Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/f82307d7778f029f26310c95a4af9b10100ee3e1.roa
File:                     f82307d7778f029f26310c95a4af9b10100ee3e1.roa (raw, json)
Hash identifier:          kJIiTL/owfn83W6bwROjuDrpb2hWBI3hwygb6yzAhbY=
Subject key identifier:   BA:F1:DA:2C:D2:2C:0E:6E:97:C1:6A:D0:3D:7D:0C:A0:2C:AA:38:CB
Certificate issuer:       /CN=22a259f7457f4c5eaca64b503847e85d96b4f33f
Certificate serial:       097A
Authority key identifier: 6D:5C:E4:3D:AB:A9:04:5E:23:48:B0:B5:66:66:34:C9:FB:C0:85:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22a259f7457f4c5eaca64b503847e85d96b4f33f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/f82307d7778f029f26310c95a4af9b10100ee3e1.roa
Signing time:             Mon 17 Jan 2022 23:22:27 +0000
ROA not before:           Mon 17 Jan 2022 03:00:00 +0000
ROA not after:            Wed 17 Jan 2024 03:00:00 +0000
asID:                     269735
IP address blocks:        45.181.189.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 16 Jan 2024 07:31:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2426 (0x97a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22a259f7457f4c5eaca64b503847e85d96b4f33f
        Validity
            Not Before: Jan 17 03:00:00 2022 GMT
            Not After : Jan 17 03:00:00 2024 GMT
        Subject: CN=f82307d7778f029f26310c95a4af9b10100ee3e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:97:dc:ed:df:1e:a9:51:9c:a5:bb:a7:a3:50:
                    82:0e:ac:71:87:c6:9f:bf:91:1d:cc:99:2a:dd:30:
                    62:71:96:78:87:cd:a4:60:76:4a:de:80:70:f8:05:
                    d6:0a:8e:21:7a:39:f4:a5:30:f4:04:62:2b:1b:15:
                    3c:99:2a:ef:04:a8:d0:96:2f:ab:5d:ed:fc:0f:ce:
                    4f:f8:95:14:33:39:45:94:78:a8:34:3c:e9:17:d3:
                    fb:14:de:5b:49:73:f3:24:9d:0c:ab:a2:a3:c6:17:
                    53:b1:da:9b:00:8e:12:4b:b8:4e:ef:0e:8e:83:d7:
                    7b:3b:72:00:47:22:f4:37:4a:15:7c:01:fc:bb:e4:
                    4e:ed:53:f2:74:34:c5:22:bb:1f:78:c7:a4:74:d1:
                    10:5a:90:45:7b:08:aa:5c:17:1d:7a:98:1f:24:99:
                    3c:77:55:a6:0c:3b:0d:92:96:cd:7b:56:3e:19:41:
                    cf:fe:d2:39:b6:b1:ab:ac:95:be:e3:56:cd:7a:23:
                    b8:c3:80:c4:32:ce:b3:10:49:0b:b9:f2:fe:2a:02:
                    fb:34:90:a4:10:4d:64:28:e9:f1:11:91:65:43:23:
                    13:91:65:e8:cf:4d:81:1f:db:c5:71:6a:a6:72:6b:
                    17:6e:4c:0f:b2:76:89:0f:aa:26:62:40:df:18:5f:
                    6f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F1:DA:2C:D2:2C:0E:6E:97:C1:6A:D0:3D:7D:0C:A0:2C:AA:38:CB
            X509v3 Authority Key Identifier:
                keyid:6D:5C:E4:3D:AB:A9:04:5E:23:48:B0:B5:66:66:34:C9:FB:C0:85:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/22a259f7457f4c5eaca64b503847e85d96b4f33f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/f82307d7778f029f26310c95a4af9b10100ee3e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18c9eb91-8740-4b1b-8135-5ced13b3f113/22a259f7457f4c5eaca64b503847e85d96b4f33f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:77:8d:8c:2c:fd:9b:b3:06:2d:2b:4a:12:75:83:d0:f7:05:
         38:be:f1:b6:72:7f:4c:d9:ee:44:67:c5:ba:d0:26:b5:c7:17:
         b6:74:f6:72:a6:6b:73:92:62:30:a2:9d:58:d4:ea:b1:e0:ed:
         dd:d7:88:83:97:8c:d8:e4:5f:e1:eb:09:c8:51:19:bf:d7:b2:
         92:9c:96:71:0e:f8:21:85:54:dd:27:7a:23:b0:ed:58:4a:10:
         4e:67:87:0a:49:8d:fb:b0:ef:72:36:86:f9:63:d3:95:25:85:
         9e:d5:37:b9:2d:d7:bc:2a:23:1d:8a:32:30:c7:b6:3f:7e:5a:
         02:d0:be:70:5e:48:ff:88:b8:3c:e2:d3:b9:8b:70:12:8e:eb:
         5e:ce:a7:39:14:28:cc:87:36:cf:92:f5:34:cc:81:f4:27:dd:
         21:bf:e7:27:4e:7e:d7:ef:b7:41:66:7e:b1:7f:e2:da:d8:ab:
         6b:f2:2f:e1:79:ce:b6:89:85:2a:5a:bb:1b:45:db:5b:ef:0a:
         1f:d6:87:06:56:16:03:a1:83:31:e7:d0:0e:3a:b3:e8:d9:9a:
         10:dd:d8:7e:45:19:f5:dc:d7:b5:79:ee:3d:70:98:de:c3:98:
         e5:b5:55:aa:ab:7e:f9:f4:7f:c7:e0:fe:df:ab:67:eb:40:6a:
         dd:f4:64:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 12:45:10 2024 by rpki-client on console-ams.rpki-client.org