Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4e71cc9b-edd3-422a-9b57-8a6906b90f24/613218e34a4c2658266ba21a8e74289df9e0663c.roa
File:                     613218e34a4c2658266ba21a8e74289df9e0663c.roa (raw, json)
Hash identifier:          LdUi9jzCE4ZNRPyh6Gt1ZDx8rR5kd5HNg6tTCnG51UY=
Subject key identifier:   D1:90:FF:E9:67:DC:15:AF:12:92:7B:28:72:12:7C:B6:38:BF:EB:1A
Certificate issuer:       /CN=fe560058f1eca896c70528663a43bbfd22ac3902
Certificate serial:       0729AE
Authority key identifier: F3:B8:2A:61:B9:D0:96:CF:95:FB:05:90:BA:F7:98:30:AA:F8:9E:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fe560058f1eca896c70528663a43bbfd22ac3902.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4e71cc9b-edd3-422a-9b57-8a6906b90f24/613218e34a4c2658266ba21a8e74289df9e0663c.roa
Signing time:             Mon 23 Aug 2021 15:51:06 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     270101
IP address blocks:        45.6.215.0/24 maxlen: 24
                          168.196.208.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 469422 (0x729ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe560058f1eca896c70528663a43bbfd22ac3902
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=613218e34a4c2658266ba21a8e74289df9e0663c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:27:17:9f:4a:63:17:5a:48:37:3c:09:d9:a4:
                    25:cf:c5:ab:db:91:62:43:6d:41:65:32:28:7e:b0:
                    70:92:a0:6f:9d:9b:17:bc:15:9b:d2:e8:6d:10:27:
                    d1:61:6b:30:da:54:95:7c:72:49:89:95:f7:ad:fb:
                    cd:23:2c:32:bc:76:a9:8c:ac:6a:b1:fd:5e:17:90:
                    12:27:8e:ad:e0:f1:e1:bc:1c:13:fd:ff:c4:0b:6a:
                    8e:ff:62:4e:9a:fe:13:21:cf:4c:25:0b:c9:3a:6a:
                    87:69:a6:74:03:5a:27:1d:a8:26:5a:4b:26:a6:6b:
                    6c:ed:7d:06:4b:ae:39:24:bb:b6:c9:03:5e:9c:f8:
                    64:0e:3f:f2:69:ca:23:7e:36:9d:50:af:b1:e9:13:
                    b7:42:47:a0:c5:72:43:d5:a6:36:0f:b0:47:5e:04:
                    c8:ce:9d:9b:ef:98:2d:63:7d:86:82:92:10:94:ff:
                    08:7b:4c:eb:9b:67:6f:78:3c:3c:f3:24:1a:8f:63:
                    f8:b3:3d:c0:7f:b7:5b:a6:d2:a3:74:3c:63:d4:3a:
                    8d:06:3d:02:c3:67:0f:97:5d:d7:a7:47:72:57:3d:
                    ce:58:29:f4:af:62:3c:76:fb:fb:e4:7c:4c:c6:0c:
                    71:37:fe:99:59:7d:5c:45:6a:0a:60:3b:79:85:13:
                    5f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:90:FF:E9:67:DC:15:AF:12:92:7B:28:72:12:7C:B6:38:BF:EB:1A
            X509v3 Authority Key Identifier:
                keyid:F3:B8:2A:61:B9:D0:96:CF:95:FB:05:90:BA:F7:98:30:AA:F8:9E:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fe560058f1eca896c70528663a43bbfd22ac3902.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4e71cc9b-edd3-422a-9b57-8a6906b90f24/613218e34a4c2658266ba21a8e74289df9e0663c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4e71cc9b-edd3-422a-9b57-8a6906b90f24/fe560058f1eca896c70528663a43bbfd22ac3902.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.215.0/24
                  168.196.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:ad:be:79:8b:10:fc:55:55:34:e8:76:35:89:56:8f:cc:55:
         34:fd:af:57:95:43:c2:a9:68:0d:df:12:29:e6:26:62:97:da:
         9a:16:72:fe:3a:98:42:57:10:f7:72:e6:90:5a:25:23:0d:01:
         f5:a0:da:6c:5f:c5:c7:bd:b5:31:e6:5d:c1:fb:c9:ae:91:c6:
         69:8a:79:47:fd:fd:1e:6f:d2:a6:74:6c:9f:94:37:3d:9a:e8:
         25:68:df:8b:0e:2d:de:65:11:ab:db:a4:0d:81:01:54:92:38:
         c0:78:5d:74:a6:a1:a8:78:69:1c:76:03:e2:73:b2:b7:3b:b6:
         66:d9:4e:08:8c:b9:3b:2d:87:0d:4d:21:0b:88:7b:a8:15:5f:
         5d:82:cc:a4:1a:18:e0:9a:39:a0:22:38:b7:df:79:0a:48:14:
         86:e1:ea:e6:af:54:47:80:97:e8:fa:75:2a:9a:78:b8:56:97:
         87:6d:6a:05:40:31:2b:67:0a:c2:fd:b2:89:dd:24:95:92:b0:
         f0:a9:f9:97:35:88:3f:ad:f9:14:cc:8f:7d:40:d1:ec:de:da:
         34:28:96:ed:a9:2a:4a:eb:9d:ab:0e:84:13:51:ca:00:0e:28:
         78:f7:33:13:e7:81:6e:fa:b9:81:3e:c6:e9:5f:8d:70:e9:60:
         0a:e7:90:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:33 2023 by rpki-client on console-ams.rpki-client.org