Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1c494acd-67c1-46c0-b6c5-caabcbce1d94/58f4b1f4562dc14495b7c62887e22162728f7958.roa
File:                     58f4b1f4562dc14495b7c62887e22162728f7958.roa (raw, json)
Hash identifier:          7slCS9t2g7Pz24MdVX0t6ZiBpNzvxqng/Op9u3zC7R0=
Subject key identifier:   90:C4:EC:12:46:4B:4E:60:3A:C6:C1:12:65:E6:65:29:0D:2E:BC:B7
Certificate issuer:       /CN=610a073086b39384e909786d0a194418acd0bd49
Certificate serial:       2526E8
Authority key identifier: D6:DA:C6:62:CF:C3:1A:BF:C6:77:86:7C:A6:81:8B:3F:4D:86:F0:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/610a073086b39384e909786d0a194418acd0bd49.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1c494acd-67c1-46c0-b6c5-caabcbce1d94/58f4b1f4562dc14495b7c62887e22162728f7958.roa
Signing time:             Tue 17 Oct 2023 19:53:59 +0000
ROA not before:           Mon 16 Oct 2023 19:53:59 +0000
ROA not after:            Fri 17 Oct 2025 19:53:59 +0000
asID:                     52468
IP address blocks:        45.70.56.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2434792 (0x2526e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610a073086b39384e909786d0a194418acd0bd49
        Validity
            Not Before: Oct 16 19:53:59 2023 GMT
            Not After : Oct 17 19:53:59 2025 GMT
        Subject: CN=58f4b1f4562dc14495b7c62887e22162728f7958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0e:e2:9f:37:73:c4:93:82:d2:5b:e4:c0:4f:
                    13:b1:86:b9:9f:b7:97:2d:60:59:76:7c:6e:e5:53:
                    a7:9e:45:50:69:77:13:ff:1b:c1:25:3a:55:1a:de:
                    22:6e:24:3c:d8:45:fe:7e:6d:64:e2:e1:5a:07:c7:
                    0f:1a:2e:a3:1b:46:4e:ce:41:44:45:4f:13:e7:36:
                    78:2d:44:7b:c3:71:58:6f:82:46:f1:ed:23:18:10:
                    d3:ee:ab:53:30:f2:ed:4c:24:6d:57:fd:c7:40:44:
                    cf:75:f1:eb:f7:78:02:9e:ea:60:72:8f:59:28:45:
                    2a:bd:43:46:a2:80:5f:29:55:11:c3:34:b9:3d:5d:
                    68:0b:99:f1:8d:5d:9f:0a:ce:6f:63:6a:e9:b7:99:
                    f7:ba:25:8d:8a:a2:ff:db:ec:9d:2a:48:64:4a:2b:
                    32:be:5c:8d:76:8c:f7:21:56:44:5c:5b:14:4e:49:
                    9b:99:92:f5:fb:74:27:ea:10:ba:74:c1:0c:1a:3a:
                    d9:86:49:b3:4a:a4:25:b3:5c:40:e4:14:89:dd:bc:
                    cb:3e:f7:15:8d:d3:53:ca:48:76:9f:db:ff:8f:ba:
                    ab:5e:ef:a4:1c:84:60:d4:e3:da:17:f0:8e:d1:f2:
                    a8:54:d1:c7:d5:ce:95:43:d9:d6:4e:a1:d1:86:74:
                    1d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:C4:EC:12:46:4B:4E:60:3A:C6:C1:12:65:E6:65:29:0D:2E:BC:B7
            X509v3 Authority Key Identifier:
                keyid:D6:DA:C6:62:CF:C3:1A:BF:C6:77:86:7C:A6:81:8B:3F:4D:86:F0:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/610a073086b39384e909786d0a194418acd0bd49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1c494acd-67c1-46c0-b6c5-caabcbce1d94/58f4b1f4562dc14495b7c62887e22162728f7958.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1c494acd-67c1-46c0-b6c5-caabcbce1d94/610a073086b39384e909786d0a194418acd0bd49.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:ef:5d:8a:25:4b:4d:d6:ca:93:64:db:01:d6:d3:71:78:45:
         79:79:0f:2b:01:21:52:19:66:70:2c:e2:60:1d:2f:36:f9:70:
         40:fa:2e:da:9b:be:ce:b4:ac:26:f7:47:a7:04:90:b8:c1:0d:
         9f:b3:37:b5:b8:e3:a0:04:47:72:7b:dd:05:28:f7:4d:de:14:
         c6:be:3c:d1:28:60:74:22:fa:72:c8:51:4e:6c:db:15:90:07:
         02:71:c6:65:5f:87:86:bb:15:fe:1d:d8:3e:db:ad:ef:a4:55:
         dc:97:24:a9:9b:82:d2:5a:6d:cf:ab:f7:dc:1d:1d:f4:cd:09:
         ee:de:ff:1c:cc:06:fd:e0:15:9e:e6:d2:6b:70:ee:0a:b1:c6:
         78:a1:a1:18:0f:94:bc:74:8f:02:f7:df:3d:08:ff:22:d9:be:
         02:ab:ad:34:c2:4f:4f:64:06:bf:65:ba:ff:f6:12:19:60:fe:
         f1:d3:c3:06:e6:71:a0:62:8d:e6:c6:33:35:37:91:f2:19:15:
         18:83:c3:5a:b5:c8:ac:a8:0f:0f:8e:0b:0f:20:7b:8c:63:aa:
         ff:ed:4d:83:9f:3c:79:87:9c:50:2e:d7:cc:85:c8:46:6f:58:
         2b:16:05:fe:81:26:a8:74:85:b7:95:38:c3:cb:58:1b:2d:41:
         17:14:e5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 3 22:35:24 2024 by rpki-client on console-ams.rpki-client.org