Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36e29e88-0a15-4bfd-8f7e-3d1fc97b8c50/874d81447cd3de0e3a63d12420505a07e5723ddf.roa
File:                     874d81447cd3de0e3a63d12420505a07e5723ddf.roa (raw, json)
Hash identifier:          HeU/7ywX0ajvdVk1Eyoo8xOfzM2a22ql5q7eC5BNYwc=
Subject key identifier:   04:46:BF:3A:30:AA:ED:6E:9D:04:0F:46:71:87:F4:6F:7D:66:09:CC
Certificate issuer:       /CN=466e9c553c1e6136fda5fe5189aa28c81ce61dec
Certificate serial:       0D529C
Authority key identifier: 44:97:A8:BD:7C:6E:64:1D:7D:8F:BD:1C:40:97:78:38:5B:7E:9D:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/466e9c553c1e6136fda5fe5189aa28c81ce61dec.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36e29e88-0a15-4bfd-8f7e-3d1fc97b8c50/874d81447cd3de0e3a63d12420505a07e5723ddf.roa
Signing time:             Wed 24 Mar 2021 14:47:26 +0000
ROA not before:           Wed 24 Mar 2021 14:47:26 +0000
ROA not after:            Tue 24 Mar 2026 14:47:26 +0000
asID:                     264837
IP address blocks:        170.81.145.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 873116 (0xd529c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=466e9c553c1e6136fda5fe5189aa28c81ce61dec
        Validity
            Not Before: Mar 24 14:47:26 2021 GMT
            Not After : Mar 24 14:47:26 2026 GMT
        Subject: CN=874d81447cd3de0e3a63d12420505a07e5723ddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bf:4b:77:1d:ba:fe:ab:84:43:d6:d0:07:76:
                    05:ab:0a:8d:a2:8a:75:5b:c8:cc:db:64:48:3d:cd:
                    4b:3e:4e:14:4a:e7:15:c6:99:eb:91:c6:75:81:66:
                    76:4f:76:c1:66:ce:bb:3c:fe:4b:a3:80:f4:61:68:
                    0d:a3:81:b6:a6:19:2c:a8:fd:9d:91:3d:70:99:db:
                    c8:d3:73:90:51:44:a1:08:6d:b8:a8:ba:d4:de:a6:
                    ee:cc:ab:1c:70:b3:35:83:3d:a0:05:0d:06:77:ad:
                    88:58:f6:c5:bb:f9:7b:ed:e9:1c:08:df:e0:fc:d8:
                    5b:00:f9:5f:58:5f:71:d6:f4:0c:4a:da:73:72:24:
                    70:a5:1e:a2:07:d7:ba:22:a3:89:22:95:e5:0c:1f:
                    de:40:d6:7e:1a:ba:6d:c3:cc:1a:5c:3e:3b:ea:ae:
                    10:95:aa:a0:61:04:48:d5:26:75:81:ca:03:50:d2:
                    4d:74:06:d1:f8:e1:41:a8:fe:66:69:8a:2a:27:5a:
                    11:84:62:a9:fe:54:b0:36:5b:2c:f7:77:d8:60:3f:
                    06:db:9c:71:ec:9a:4a:41:18:0b:a8:c0:e3:c4:d1:
                    37:c8:17:e9:4c:87:d5:20:a4:ba:68:bd:d3:73:ee:
                    4f:20:aa:07:93:03:d4:2e:a9:9e:32:c9:ab:45:de:
                    e4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:46:BF:3A:30:AA:ED:6E:9D:04:0F:46:71:87:F4:6F:7D:66:09:CC
            X509v3 Authority Key Identifier:
                keyid:44:97:A8:BD:7C:6E:64:1D:7D:8F:BD:1C:40:97:78:38:5B:7E:9D:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/466e9c553c1e6136fda5fe5189aa28c81ce61dec.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36e29e88-0a15-4bfd-8f7e-3d1fc97b8c50/874d81447cd3de0e3a63d12420505a07e5723ddf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36e29e88-0a15-4bfd-8f7e-3d1fc97b8c50/466e9c553c1e6136fda5fe5189aa28c81ce61dec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:5d:02:63:99:bc:ec:7d:6a:82:ef:f1:19:9b:b8:b6:81:7d:
         83:3f:75:97:67:b0:34:04:84:a3:2c:57:68:13:4b:4f:52:9a:
         8a:a0:e7:36:66:e5:7b:b9:dc:c5:64:8f:80:8e:03:34:ed:1e:
         3d:27:99:4e:de:ff:a1:f3:da:59:c0:ca:39:39:0a:3a:0c:66:
         01:59:16:76:73:9d:02:ac:27:3c:45:1c:90:b0:2f:54:62:49:
         d6:76:81:4d:84:a5:7b:f6:94:06:c3:a8:b7:bb:42:2c:68:49:
         0b:f4:fa:53:01:85:08:56:3b:5a:6c:ba:e5:46:67:a2:19:a0:
         58:3f:d6:f4:26:ba:76:7a:7e:a0:de:23:2e:93:a9:85:4a:7f:
         48:de:29:1c:f9:99:20:59:ea:c2:ba:70:63:02:c0:d9:3c:c7:
         4f:8e:b9:28:78:57:33:85:e2:f1:b5:c7:c8:bb:2c:81:b0:85:
         76:df:e2:75:10:96:43:39:26:41:fd:82:fd:62:29:d7:df:4d:
         b5:f0:c7:a4:ad:b0:74:5f:93:4f:fc:4a:3d:9c:80:e9:67:f0:
         1d:8b:ab:9c:15:df:99:06:ae:95:c4:2f:fb:0d:9e:c7:dd:14:
         7c:73:24:03:27:38:79:68:8a:8d:e6:76:9d:15:35:60:03:fb:
         62:33:e2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 16 04:37:46 2023 by rpki-client on console-fra.rpki-client.org