Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cb73da2-794f-46c0-8cd1-ea0cf0947f87/ce10fac4e41b56aa626820bb94563cc1679b47eb.roa
File:                     ce10fac4e41b56aa626820bb94563cc1679b47eb.roa (raw, json)
Hash identifier:          hysPaQCEIv2GLnA+bwadnAeaQrnmN4QqSuUYTzz7pE8=
Subject key identifier:   BB:58:51:E6:44:0E:45:02:92:AB:ED:AC:EE:00:67:E8:86:92:C1:02
Certificate issuer:       /CN=fa51358f08e5b961b8771fd9e9a858af6e1a4b4c
Certificate serial:       06DD
Authority key identifier: 27:5D:8C:C6:B0:4B:F0:2A:37:A8:B9:45:1A:34:E9:6E:F2:9A:5D:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa51358f08e5b961b8771fd9e9a858af6e1a4b4c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cb73da2-794f-46c0-8cd1-ea0cf0947f87/ce10fac4e41b56aa626820bb94563cc1679b47eb.roa
Signing time:             Thu 12 May 2022 18:50:54 +0000
ROA not before:           Thu 12 May 2022 03:00:00 +0000
ROA not after:            Sun 12 May 2024 03:00:00 +0000
asID:                     267858
IP address blocks:        170.244.168.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1757 (0x6dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa51358f08e5b961b8771fd9e9a858af6e1a4b4c
        Validity
            Not Before: May 12 03:00:00 2022 GMT
            Not After : May 12 03:00:00 2024 GMT
        Subject: CN=ce10fac4e41b56aa626820bb94563cc1679b47eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9f:80:d6:f7:f7:57:a9:b2:6d:eb:52:84:77:
                    61:3a:6f:d8:a5:92:8e:cd:61:66:4e:da:eb:b9:0d:
                    0a:e6:af:5c:f3:1d:38:6d:39:08:2e:1f:a9:c6:31:
                    88:e9:e2:c1:ce:bc:8e:63:fd:23:b3:16:e6:14:c5:
                    75:d1:67:e2:92:9a:1d:46:f5:5d:e6:6d:a8:b6:4d:
                    73:9a:31:6e:1f:dd:cf:17:ab:0c:f1:c7:83:d1:d7:
                    bf:d9:0b:c5:43:5e:e5:26:c1:c7:10:1b:ad:40:6e:
                    12:4e:c0:6d:ed:c9:83:3b:a0:38:20:2f:65:02:88:
                    76:ad:17:e2:0c:15:ba:1f:6c:4c:07:e8:09:f2:17:
                    25:10:d0:2c:e7:60:67:31:9f:51:43:6a:fc:5c:df:
                    84:bd:96:c4:04:45:0e:b4:42:40:27:2b:3b:3e:36:
                    d4:57:da:8f:40:04:f8:5a:de:e9:1f:57:71:0e:33:
                    65:6b:e1:d0:ca:3b:cd:75:30:68:54:a2:50:aa:52:
                    82:fd:a4:51:76:5f:b7:e8:c4:0a:f1:f7:fb:66:fa:
                    52:9a:70:20:2c:96:50:64:db:dd:8e:21:ed:45:0a:
                    2a:df:aa:5e:b9:9a:a9:8b:a7:a1:ec:97:ef:8d:da:
                    cc:b8:89:0d:6b:0e:20:26:3f:4f:d9:26:93:4f:a4:
                    56:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:58:51:E6:44:0E:45:02:92:AB:ED:AC:EE:00:67:E8:86:92:C1:02
            X509v3 Authority Key Identifier:
                keyid:27:5D:8C:C6:B0:4B:F0:2A:37:A8:B9:45:1A:34:E9:6E:F2:9A:5D:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa51358f08e5b961b8771fd9e9a858af6e1a4b4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cb73da2-794f-46c0-8cd1-ea0cf0947f87/ce10fac4e41b56aa626820bb94563cc1679b47eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cb73da2-794f-46c0-8cd1-ea0cf0947f87/fa51358f08e5b961b8771fd9e9a858af6e1a4b4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:df:f3:27:6a:13:21:7d:7c:87:ec:64:95:86:af:d6:83:8b:
         e2:d0:f2:90:10:15:77:9c:b9:37:74:30:a7:20:ae:54:c6:d9:
         ce:0a:cf:0d:0f:24:63:ed:65:7e:48:d8:47:6b:48:be:d9:bf:
         48:80:96:dc:62:0b:33:03:54:ed:72:b5:05:e5:9f:01:f7:dd:
         1c:b3:e8:d0:80:6d:29:19:df:af:88:f0:ed:09:af:0f:64:d1:
         11:6e:a4:bc:21:cd:7f:67:89:e7:bf:38:a4:d0:97:62:73:4d:
         1d:e5:83:45:d1:d9:b6:cb:d4:49:b4:47:52:3d:e5:51:97:33:
         ff:f2:18:d9:24:4d:09:50:dc:9b:53:38:e1:97:62:25:88:e9:
         80:bd:5d:cb:d8:f2:68:a5:0f:eb:d9:32:61:21:4c:63:e1:20:
         0f:a5:13:8b:a4:18:da:4f:fc:65:78:c9:06:5c:ab:5c:a0:4e:
         ee:96:1d:8f:11:6d:28:26:2b:63:b3:66:8d:65:2d:fb:3b:7a:
         2b:4a:c6:73:48:93:31:c7:e2:7e:9f:73:2f:73:14:a5:0e:01:
         41:ad:2f:84:3f:d0:4f:68:4e:86:38:28:1e:f2:70:be:a4:26:
         2b:b2:80:6c:38:f4:71:06:af:12:5d:d6:ac:55:27:fb:6c:62:
         9f:e3:cd:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:25 2023 by rpki-client on console-ams.rpki-client.org