c45-4925-bbdf-6372eaa49bb4/ac8db1ae12d261c2e488759849db0b5331be8b94.roa
Signing time:             Mon 25 Oct 2021 21:59:30 +0000
ROA not before:           Mon 25 Oct 2021 03:00:00 +0000
ROA not after:            Wed 25 Oct 2023 03:00:00 +0000
asID:                     263725
IP address blocks:        45.182.21.0/24 maxlen: 24
                          45.182.22.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1477 (0x5c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf01c8b5c661e4a83900b9cf88863f17432603dd
        Validity
            Not Before: Oct 25 03:00:00 2021 GMT
            Not After : Oct 25 03:00:00 2023 GMT
        Subject: CN=ac8db1ae12d261c2e488759849db0b5331be8b94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ed:2d:b1:89:bb:f5:da:ee:b3:a5:70:5e:09:
                    f0:5f:c5:4b:f9:73:f3:be:5d:52:cc:57:a9:16:fc:
                    ff:af:5b:df:d9:e8:c5:f6:48:4c:84:3b:e3:a4:78:
                    1b:8a:e3:9f:54:cb:58:bb:87:56:34:b2:ed:a8:2f:
                    91:2c:18:d1:f7:9e:48:b3:3a:9b:3c:a5:51:3f:73:
                    de:b6:2e:13:a3:86:a6:1b:98:80:41:e5:5d:f4:48:
                    62:4c:5f:93:bb:0d:08:c7:c6:6a:c0:40:23:61:89:
                    bd:c2:58:b6:24:6f:53:fe:fe:19:05:dc:4f:47:8d:
                    ed:ac:42:f2:68:89:b8:fc:20:d7:fb:cb:8f:39:9a:
                    2c:d3:2c:cc:88:b1:d1:c1:4f:76:57:ad:21:9f:a6:
                    fe:1e:ac:cc:9d:59:5e:33:bd:e5:97:8b:55:e4:7c:
                    8a:21:d8:f4:7b:3d:b0:ce:a0:f4:76:89:24:46:b9:
                    99:55:02:e9:9d:8e:ac:f1:aa:16:bd:d6:74:47:f3:
                    5f:43:aa:f6:e9:79:c0:b9:0e:16:95:20:2b:1b:9f:
                    d0:8b:53:59:2b:3b:01:e2:8c:a6:1b:a0:66:9b:3b:
                    8f:72:1b:87:c7:94:c3:d1:2b:46:de:02:02:83:f2:
                    9e:18:2c:10:a2:58:7c:ec:4d:d8:01:45:d4:e6:c3:
                    12:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F1:3A:56:22:BC:85:E1:0C:BE:A5:8E:A0:9E:0F:72:7E:1C:05:33
            X509v3 Authority Key Identifier:
                keyid:F2:9E:A1:22:8F:3A:E6:32:66:6D:60:45:B3:0D:F9:6D:C4:B7:01:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf01c8b5c661e4a83900b9cf88863f17432603dd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e3617b10-3c45-4925-bbdf-6372eaa49bb4/ac8db1ae12d261c2e488759849db0b5331be8b94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e3617b10-3c45-4925-bbdf-6372eaa49bb4/bf01c8b5c661e4a83900b9cf88863f17432603dd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.21.0-45.182.23.255

    Signature Algorithm: sha256WithRSAEncryption
         28:12:6f:c5:6c:68:1f:2f:d7:38:db:4a:8e:09:75:39:2c:d3:
         c2:45:f0:c3:94:94:1e:7f:ca:1a:39:24:ea:63:fe:19:90:a0:
         0d:4a:7f:0b:57:68:9e:0d:85:e7:64:52:be:57:c9:cd:68:1a:
         44:c6:70:7a:f6:52:28:38:75:09:7c:02:fc:66:b3:06:51:8a:
         7d:24:9f:3f:fb:35:6f:97:d3:f7:d9:5a:e6:16:99:ae:6f:78:
         bf:33:28:c4:ef:1e:45:d4:d4:2b:e7:fd:08:b6:6b:a7:1b:f4:
         cf:1e:c3:cf:63:aa:96:61:a3:6e:85:45:c1:60:e9:a7:ac:58:
         fa:23:4d:03:99:d1:14:87:32:79:1a:ef:81:7e:c4:28:26:ab:
         58:11:b4:6c:09:6a:e5:b5:d7:e3:fe:2d:7c:50:87:f8:b7:39:
         63:f9:e4:22:3e:3a:ff:50:18:3a:f5:27:ff:37:2a:96:4b:aa:
         e2:67:9d:23:fc:e7:a6:1d:50:ba:68:b4:4c:e2:03:98:f4:7c:
         72:e0:8f:b1:84:b7:a3:49:b1:d1:33:57:c2:b5:4b:e0:c9:40:
         aa:01:9b:12:00:a7:d4:ae:45:93:7d:68:83:5a:80:4e:b2:99:
         d7:56:08:d8:bb:55:99:05:64:bd:07:87:1f:8e:8b:98:1a:62:
         19:ca:33:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:56 2023 by rpki-client on console-ams.rpki-client.org