Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/04118bf15392bb6affded5f5015d2d657b38b1fc.roa
File:                     04118bf15392bb6affded5f5015d2d657b38b1fc.roa (raw, json)
Hash identifier:          Ytq9yoPzHtZYLFRjsexGvXi83j4gCbqqV5+fNUSY7ow=
Subject key identifier:   BF:83:4E:C2:B7:63:43:3D:8D:34:C7:A2:AA:E9:A0:14:F6:28:FE:6F
Certificate issuer:       /CN=05820a897e090cc17411129464e856f3f8c8966d
Certificate serial:       DB97
Authority key identifier: 57:56:0F:F3:61:EC:70:AA:A6:73:92:E9:1A:7E:5F:A0:92:19:FD:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05820a897e090cc17411129464e856f3f8c8966d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/04118bf15392bb6affded5f5015d2d657b38b1fc.roa
Signing time:             Mon 18 Apr 2022 19:05:51 +0000
ROA not before:           Tue 12 Apr 2022 03:00:00 +0000
ROA not after:            Fri 12 Apr 2024 03:00:00 +0000
asID:                     265572
IP address blocks:        45.174.58.0/24 maxlen: 26

Validation:               Failed, certificate revoked on Thu 11 Apr 2024 08:30:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56215 (0xdb97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05820a897e090cc17411129464e856f3f8c8966d
        Validity
            Not Before: Apr 12 03:00:00 2022 GMT
            Not After : Apr 12 03:00:00 2024 GMT
        Subject: CN=04118bf15392bb6affded5f5015d2d657b38b1fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b7:f2:28:f7:6f:a6:df:f1:a0:a8:b9:40:7a:
                    3e:44:c0:f1:ee:dd:8b:01:0f:fa:9d:53:f2:57:b3:
                    07:7b:9d:e7:b2:82:07:ff:08:23:93:4a:e8:05:6b:
                    16:c4:a7:c1:fe:7c:bf:87:07:b0:6b:ed:96:e8:77:
                    16:e1:b0:4e:b1:6b:f2:32:a5:3f:7e:a2:7a:02:f8:
                    82:76:8e:5b:a9:d4:6f:c9:95:86:ec:35:e7:5d:23:
                    84:fb:3a:7d:a0:98:c1:6a:2a:ed:eb:f3:aa:d4:7a:
                    58:75:cf:11:d5:1b:8a:47:ed:bd:28:99:3e:98:4c:
                    c4:48:14:6d:1a:ee:61:bb:cf:a4:04:61:8c:dd:8f:
                    60:66:46:53:a6:a6:4b:56:35:27:3e:14:28:7a:9f:
                    fe:a9:9f:63:bf:74:be:17:17:e7:d0:7d:58:a5:04:
                    e9:24:41:d9:67:37:26:f3:98:d3:81:68:cd:92:dd:
                    cc:40:cc:63:b0:86:dc:81:c8:24:d9:54:26:ff:9c:
                    19:1d:db:51:b8:92:af:ac:8b:69:db:d0:65:c5:5d:
                    15:02:b2:b1:ee:77:1a:c4:00:91:0c:b5:92:83:16:
                    89:7a:66:22:02:4f:5c:43:19:bc:de:31:1a:73:b8:
                    08:39:85:fc:98:ca:69:24:15:c3:86:0b:50:70:d6:
                    1a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:83:4E:C2:B7:63:43:3D:8D:34:C7:A2:AA:E9:A0:14:F6:28:FE:6F
            X509v3 Authority Key Identifier:
                keyid:57:56:0F:F3:61:EC:70:AA:A6:73:92:E9:1A:7E:5F:A0:92:19:FD:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05820a897e090cc17411129464e856f3f8c8966d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/04118bf15392bb6affded5f5015d2d657b38b1fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/05820a897e090cc17411129464e856f3f8c8966d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:21:2d:19:7a:92:c8:29:7f:6c:77:3f:81:07:d0:c9:9a:71:
         38:40:21:b4:8e:58:85:71:45:2d:fe:5e:dd:e6:35:29:bc:6a:
         67:a1:6d:1f:c8:38:6a:f5:4a:06:55:39:9a:e5:db:db:96:f0:
         0d:23:02:b2:41:cf:c4:cf:41:b5:eb:5f:ba:4d:bd:53:c4:5d:
         a5:9c:33:08:60:59:09:3e:fb:f9:77:58:e4:b5:42:1b:a5:9e:
         81:8d:f1:ee:af:f3:1d:41:30:e2:f4:21:96:59:02:59:af:83:
         ad:73:76:a5:4e:e8:54:a8:19:63:88:34:bb:00:7a:19:4b:f8:
         e1:3a:5a:97:5d:f7:8f:e1:61:c1:56:39:35:87:df:1d:31:29:
         30:b7:71:bb:14:c7:58:6e:f2:73:4a:1b:ee:d5:df:df:ef:a6:
         d2:82:18:14:db:91:e7:fe:80:02:00:12:3f:98:92:5a:94:49:
         89:c0:53:c4:00:f1:59:3b:70:ec:92:c5:28:2a:6c:79:ce:da:
         15:80:5c:da:df:23:10:a9:ea:e7:cd:6f:2d:9c:7c:2d:f6:62:
         7c:84:2d:29:36:04:5e:61:57:85:7e:17:b7:52:87:3f:6d:ee:
         fe:4f:0b:de:f1:2d:0c:bf:95:f6:26:00:1c:1a:fe:cc:60:e0:
         2e:04:57:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 11 11:03:08 2024 by rpki-client on console-ams.rpki-client.org