Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/443ac76c-8eac-4e9c-8921-9aab23b81d30/ae9d707f23c7f83e580ed6b18cd68c8be0934bed.roa
File:                     ae9d707f23c7f83e580ed6b18cd68c8be0934bed.roa (raw, json)
Hash identifier:          dzpmwxfSAUHKJlnp3lEWWWr1gxplIgVabe4i//eSVvg=
Subject key identifier:   FD:BB:8D:50:38:A3:2A:2B:77:38:32:5D:A4:C3:6C:26:1D:F5:A2:92
Certificate issuer:       /CN=7a0d3eafbdae2e52636e11aa20b9d745fdef44e7
Certificate serial:       06814A
Authority key identifier: EF:AD:68:3D:4A:EA:AB:8A:C7:E2:70:5D:50:FD:72:AD:1B:CD:F2:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7a0d3eafbdae2e52636e11aa20b9d745fdef44e7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/443ac76c-8eac-4e9c-8921-9aab23b81d30/ae9d707f23c7f83e580ed6b18cd68c8be0934bed.roa
Signing time:             Tue 22 Nov 2022 20:48:25 +0000
ROA not before:           Fri 26 Aug 2022 16:59:52 +0000
ROA not after:            Wed 04 Sep 2024 16:59:52 +0000
asID:                     270081
IP address blocks:        179.49.156.0/22 maxlen: 24
                          179.49.156.0/23 maxlen: 23
                          179.49.158.0/23 maxlen: 23
                          2803:8be0::/32 maxlen: 32
                          2803:8be0::/34 maxlen: 34
                          2803:8be0:4000::/34 maxlen: 34
                          2803:8be0:8000::/34 maxlen: 34
                          2803:8be0:c000::/34 maxlen: 34

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 426314 (0x6814a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d3eafbdae2e52636e11aa20b9d745fdef44e7
        Validity
            Not Before: Aug 26 16:59:52 2022 GMT
            Not After : Sep  4 16:59:52 2024 GMT
        Subject: CN=ae9d707f23c7f83e580ed6b18cd68c8be0934bed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:31:0f:53:f1:0b:49:e9:66:11:01:62:3a:1f:
                    3e:ef:1a:e9:3a:c8:44:a4:e8:76:ed:b4:65:fc:ab:
                    a1:18:9e:17:8b:e0:88:bb:b4:e6:c5:7e:b8:a8:3f:
                    01:38:1d:5a:19:90:be:c9:05:8d:14:a9:63:5f:da:
                    ca:c3:78:97:f2:ab:c4:5b:f6:49:0c:e0:b4:82:a4:
                    b5:95:e2:6d:9b:05:df:1f:f7:53:23:a6:3b:72:b1:
                    8a:79:fa:e6:12:83:c8:99:e9:54:e3:7e:81:1b:fa:
                    5f:12:5f:3a:15:90:c3:82:b5:e9:85:8a:db:39:a6:
                    7b:e8:0c:73:62:7f:75:6f:47:b8:5d:df:49:14:9e:
                    db:c3:c6:68:6e:b7:1a:98:ff:07:dd:61:59:c6:2a:
                    57:44:41:a3:79:5d:f8:43:fa:59:c6:22:1b:19:4a:
                    0e:72:b4:83:1e:e0:b7:1f:04:dc:06:a7:4f:53:99:
                    7f:23:b6:05:76:2d:23:30:9b:31:aa:61:92:25:11:
                    1f:3a:61:b1:0d:e3:47:ef:a1:a2:05:1a:0c:4c:d3:
                    cd:bf:33:42:9c:4a:ad:30:51:30:d0:3d:bc:79:53:
                    03:50:bb:57:5c:74:2c:21:73:a0:89:22:0b:a3:51:
                    72:a6:96:b6:45:12:34:65:41:2c:85:2d:e1:9e:46:
                    5e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:BB:8D:50:38:A3:2A:2B:77:38:32:5D:A4:C3:6C:26:1D:F5:A2:92
            X509v3 Authority Key Identifier:
                keyid:EF:AD:68:3D:4A:EA:AB:8A:C7:E2:70:5D:50:FD:72:AD:1B:CD:F2:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7a0d3eafbdae2e52636e11aa20b9d745fdef44e7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/443ac76c-8eac-4e9c-8921-9aab23b81d30/ae9d707f23c7f83e580ed6b18cd68c8be0934bed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/443ac76c-8eac-4e9c-8921-9aab23b81d30/7a0d3eafbdae2e52636e11aa20b9d745fdef44e7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.156.0/22
                IPv6:
                  2803:8be0::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:81:6e:63:5e:c8:05:92:f4:a9:5f:5a:d9:9f:42:9f:e2:f5:
         f7:c8:ad:c4:0e:b9:ed:a9:b6:97:22:b4:d1:27:74:16:d7:f4:
         e7:e9:91:a5:42:9d:06:cf:32:a6:93:b2:c0:0e:69:22:57:32:
         85:a3:68:fa:30:37:a5:49:6c:40:ed:33:45:eb:02:73:10:71:
         02:ea:31:6b:fe:b0:30:a7:d0:9c:79:89:60:be:37:44:6f:51:
         8c:3e:72:c4:71:fa:53:39:b3:cc:e0:c5:a7:17:41:4a:a1:41:
         64:7d:90:5f:ad:d4:44:b5:e3:9e:89:a0:59:29:72:40:43:37:
         71:f1:7b:36:54:3f:72:4a:cf:ba:d7:e8:4e:56:cf:ef:fb:97:
         f3:d6:af:f5:1e:c3:c9:6c:3c:0d:bf:b2:20:96:db:8b:b7:e1:
         7a:ea:ef:50:90:74:6f:1d:3f:8a:53:3d:e8:ea:7e:34:af:0d:
         a8:43:70:2b:35:96:03:69:8b:36:c3:37:36:ad:5e:d3:f4:47:
         c2:1d:34:c1:38:6d:6c:2e:37:1c:29:cd:86:86:07:82:3c:ea:
         03:50:89:50:b2:b8:35:45:86:a6:8e:96:3b:bc:00:ed:a9:13:
         a9:a9:17:67:d7:79:2a:3f:d1:68:09:f6:99:12:dc:4e:01:65:
         86:69:11:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:15 2023 by rpki-client on console-fra.rpki-client.org