Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1620e226-9e80-43cf-a818-374517f5478a/9f38951ecc21ee07da0193ff8aa9a9ab6c5961f7.roa
File:                     9f38951ecc21ee07da0193ff8aa9a9ab6c5961f7.roa (raw, json)
Hash identifier:          ag/f/xnaeJsAJ1sYWZqgB9VwrmhjTvw2r3wX1mF/5b0=
Subject key identifier:   DB:4B:E7:04:49:A7:9E:B1:91:76:24:52:39:02:FF:1E:9F:7D:57:CF
Certificate issuer:       /CN=e5f6b5f9cb86ee1091b2190e6c1bda8984b3d14e
Certificate serial:       0B9ABC
Authority key identifier: 20:CB:01:94:FA:06:20:C5:24:3F:A3:60:40:49:A8:5A:77:66:76:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5f6b5f9cb86ee1091b2190e6c1bda8984b3d14e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1620e226-9e80-43cf-a818-374517f5478a/9f38951ecc21ee07da0193ff8aa9a9ab6c5961f7.roa
Signing time:             Wed 24 Mar 2021 14:31:26 +0000
ROA not before:           Wed 24 Mar 2021 14:31:26 +0000
ROA not after:            Tue 24 Mar 2026 14:31:26 +0000
asID:                     267820
IP address blocks:        45.174.129.0/24 maxlen: 24
                          45.174.130.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 760508 (0xb9abc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5f6b5f9cb86ee1091b2190e6c1bda8984b3d14e
        Validity
            Not Before: Mar 24 14:31:26 2021 GMT
            Not After : Mar 24 14:31:26 2026 GMT
        Subject: CN=9f38951ecc21ee07da0193ff8aa9a9ab6c5961f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:40:5f:ac:55:36:90:da:16:a8:0b:80:15:d3:
                    03:65:89:24:77:65:07:5b:57:f7:6b:c2:6e:d6:43:
                    d0:0e:a2:ff:63:2a:22:14:39:d3:90:06:45:c4:b5:
                    6c:42:b0:e2:7a:42:f0:bf:52:8f:bc:de:f3:43:1c:
                    64:2e:d6:6e:16:81:ed:38:e3:d5:c3:18:61:84:2a:
                    53:79:31:2c:7e:75:bf:d6:50:96:e0:2a:57:ea:82:
                    98:e3:9f:ce:d2:9a:78:38:2a:c6:6e:e3:31:35:0e:
                    85:b5:04:d0:7c:9f:61:cf:1d:71:e5:a8:29:35:49:
                    e0:3f:da:22:e9:ad:8c:4a:52:d7:50:ac:7e:45:92:
                    45:5d:da:4e:dd:01:14:3f:c0:c7:fc:b7:59:a8:3e:
                    1d:f6:8a:0b:e3:90:1a:6c:af:fb:3f:24:94:4c:59:
                    3e:94:8f:0c:f5:ca:c7:58:5c:67:a0:43:9b:1c:73:
                    d6:4d:81:e8:23:f9:80:2e:a8:fa:1f:51:7b:e2:34:
                    7a:7e:72:fe:24:04:d0:ca:47:86:a9:fd:7c:7a:18:
                    f6:71:9e:58:62:fa:36:f7:ac:ad:95:f4:a0:f3:bc:
                    84:96:2b:88:77:f1:55:81:28:a8:c4:7c:8b:31:fc:
                    11:ac:76:4b:37:de:a4:c4:42:91:8a:27:6e:0a:47:
                    2e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:4B:E7:04:49:A7:9E:B1:91:76:24:52:39:02:FF:1E:9F:7D:57:CF
            X509v3 Authority Key Identifier:
                keyid:20:CB:01:94:FA:06:20:C5:24:3F:A3:60:40:49:A8:5A:77:66:76:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5f6b5f9cb86ee1091b2190e6c1bda8984b3d14e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1620e226-9e80-43cf-a818-374517f5478a/9f38951ecc21ee07da0193ff8aa9a9ab6c5961f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1620e226-9e80-43cf-a818-374517f5478a/e5f6b5f9cb86ee1091b2190e6c1bda8984b3d14e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.129.0-45.174.131.255

    Signature Algorithm: sha256WithRSAEncryption
         54:62:79:ba:79:e6:7e:74:b4:81:41:a6:34:8d:31:7e:31:4e:
         7f:98:a5:a4:1d:13:07:e7:8b:bd:21:a7:ba:bf:2c:21:6a:13:
         3a:65:99:00:b1:f1:2b:79:77:66:b9:33:57:04:b5:f2:86:41:
         9a:9a:84:18:14:84:a6:c8:f5:42:e0:de:66:54:83:a5:5d:5f:
         f0:2a:cf:a7:b1:28:8c:5a:ad:0d:1a:8f:09:4d:23:ee:2d:66:
         a2:a2:b4:a4:5c:66:f1:0b:2b:47:4e:55:bd:fa:30:4d:dd:14:
         ac:23:89:01:d3:3b:47:2e:46:ef:5d:3e:ac:f1:da:ed:52:bf:
         aa:22:38:bc:90:3e:78:b0:a2:20:15:18:a3:11:c6:c0:9c:c9:
         8c:a9:3f:55:69:f9:19:76:15:87:2f:35:a1:b1:8d:87:d1:19:
         02:83:e1:ba:f5:fe:d1:42:d0:64:d0:75:61:70:05:54:11:20:
         57:1a:9e:d9:3e:af:ae:57:6e:cd:49:d5:2f:46:6c:41:c2:e0:
         7d:ee:8a:a0:ce:76:71:1f:ee:01:32:39:9a:53:95:6b:b0:36:
         74:f5:bd:64:98:95:9b:77:55:41:03:ee:91:d3:e2:75:3a:f9:
         5b:b2:96:c6:3c:3a:8f:5a:18:ee:52:20:c0:32:d1:52:06:fa:
         7f:61:a2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:09 2023 by rpki-client on console-fra.rpki-client.org