Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18386e65-10b3-41ce-97fb-fbdf743021cb/e95d5f99c46b2638ad28b05c25d3aeaa42920149.roa
File:                     e95d5f99c46b2638ad28b05c25d3aeaa42920149.roa (raw, json)
Hash identifier:          dpNjOEH8KQ3QJFSwzjksiq1LDNe/xkvh0GD2kKmLHC0=
Subject key identifier:   24:52:CF:73:5A:D6:84:02:62:B6:2A:18:4B:46:3E:F6:67:8F:76:25
Certificate issuer:       /CN=c560eea44fdf14c3d0effd0e6c1c940665ab05f4
Certificate serial:       224F8A
Authority key identifier: 19:56:C3:64:8D:27:F7:2F:BA:29:18:B1:43:20:50:23:97:1E:6C:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c560eea44fdf14c3d0effd0e6c1c940665ab05f4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18386e65-10b3-41ce-97fb-fbdf743021cb/e95d5f99c46b2638ad28b05c25d3aeaa42920149.roa
Signing time:             Wed 05 Jul 2023 01:47:29 +0000
ROA not before:           Tue 04 Jul 2023 01:47:29 +0000
ROA not after:            Sat 05 Jul 2025 01:47:29 +0000
asID:                     52468
IP address blocks:        45.70.200.0/24 maxlen: 24
                          45.70.201.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2248586 (0x224f8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c560eea44fdf14c3d0effd0e6c1c940665ab05f4
        Validity
            Not Before: Jul  4 01:47:29 2023 GMT
            Not After : Jul  5 01:47:29 2025 GMT
        Subject: CN=e95d5f99c46b2638ad28b05c25d3aeaa42920149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:cc:c3:80:a4:a8:28:70:58:19:d1:c0:61:d3:
                    59:0a:af:a4:17:2c:35:0a:eb:cf:86:12:22:eb:79:
                    43:56:cf:1f:9e:fb:57:d8:84:57:d0:d0:4a:df:f8:
                    79:ed:45:bd:46:b5:5f:6e:1e:0c:6f:e1:1a:2a:ca:
                    30:bb:9d:4a:cf:23:87:22:77:cf:3a:29:a6:a8:83:
                    90:24:0a:c2:ea:d7:91:ab:4a:6c:1c:17:e4:d0:ec:
                    9b:38:26:8f:f5:96:16:2a:c2:e5:ad:b6:11:81:b8:
                    cd:fb:b0:76:28:b6:7c:35:de:7b:85:c2:ed:23:f9:
                    f0:7e:3a:bb:ee:3e:e5:ea:af:b9:99:bd:f9:6c:df:
                    44:24:4f:31:48:a2:f6:f1:1d:6f:5a:90:ec:8d:e9:
                    f8:19:dd:5d:33:16:42:d0:7b:45:ee:c8:e4:3b:82:
                    d5:07:45:78:ae:97:c6:da:e6:67:7c:1a:80:44:93:
                    f2:4a:c0:1b:19:54:ab:9b:26:42:61:63:a7:24:48:
                    ef:bb:e7:5f:83:5c:85:c5:c7:4e:21:b8:97:58:95:
                    67:e5:29:67:39:80:31:fc:62:77:ac:50:01:3a:44:
                    0e:01:94:d4:72:b5:87:97:28:a0:a3:be:69:31:1b:
                    96:68:88:4a:1e:74:f0:be:58:d5:01:8c:19:87:4e:
                    a0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:52:CF:73:5A:D6:84:02:62:B6:2A:18:4B:46:3E:F6:67:8F:76:25
            X509v3 Authority Key Identifier:
                keyid:19:56:C3:64:8D:27:F7:2F:BA:29:18:B1:43:20:50:23:97:1E:6C:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c560eea44fdf14c3d0effd0e6c1c940665ab05f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18386e65-10b3-41ce-97fb-fbdf743021cb/e95d5f99c46b2638ad28b05c25d3aeaa42920149.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18386e65-10b3-41ce-97fb-fbdf743021cb/c560eea44fdf14c3d0effd0e6c1c940665ab05f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:0a:54:a8:aa:8d:54:69:6a:ff:d1:68:2c:62:79:b1:3c:0c:
         30:81:28:12:12:1e:2f:9e:94:d0:93:dd:0e:51:c7:a7:98:3e:
         ce:00:55:51:68:c2:f5:f0:56:87:aa:1c:37:9b:ab:c9:b7:92:
         5c:d0:c7:d7:4c:bf:b9:c1:0e:ec:e9:e2:c0:8e:d6:32:ed:4c:
         2c:72:6e:99:be:b9:8c:04:83:4a:1e:f0:80:69:01:36:91:c0:
         a0:fd:f9:17:6d:23:70:bb:77:7b:be:0e:08:62:18:08:fc:a1:
         fc:fc:75:4e:af:c3:46:2e:ac:a7:30:e7:a4:fa:0c:12:f2:5d:
         60:7e:a3:73:2a:2b:a0:7e:56:fc:45:0f:4b:7c:03:cb:65:21:
         83:e7:80:67:50:b9:ad:4c:10:93:3e:f0:8e:9f:15:09:17:95:
         1d:ed:80:84:ae:e8:fa:fc:5e:89:e9:75:ab:da:03:fc:32:99:
         8e:9a:a9:40:de:a4:c1:48:55:fd:9a:7f:aa:3f:25:94:13:8d:
         df:78:a2:08:1b:d8:c8:18:a9:5c:52:d5:5f:7c:a6:95:49:73:
         6a:44:84:b6:ba:8f:b1:34:11:1e:bc:bf:b9:61:6a:07:71:d4:
         67:60:7a:9d:a7:64:d6:d2:04:77:ca:47:95:12:23:d3:50:25:
         77:27:f0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 17 20:26:36 2023 by rpki-client on console-ams.rpki-client.org