Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/163b874f4c596464153e344f926fd923d43183de.roa
File:                     163b874f4c596464153e344f926fd923d43183de.roa (raw, json)
Hash identifier:          W3gdP0nkYDKTT6+dQlPhSXEv7O6hDnAR2zwKD0Q71NY=
Subject key identifier:   F9:5F:C0:13:87:27:4E:68:49:01:F2:04:9B:0A:6C:B2:14:FA:BA:97
Certificate issuer:       /CN=05820a897e090cc17411129464e856f3f8c8966d
Certificate serial:       D803
Authority key identifier: 57:56:0F:F3:61:EC:70:AA:A6:73:92:E9:1A:7E:5F:A0:92:19:FD:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05820a897e090cc17411129464e856f3f8c8966d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/163b874f4c596464153e344f926fd923d43183de.roa
Signing time:             Mon 18 Apr 2022 19:05:14 +0000
ROA not before:           Tue 12 Apr 2022 03:00:00 +0000
ROA not after:            Fri 12 Apr 2024 03:00:00 +0000
asID:                     265572
IP address blocks:        45.174.59.0/24 maxlen: 26

Validation:               Failed, certificate revoked on Thu 11 Apr 2024 08:30:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55299 (0xd803)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05820a897e090cc17411129464e856f3f8c8966d
        Validity
            Not Before: Apr 12 03:00:00 2022 GMT
            Not After : Apr 12 03:00:00 2024 GMT
        Subject: CN=163b874f4c596464153e344f926fd923d43183de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:32:af:92:43:eb:dc:14:8e:8e:94:06:fd:c1:
                    26:49:19:3f:8e:fd:50:21:61:83:63:8d:99:82:4c:
                    7d:fd:70:7e:a0:be:4e:af:d2:94:97:0f:4e:2b:a3:
                    57:bb:b4:1c:5b:62:71:2a:50:09:6c:2b:c6:d2:a9:
                    28:27:3b:2b:cd:55:7e:dd:65:02:b4:8c:51:23:9b:
                    28:75:bd:d9:a1:57:51:11:61:db:fd:fb:7a:31:9a:
                    fa:a5:a9:d4:d2:a7:bd:81:2a:11:e7:da:36:ae:90:
                    98:e2:6a:30:3a:bc:70:f2:ba:27:84:3e:be:34:63:
                    fa:01:bf:63:97:e6:75:3f:ed:9a:9c:a3:1c:dd:df:
                    e7:11:3c:25:00:4a:f4:f1:20:92:9b:2d:1f:70:e4:
                    3b:c0:97:3c:f9:55:16:85:1a:e3:68:63:55:21:5d:
                    03:70:1c:1f:b3:87:45:7e:ae:3f:0f:ec:e5:60:09:
                    cb:05:c3:92:1d:22:8e:68:fb:b2:fa:e6:78:45:93:
                    67:3f:d3:a5:36:07:66:ce:ee:5d:e1:5a:43:5a:ff:
                    63:16:07:ca:81:0c:91:31:0f:ab:37:a0:67:73:dc:
                    13:97:59:91:ad:7c:e8:96:14:e3:4e:f6:4f:da:78:
                    28:55:02:1b:92:e9:a1:de:d8:db:8b:0b:98:e0:d6:
                    fb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:5F:C0:13:87:27:4E:68:49:01:F2:04:9B:0A:6C:B2:14:FA:BA:97
            X509v3 Authority Key Identifier:
                keyid:57:56:0F:F3:61:EC:70:AA:A6:73:92:E9:1A:7E:5F:A0:92:19:FD:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05820a897e090cc17411129464e856f3f8c8966d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/163b874f4c596464153e344f926fd923d43183de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/05820a897e090cc17411129464e856f3f8c8966d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:c5:51:b6:5a:3a:fb:73:7c:86:55:39:5e:9d:57:de:10:32:
         dc:f1:55:26:f1:02:ad:16:71:80:2d:66:13:e3:07:6e:03:97:
         d8:68:f2:f3:58:2a:26:d6:4e:7d:0a:3e:8b:aa:04:19:90:42:
         2b:0f:00:4a:11:38:d2:74:e6:54:7b:ab:6d:e4:cd:2a:56:ff:
         dc:f4:0b:69:c6:6a:79:ed:e2:51:b2:a9:37:57:1b:be:ea:1a:
         52:02:02:8a:44:e9:97:f1:b8:da:6e:ca:10:da:f7:c1:8d:aa:
         f8:86:5c:1c:b7:f3:ee:61:71:b8:eb:28:de:6a:37:58:1b:09:
         fe:6e:9e:6e:cf:bb:a9:d9:de:c5:54:24:07:64:7a:8b:f4:5f:
         82:a8:17:e6:48:c0:95:67:94:f9:34:2c:34:b0:22:37:80:a3:
         08:c7:c8:2e:89:6c:77:77:01:6e:d6:cc:ff:a1:c6:b7:f7:61:
         4b:87:4e:c0:e2:77:8a:85:ab:eb:27:52:64:53:6d:34:bf:86:
         12:48:3a:49:0b:ad:5f:22:e6:a6:22:e1:b9:e1:a0:64:ca:13:
         ae:b1:72:f0:4c:f3:e2:6b:ff:ea:b6:ba:cd:42:43:1b:16:16:
         8a:71:21:70:0e:29:f2:02:06:e6:31:6f:c9:01:9c:79:23:2e:
         00:12:e7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 11 11:03:08 2024 by rpki-client on console-ams.rpki-client.org