Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c61b0c7-6aca-4130-982f-77023cc4f159/ecf5d03c330285c5471fa31709f2188d65c6614d.roa
File:                     ecf5d03c330285c5471fa31709f2188d65c6614d.roa (raw, json)
Hash identifier:          pdl/fy+R3sIRRMJDBU0rP4zIkRlG2Esy3EiYnlSHY08=
Subject key identifier:   05:37:A6:DD:36:A3:42:32:0D:50:57:59:C6:08:94:0E:41:8A:35:82
Certificate issuer:       /CN=2a1551a800f1287e313b33ac0eef8bed7ac4efd2
Certificate serial:       145951
Authority key identifier: 4D:90:36:EE:73:A6:50:80:F5:E1:16:5F:C8:00:64:05:E2:7B:5B:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a1551a800f1287e313b33ac0eef8bed7ac4efd2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0c61b0c7-6aca-4130-982f-77023cc4f159/ecf5d03c330285c5471fa31709f2188d65c6614d.roa
Signing time:             Tue 09 Aug 2022 17:53:01 +0000
ROA not before:           Wed 24 Mar 2021 14:32:08 +0000
ROA not after:            Tue 24 Mar 2026 14:32:08 +0000
asID:                     266725
IP address blocks:        45.65.224.0/22 maxlen: 24
                          2803:e5c0::/32 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1333585 (0x145951)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a1551a800f1287e313b33ac0eef8bed7ac4efd2
        Validity
            Not Before: Mar 24 14:32:08 2021 GMT
            Not After : Mar 24 14:32:08 2026 GMT
        Subject: CN=ecf5d03c330285c5471fa31709f2188d65c6614d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:05:be:d4:cd:3c:44:5e:9b:c9:e7:c4:1c:b8:
                    26:ce:07:ef:ae:2a:ef:bd:a2:81:2d:73:44:af:79:
                    91:85:cb:af:1a:72:22:5d:d5:93:0d:a1:3b:d0:97:
                    df:c9:68:af:c2:27:4c:2d:2f:bc:8f:80:d5:29:65:
                    82:47:e2:8e:97:95:27:9f:3a:f7:83:56:0e:66:1c:
                    d6:e0:04:8a:a1:58:14:e2:0c:ff:2b:c6:d2:eb:04:
                    d9:06:80:1b:7b:df:a9:9a:82:f7:3e:b8:02:27:84:
                    74:1e:23:5e:ee:e6:ba:42:0b:21:f1:b7:06:42:fc:
                    4f:ad:c9:0c:03:11:bb:99:c0:1e:d0:70:2f:df:c6:
                    48:ee:f8:ec:a7:c8:2d:e6:eb:00:8e:41:e7:0e:85:
                    7d:3c:d1:48:6d:84:18:d3:33:a1:7c:8d:e4:7c:00:
                    2c:2e:f5:03:45:42:00:f4:53:f7:bd:e7:90:09:89:
                    ff:5c:46:c2:f6:5e:8b:2f:15:05:fa:3a:78:99:5a:
                    49:a1:26:a2:3f:c9:d3:5d:a2:b9:a3:4e:5a:fb:4b:
                    f9:74:fc:03:12:5b:aa:f9:f8:2b:89:98:ba:6e:26:
                    15:17:5e:8e:0f:4f:fa:13:49:f7:3d:c6:60:44:6a:
                    13:d1:0c:eb:ae:0d:7e:01:ec:2c:75:58:55:60:7c:
                    6b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:37:A6:DD:36:A3:42:32:0D:50:57:59:C6:08:94:0E:41:8A:35:82
            X509v3 Authority Key Identifier:
                keyid:4D:90:36:EE:73:A6:50:80:F5:E1:16:5F:C8:00:64:05:E2:7B:5B:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a1551a800f1287e313b33ac0eef8bed7ac4efd2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c61b0c7-6aca-4130-982f-77023cc4f159/ecf5d03c330285c5471fa31709f2188d65c6614d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0c61b0c7-6aca-4130-982f-77023cc4f159/2a1551a800f1287e313b33ac0eef8bed7ac4efd2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.224.0/22
                IPv6:
                  2803:e5c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:f4:93:c7:71:1b:50:e4:cf:2f:f7:cc:a4:3c:28:ba:36:fc:
         f9:b8:83:8a:9e:12:1c:b5:37:d3:95:14:38:ea:cc:64:d8:bb:
         46:46:e5:dd:8a:36:11:5d:90:96:0b:c2:38:29:77:40:7e:28:
         49:db:47:c9:be:c1:c4:fc:85:21:4d:05:b6:a8:15:c5:d5:64:
         12:00:b8:10:cb:d4:ac:fa:10:e9:aa:c0:c2:6e:5b:00:11:95:
         0c:fb:11:67:90:a7:7a:fc:65:3b:71:11:2d:b4:3e:8f:50:ba:
         15:1f:4c:37:8f:76:bb:de:60:99:d3:4b:91:ba:d1:bc:a2:1e:
         c1:25:b6:33:8a:09:b8:da:c1:6b:14:c6:12:1f:2d:0b:44:4b:
         c7:8b:ac:0b:47:58:73:52:32:79:e5:64:5a:6a:01:97:ea:e1:
         0a:38:1e:87:d1:b9:bc:4d:1e:5b:67:23:c3:b0:59:17:62:e5:
         05:b5:e1:0e:cf:37:ed:63:46:68:d9:40:0c:ec:37:36:c7:ea:
         2d:54:cd:30:ae:94:51:14:3b:eb:d6:c7:30:f6:f0:a6:ff:42:
         31:4f:cb:ad:da:67:32:01:85:b6:1e:38:b9:88:92:02:9b:7d:
         dc:7b:39:c2:8e:e5:5b:d8:31:fe:cf:5c:7f:59:84:b6:c5:e7:
         f3:33:ac:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:09 2023 by rpki-client on console-fra.rpki-client.org