Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04d0b1e3-b3fb-4263-8248-a07e67e9f793/ddd45f81efa18d91b5730f7907dbc78a44fe8b00.roa
File:                     ddd45f81efa18d91b5730f7907dbc78a44fe8b00.roa (raw, json)
Hash identifier:          gMnZ+U6cykwRfKdz1MmBHq3ptKhK2R83EPjv0Z1okcA=
Subject key identifier:   09:AE:72:C4:9A:73:5B:23:96:13:AE:19:A1:7F:45:49:78:C0:83:FB
Certificate issuer:       /CN=b13d071b46d68829a9388770c45592a3ff309e4d
Certificate serial:       12EDB1
Authority key identifier: 53:06:7D:1B:30:6C:8B:4B:9C:94:07:FA:69:06:D8:74:8F:A6:DF:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b13d071b46d68829a9388770c45592a3ff309e4d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04d0b1e3-b3fb-4263-8248-a07e67e9f793/ddd45f81efa18d91b5730f7907dbc78a44fe8b00.roa
Signing time:             Tue 29 Mar 2022 01:32:28 +0000
ROA not before:           Mon 28 Mar 2022 03:00:00 +0000
ROA not after:            Thu 28 Mar 2024 03:00:00 +0000
asID:                     266721
IP address blocks:        45.191.84.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 27 Mar 2024 08:30:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1240497 (0x12edb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b13d071b46d68829a9388770c45592a3ff309e4d
        Validity
            Not Before: Mar 28 03:00:00 2022 GMT
            Not After : Mar 28 03:00:00 2024 GMT
        Subject: CN=ddd45f81efa18d91b5730f7907dbc78a44fe8b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a2:08:86:bb:df:16:28:16:62:9f:87:93:d2:
                    4c:03:3c:bf:de:3a:37:b7:a1:46:2b:99:6b:ec:c9:
                    14:17:55:fb:9f:d4:dc:b8:b1:cc:07:c3:38:d2:2b:
                    8b:95:b2:30:73:c7:63:b6:da:27:db:4f:a6:c7:69:
                    a7:86:d2:7f:eb:b9:11:6e:64:f5:0e:a6:cf:1a:7f:
                    0c:9c:ee:71:82:8f:c9:20:05:f6:50:b9:79:21:5e:
                    c2:15:5b:37:0c:10:7d:23:79:df:32:d0:98:90:c3:
                    45:a0:c9:46:5d:c2:d0:e7:c8:ee:17:02:33:12:c5:
                    67:33:e3:35:10:d4:f4:aa:f4:9e:46:af:e2:e8:1a:
                    70:58:37:86:f2:2e:30:0e:c4:68:3b:6d:7d:e4:fa:
                    33:ed:54:0e:c3:96:e5:41:d6:6c:8e:0d:f7:a6:dd:
                    97:1e:85:3f:6d:b4:92:6e:dc:12:23:77:2c:13:bf:
                    9e:51:22:89:76:2f:fd:5d:1a:88:7c:3f:ee:e0:e7:
                    02:45:cd:61:f4:b4:c2:1f:a1:e8:3a:07:59:e3:a3:
                    da:09:e1:f8:ff:1d:b8:e8:8c:5d:48:8f:91:a7:ca:
                    a2:42:7a:ca:7f:ea:b8:54:7a:4c:76:fe:89:28:40:
                    d3:29:5b:a6:d9:14:13:10:e7:e2:6f:88:cd:9a:24:
                    c4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:AE:72:C4:9A:73:5B:23:96:13:AE:19:A1:7F:45:49:78:C0:83:FB
            X509v3 Authority Key Identifier:
                keyid:53:06:7D:1B:30:6C:8B:4B:9C:94:07:FA:69:06:D8:74:8F:A6:DF:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b13d071b46d68829a9388770c45592a3ff309e4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04d0b1e3-b3fb-4263-8248-a07e67e9f793/ddd45f81efa18d91b5730f7907dbc78a44fe8b00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04d0b1e3-b3fb-4263-8248-a07e67e9f793/b13d071b46d68829a9388770c45592a3ff309e4d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:db:0d:57:0d:65:23:b4:c7:06:5e:55:7c:54:c7:da:dc:6d:
         98:bd:ee:42:13:0f:c1:bf:47:75:56:f5:15:1a:a3:ed:79:fd:
         02:3b:ab:df:1e:43:be:35:9d:92:12:4c:b7:d7:f2:48:48:52:
         a9:0f:80:b2:28:28:b3:9b:c3:55:21:4e:6d:26:dd:90:5a:37:
         4c:0e:7c:1b:60:47:6c:a5:f7:b2:71:fb:26:5c:55:2a:49:1b:
         54:0a:42:7f:38:7c:e2:fe:b8:53:32:c3:70:6f:5e:f7:0a:ff:
         17:1a:54:68:e9:a7:83:3c:d4:5f:0a:a6:ca:3b:72:86:dc:d1:
         a4:a5:c3:f7:34:e8:fc:1d:92:5e:04:e8:4b:89:e1:ee:2a:64:
         d9:a9:49:3b:63:14:bd:d5:b3:a8:b2:1c:6a:58:81:2c:c3:d7:
         4f:6f:6a:04:a0:b6:6c:f8:3a:30:51:da:17:a5:15:90:05:d4:
         d0:6a:9a:7e:d6:f5:b6:7b:88:2e:28:b7:b4:e7:fe:00:e3:82:
         68:da:ad:f4:c9:99:5d:8e:bf:74:42:43:f3:26:e5:b4:58:f7:
         00:a1:35:f0:83:3b:0c:7e:11:e2:7d:08:00:1c:6b:6d:72:bc:
         db:3b:bc:61:4c:44:b0:d7:a0:c8:c5:43:63:00:fa:1e:25:41:
         c7:7b:7c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 12:42:43 2024 by rpki-client on console-fra.rpki-client.org