Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/41c91114-bd15-4d1d-ae93-37ceb3b6c876/e97b4a56c1ce1007b8d6bbd05b50e65874714a43.roa
File:                     e97b4a56c1ce1007b8d6bbd05b50e65874714a43.roa (raw, json)
Hash identifier:          tngU3d9nqh88uddQybve0KCSUG9dcxeg63ZqFE3IwpY=
Subject key identifier:   98:F8:A2:9D:FB:C9:54:4A:B1:D4:CE:56:F5:70:E6:61:B4:7E:29:32
Certificate issuer:       /CN=da49da4a1967abec3f02fc95ba51928148a5a9c5
Certificate serial:       19E8
Authority key identifier: 24:8E:14:29:6B:51:BF:25:C8:11:B0:33:7B:66:13:E9:B5:6D:05:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da49da4a1967abec3f02fc95ba51928148a5a9c5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/41c91114-bd15-4d1d-ae93-37ceb3b6c876/e97b4a56c1ce1007b8d6bbd05b50e65874714a43.roa
Signing time:             Fri 02 Dec 2022 18:53:45 +0000
ROA not before:           Wed 30 Nov 2022 18:25:57 +0000
ROA not after:            Mon 02 Dec 2024 18:25:57 +0000
asID:                     269957
IP address blocks:        45.191.158.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6632 (0x19e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da49da4a1967abec3f02fc95ba51928148a5a9c5
        Validity
            Not Before: Nov 30 18:25:57 2022 GMT
            Not After : Dec  2 18:25:57 2024 GMT
        Subject: CN=e97b4a56c1ce1007b8d6bbd05b50e65874714a43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d8:72:b2:76:d0:a3:9c:b5:b4:b3:2b:cf:b5:
                    fd:85:f7:5a:5a:51:f9:d2:b0:f5:6b:56:fe:7e:90:
                    f5:4e:fd:e8:1d:e9:25:bf:e8:b8:d7:e1:7c:38:9f:
                    1c:6b:3f:c9:43:f8:b9:99:14:64:9f:75:bc:d3:73:
                    7c:30:96:f4:32:87:70:7a:c5:d5:25:39:a4:4c:ee:
                    91:82:fa:8f:c3:4c:52:5b:d9:62:82:68:72:6f:be:
                    48:26:d0:35:d6:70:f5:50:6e:9e:31:d1:32:7d:46:
                    60:52:bd:57:51:ec:90:4d:0d:94:e4:d3:e6:b7:15:
                    6d:ac:96:a7:79:35:ea:64:a0:d2:b9:e3:5b:ec:f4:
                    14:02:79:c3:f8:0d:e9:6f:d0:5b:8b:73:3b:06:bc:
                    9c:39:99:ac:44:1c:81:40:32:55:66:f7:58:94:f1:
                    25:99:b8:a2:54:bc:14:0e:4e:07:58:09:af:98:2f:
                    43:4d:06:83:ac:bf:e5:bd:e7:37:5b:e3:7c:b5:50:
                    4c:56:4f:0d:5a:99:df:42:6c:51:4e:95:d3:a6:30:
                    0d:9f:24:62:c7:d3:dd:d8:cc:29:af:24:bf:d7:07:
                    33:3a:2d:2d:28:d3:43:8b:8b:da:b8:f2:51:6b:98:
                    32:3b:87:ed:a4:c5:d5:56:67:71:4b:bc:55:39:d4:
                    bd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F8:A2:9D:FB:C9:54:4A:B1:D4:CE:56:F5:70:E6:61:B4:7E:29:32
            X509v3 Authority Key Identifier:
                keyid:24:8E:14:29:6B:51:BF:25:C8:11:B0:33:7B:66:13:E9:B5:6D:05:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da49da4a1967abec3f02fc95ba51928148a5a9c5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/41c91114-bd15-4d1d-ae93-37ceb3b6c876/e97b4a56c1ce1007b8d6bbd05b50e65874714a43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/41c91114-bd15-4d1d-ae93-37ceb3b6c876/da49da4a1967abec3f02fc95ba51928148a5a9c5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:64:3e:17:fa:34:2e:81:c4:45:77:0b:77:9e:20:14:2f:28:
         60:83:c2:71:86:9f:88:c8:ce:3a:56:96:08:46:5e:5e:a9:10:
         2c:d3:f8:7b:8e:dc:30:da:36:71:2e:0d:48:4d:ca:64:ea:8e:
         31:fc:74:fe:ac:5c:ab:99:cc:72:5e:e3:eb:f3:d9:59:ce:9e:
         7c:9b:d1:3d:ef:c4:2a:90:cc:c1:6b:ba:2e:ba:88:4c:2e:fd:
         21:65:28:63:0c:e6:ce:31:15:68:e7:15:d2:4b:70:6c:67:61:
         a9:08:1d:86:97:12:78:49:01:a2:f8:f8:b8:b6:64:0e:73:7e:
         9f:0f:c8:16:91:2a:c2:3e:1f:73:0b:f9:ae:76:2c:f2:5c:2d:
         24:a1:2f:45:bd:a5:ed:1d:36:6a:c4:40:5e:ff:e4:84:80:a3:
         1d:db:d2:a1:b2:1f:20:60:f3:d1:7f:3f:15:55:f5:57:a4:dd:
         03:b5:6f:64:40:ad:3f:b3:76:62:9e:30:cb:2e:cd:f7:79:06:
         bd:b9:80:da:fd:aa:02:22:a1:a2:9e:31:e0:a5:d1:2d:07:5e:
         47:8d:86:6c:c9:c2:44:45:24:4d:ba:12:68:3e:9a:b3:41:0e:
         ed:8a:a3:cf:ad:10:8e:e3:98:e3:cf:38:44:7c:ce:58:9a:5e:
         68:ec:ca:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:15 2023 by rpki-client on console-fra.rpki-client.org