Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2bbb4bba-9e09-435c-b8b6-e72cba0f507d/e90222d6822110cd1034f61c7fb2799fb958b5cb.roa
File:                     e90222d6822110cd1034f61c7fb2799fb958b5cb.roa (raw, json)
Hash identifier:          nQ6SzsMQr0oOB/sZHJ7hEDq/fbXzhNN+OEhLBB1kwZI=
Subject key identifier:   BD:7D:91:62:CE:3C:DC:D6:6E:A8:3C:CD:A3:88:7D:08:92:EB:AC:9F
Certificate issuer:       /CN=55c0fb0d5531f91dd06c19ed8fa00f2687176d55
Certificate serial:       0CCBCD
Authority key identifier: BA:80:9B:F0:B1:12:1D:91:3D:20:0B:4F:F8:8B:7C:71:84:C6:58:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/55c0fb0d5531f91dd06c19ed8fa00f2687176d55.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2bbb4bba-9e09-435c-b8b6-e72cba0f507d/e90222d6822110cd1034f61c7fb2799fb958b5cb.roa
Signing time:             Wed 24 Mar 2021 14:40:03 +0000
ROA not before:           Wed 24 Mar 2021 14:40:02 +0000
ROA not after:            Tue 24 Mar 2026 14:40:02 +0000
asID:                     266728
IP address blocks:        45.229.87.0/24 maxlen: 24
                          2803:5320::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 838605 (0xccbcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c0fb0d5531f91dd06c19ed8fa00f2687176d55
        Validity
            Not Before: Mar 24 14:40:02 2021 GMT
            Not After : Mar 24 14:40:02 2026 GMT
        Subject: CN=e90222d6822110cd1034f61c7fb2799fb958b5cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d5:b6:78:68:f1:bf:da:f1:a3:80:4e:13:19:
                    1b:51:40:77:81:3b:b0:1e:5f:8c:fb:ad:18:e5:e4:
                    18:42:13:fb:0a:ac:8b:ca:6b:d2:eb:4b:ff:78:3d:
                    2d:0c:69:55:3a:4d:37:37:64:c1:0f:13:89:d3:43:
                    7a:21:61:f8:e9:e0:0a:dc:31:48:e8:24:b1:01:78:
                    45:f0:fd:53:27:3b:4c:8f:db:d2:f7:cc:3d:c6:4c:
                    dd:c6:bf:fe:5d:b5:33:dd:f6:2c:4c:2c:ca:01:45:
                    e6:25:65:39:02:72:7e:19:ae:77:93:7e:f3:77:4b:
                    4f:18:3c:af:22:fd:1a:84:29:82:33:52:de:25:d8:
                    ce:77:2b:88:37:59:b0:2a:01:d4:ae:00:52:fa:cc:
                    aa:00:40:6e:ba:84:a5:d5:ea:c8:0c:08:cb:92:08:
                    03:04:a3:1d:5d:57:a0:57:c3:01:bd:ce:aa:55:ba:
                    31:c0:49:5b:68:7f:e8:e4:da:4a:c5:e4:8b:54:0d:
                    ce:1e:4f:51:35:46:c4:9a:52:a4:88:02:2f:57:63:
                    6f:70:93:10:3c:34:aa:de:8a:20:f7:81:51:b9:4e:
                    4a:1b:eb:58:be:80:78:04:a9:88:77:64:38:00:46:
                    c5:9c:45:74:6c:8b:a9:58:f6:47:c5:a9:2f:94:16:
                    83:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:7D:91:62:CE:3C:DC:D6:6E:A8:3C:CD:A3:88:7D:08:92:EB:AC:9F
            X509v3 Authority Key Identifier:
                keyid:BA:80:9B:F0:B1:12:1D:91:3D:20:0B:4F:F8:8B:7C:71:84:C6:58:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/55c0fb0d5531f91dd06c19ed8fa00f2687176d55.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2bbb4bba-9e09-435c-b8b6-e72cba0f507d/e90222d6822110cd1034f61c7fb2799fb958b5cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2bbb4bba-9e09-435c-b8b6-e72cba0f507d/55c0fb0d5531f91dd06c19ed8fa00f2687176d55.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.87.0/24
                IPv6:
                  2803:5320::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:91:7f:f5:b3:70:a0:62:71:5a:42:18:80:5b:c7:cb:01:2f:
         3d:e3:0f:e2:3b:92:17:2a:eb:be:0f:4b:0c:8d:e5:8d:62:ed:
         b7:98:af:6c:66:9c:f6:8e:25:81:e6:a8:89:20:f1:45:47:c9:
         d4:10:28:b0:c6:ac:3d:45:46:ec:c2:91:a9:be:e0:dd:cf:5b:
         34:36:f6:69:14:f3:7b:39:0e:28:0e:aa:33:4e:c6:e7:4d:97:
         56:e4:eb:fc:23:96:aa:a7:98:7b:d9:00:8e:4f:0e:71:1f:2a:
         39:08:07:a4:d6:89:c6:af:2b:5b:94:d8:ab:00:20:4d:9f:2f:
         ca:23:df:a8:a3:e9:2b:f8:7f:03:4d:cc:65:7b:40:59:e9:c4:
         9b:96:09:00:0e:e9:b0:10:83:a9:ea:75:59:ba:6c:9c:db:24:
         cc:f1:1f:21:92:72:b6:ef:da:70:fb:a7:e6:30:4f:4c:20:8d:
         80:89:74:1b:f1:5c:4b:69:c3:01:f5:77:73:b7:eb:16:65:57:
         9d:e7:88:b5:be:12:b8:aa:a4:6f:10:37:fc:08:f8:2f:08:dc:
         1d:6d:a9:43:78:25:47:3d:03:8e:79:e9:1b:ac:b2:01:3f:81:
         04:54:37:dc:95:48:de:64:ee:96:67:bc:12:84:f0:38:92:ff:
         b2:ad:33:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----