Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2fc42fdf-2d8b-46a5-8f9b-68d6e3403e4e/7eb9518b314d4fd64be6966daccc473a0617046b.roa
File:                     7eb9518b314d4fd64be6966daccc473a0617046b.roa (raw, json)
Hash identifier:          KkvU1WnSA9R1OML3JB8SlARTFARWQc25e0UZq2b8aU0=
Subject key identifier:   8A:0F:1A:1C:A6:76:F3:4E:56:65:DE:FE:73:18:C7:72:90:5D:D4:28
Certificate issuer:       /CN=259c4fb25c604824d214cf7cbe588eab433a5691
Certificate serial:       0D3E68
Authority key identifier: 3F:31:C8:54:2E:52:5E:69:30:FE:E3:42:F0:40:D8:8D:07:34:6E:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/259c4fb25c604824d214cf7cbe588eab433a5691.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2fc42fdf-2d8b-46a5-8f9b-68d6e3403e4e/7eb9518b314d4fd64be6966daccc473a0617046b.roa
Signing time:             Wed 24 Mar 2021 14:39:37 +0000
ROA not before:           Wed 24 Mar 2021 14:39:36 +0000
ROA not after:            Tue 24 Mar 2026 14:39:36 +0000
asID:                     264668
IP address blocks:        45.225.88.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 867944 (0xd3e68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259c4fb25c604824d214cf7cbe588eab433a5691
        Validity
            Not Before: Mar 24 14:39:36 2021 GMT
            Not After : Mar 24 14:39:36 2026 GMT
        Subject: CN=7eb9518b314d4fd64be6966daccc473a0617046b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b2:c9:f1:a7:45:af:71:8d:26:d7:90:eb:da:
                    f7:57:1d:de:03:3b:65:cd:85:bd:ae:2f:75:84:9e:
                    f0:47:69:7a:e9:c6:04:71:14:cb:5d:87:7a:df:15:
                    99:92:86:47:23:49:96:5b:ba:17:6a:ba:1b:e8:4f:
                    3f:4e:1d:8d:bc:95:20:bd:91:0a:ef:9d:bb:d7:6a:
                    04:03:15:97:19:ca:1b:80:89:61:22:c5:b9:11:f5:
                    28:21:75:99:6e:31:d2:2f:40:fd:a5:1a:5f:18:e1:
                    2d:96:29:1b:53:d5:0d:ca:c1:c4:98:05:e3:8a:e0:
                    73:60:2c:d0:76:8f:5b:96:59:4b:7c:81:15:24:2a:
                    89:4b:44:dd:7d:5a:c5:f8:9e:81:e2:f5:1c:e2:25:
                    b7:ce:b2:02:a3:07:ac:c7:71:2f:71:fa:f3:66:68:
                    97:93:4c:d0:df:58:05:11:cc:95:80:c9:d3:82:c4:
                    57:27:d7:db:17:a0:fd:d3:ec:17:0d:c9:6a:73:c1:
                    04:07:15:12:1c:c3:eb:a2:1d:ef:de:2b:05:b2:a7:
                    af:75:bb:da:db:57:d4:fe:f2:89:31:29:f4:13:d1:
                    c1:14:31:34:22:a6:e7:40:c2:b4:6c:9d:07:8a:71:
                    04:b6:9d:c9:20:bb:ec:16:00:29:8a:06:eb:8d:d4:
                    4b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:0F:1A:1C:A6:76:F3:4E:56:65:DE:FE:73:18:C7:72:90:5D:D4:28
            X509v3 Authority Key Identifier:
                keyid:3F:31:C8:54:2E:52:5E:69:30:FE:E3:42:F0:40:D8:8D:07:34:6E:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/259c4fb25c604824d214cf7cbe588eab433a5691.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2fc42fdf-2d8b-46a5-8f9b-68d6e3403e4e/7eb9518b314d4fd64be6966daccc473a0617046b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2fc42fdf-2d8b-46a5-8f9b-68d6e3403e4e/259c4fb25c604824d214cf7cbe588eab433a5691.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:5a:91:6e:d2:f3:aa:e4:07:34:68:44:5f:14:ef:47:ec:fe:
         f8:58:c8:bb:48:35:a9:5d:b8:c5:c5:c7:3c:50:57:92:6f:82:
         e1:1d:67:99:a1:8f:80:b7:e3:ed:51:05:5a:e7:8e:50:a5:b4:
         92:1b:cb:dd:ae:65:76:c4:21:0c:67:37:e6:bb:e5:0a:20:0f:
         a4:ab:7c:00:61:ad:9b:22:e5:6f:8c:ad:f0:8e:ef:65:aa:8b:
         1b:ba:4f:db:6e:29:4b:72:31:b8:08:05:05:09:6d:4a:7b:2e:
         7d:b6:5a:26:60:2b:d4:4b:e6:bc:39:81:d1:1e:d3:31:65:c6:
         53:64:f8:29:c0:58:69:0a:9d:74:8d:0f:7b:51:42:27:54:f1:
         5b:75:27:9a:b1:78:b4:df:8f:54:60:41:b1:9d:e4:3a:8b:f9:
         62:b0:11:85:a2:7d:d6:44:5e:db:43:8b:2b:a0:c8:eb:35:9b:
         f6:a0:83:bb:ef:e0:95:09:fe:78:5a:89:9b:36:bf:6e:10:95:
         b8:5c:26:d6:9e:1c:c4:98:d2:cb:1a:c6:0c:e5:7b:1c:db:72:
         ec:0b:79:59:b9:3c:d8:48:0d:4f:ff:55:0b:74:b4:66:e7:b3:
         11:0f:c3:71:9d:a3:0a:d9:a3:73:80:7b:88:fb:31:10:53:5c:
         c5:13:b8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 28 22:19:04 2023 by rpki-client on console-ams.rpki-client.org