Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3994df85-f07a-4438-92a9-33e4b7e689d7/b866b5e277b9f9855833b69620ee4f2757752a55.roa
File:                     b866b5e277b9f9855833b69620ee4f2757752a55.roa (raw, json)
Hash identifier:          9rfDVH1yf2jtB/U/z4OyCPmCyDdtK1Yu9iKyS2za9W4=
Subject key identifier:   96:7D:F3:8D:5E:2E:AA:5F:A0:1A:46:42:04:EC:6F:56:59:02:0B:A4
Certificate issuer:       /CN=4d7240514a9f4b2c9086b5e65e0ac43a9394b96e
Certificate serial:       15F795
Authority key identifier: 8A:BC:B8:10:CA:A4:CC:32:68:82:BD:79:48:6C:4C:E7:CD:2C:29:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d7240514a9f4b2c9086b5e65e0ac43a9394b96e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3994df85-f07a-4438-92a9-33e4b7e689d7/b866b5e277b9f9855833b69620ee4f2757752a55.roa
Signing time:             Mon 28 Feb 2022 01:01:33 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     266734
IP address blocks:        45.230.216.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1439637 (0x15f795)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d7240514a9f4b2c9086b5e65e0ac43a9394b96e
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=b866b5e277b9f9855833b69620ee4f2757752a55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b0:76:68:28:de:be:5d:46:79:62:2b:67:06:
                    08:c4:ce:dd:38:e9:d6:4b:14:c1:ea:af:01:9a:72:
                    b1:50:40:22:3b:57:b4:09:c1:4c:19:25:cc:e2:cd:
                    17:9e:c2:c7:04:3a:83:80:75:90:52:cd:95:03:f3:
                    a2:2d:4f:a5:46:e1:33:e0:1e:b0:5b:81:78:aa:79:
                    11:b9:9c:1f:35:0f:7e:3d:27:e4:0b:01:9d:b9:06:
                    fb:8c:11:d8:2e:b4:e8:fc:be:40:d3:10:bb:a1:b8:
                    49:6f:29:0e:b6:d1:9b:e2:25:d9:7b:e5:5a:9f:c8:
                    1e:9d:7d:96:82:6b:2f:2c:af:85:3b:4d:dd:c9:af:
                    b5:72:5a:75:2c:28:33:ef:1d:fd:92:2d:c1:7f:51:
                    04:c3:be:9a:80:98:8d:3e:23:df:08:88:4e:2e:76:
                    40:8d:17:32:5a:07:29:a9:1f:1d:d7:31:43:ec:61:
                    14:25:40:a1:2b:f7:3d:35:09:fc:66:15:35:18:ac:
                    81:16:a5:39:d0:e2:ca:b0:9d:51:c5:a1:41:30:62:
                    77:4f:1f:02:d9:f0:20:f6:ea:74:06:0a:46:51:78:
                    e5:84:41:b7:e6:4d:7d:14:fa:7f:2a:29:62:7a:d7:
                    ea:ba:26:e9:44:14:0e:ff:ab:f2:e3:c1:78:1b:d4:
                    d8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:7D:F3:8D:5E:2E:AA:5F:A0:1A:46:42:04:EC:6F:56:59:02:0B:A4
            X509v3 Authority Key Identifier:
                keyid:8A:BC:B8:10:CA:A4:CC:32:68:82:BD:79:48:6C:4C:E7:CD:2C:29:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d7240514a9f4b2c9086b5e65e0ac43a9394b96e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3994df85-f07a-4438-92a9-33e4b7e689d7/b866b5e277b9f9855833b69620ee4f2757752a55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3994df85-f07a-4438-92a9-33e4b7e689d7/4d7240514a9f4b2c9086b5e65e0ac43a9394b96e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:ee:94:96:2f:39:f9:7d:a6:ac:ee:b2:bd:7f:f3:a9:63:92:
         00:17:fa:dd:29:27:b8:39:f6:9d:7e:43:59:08:78:36:47:8e:
         d9:de:1c:3a:44:3b:44:3a:5a:34:fb:7e:94:ae:44:4c:cb:3d:
         f4:d3:71:dd:df:5f:e4:38:1d:6f:ed:8e:a6:bb:fc:28:56:f3:
         a2:62:d3:0b:19:c3:df:ec:d2:f4:31:8d:fd:6c:9a:64:4e:41:
         05:4b:52:b6:ed:a5:a7:9e:71:8d:52:cd:36:09:57:79:3c:a0:
         5c:98:02:c0:e7:fb:a2:41:8c:93:7c:36:3c:2e:51:2e:a6:5c:
         42:d6:8e:f4:13:28:ed:56:74:c3:5f:0b:df:1d:23:25:53:08:
         61:7f:c0:34:6e:e1:51:a0:d9:55:90:ee:88:15:33:39:71:32:
         fb:29:a5:dc:87:48:3e:d8:00:0a:64:1b:c0:f6:83:b6:e4:74:
         e2:94:6c:e1:42:aa:a8:64:b2:2a:9e:9a:ee:df:82:e0:4f:9d:
         fb:06:5b:81:dc:98:3e:53:5f:e6:e3:b1:77:e2:72:f5:2d:f8:
         68:76:a3:ad:63:e2:2c:8b:87:8c:12:1d:f9:15:75:6a:c6:b9:
         57:7d:86:52:50:b4:1e:9d:70:8a:96:83:76:78:b5:28:01:bc:
         61:74:c8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 31 09:12:28 2023 by rpki-client on console-fra.rpki-client.org