Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51df2027-9b4f-4cfe-a657-b7d2463525ee/cce12a626ed3d703c66a9f7b521915031e0007a5.roa
File:                     cce12a626ed3d703c66a9f7b521915031e0007a5.roa (raw, json)
Hash identifier:          OorMsy9sjtgt8bhixl5xyqHsmfsz+PiHHkWGoycHo4w=
Subject key identifier:   EA:3F:4C:AA:C5:EE:3A:19:D2:F7:59:69:35:A1:04:C5:7F:B2:9C:27
Certificate issuer:       /CN=c1dc2333d1a049c4e8b328286573de8024220c17
Certificate serial:       0CB167
Authority key identifier: B5:79:94:3F:42:C6:25:1A:23:84:80:D5:12:8C:89:9B:97:3A:F0:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1dc2333d1a049c4e8b328286573de8024220c17.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51df2027-9b4f-4cfe-a657-b7d2463525ee/cce12a626ed3d703c66a9f7b521915031e0007a5.roa
Signing time:             Wed 24 Mar 2021 14:46:23 +0000
ROA not before:           Wed 24 Mar 2021 14:46:22 +0000
ROA not after:            Tue 24 Mar 2026 14:46:22 +0000
asID:                     266831
IP address blocks:        45.238.36.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 831847 (0xcb167)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1dc2333d1a049c4e8b328286573de8024220c17
        Validity
            Not Before: Mar 24 14:46:22 2021 GMT
            Not After : Mar 24 14:46:22 2026 GMT
        Subject: CN=cce12a626ed3d703c66a9f7b521915031e0007a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e8:01:63:38:68:94:71:95:a9:8d:b9:0f:60:
                    1c:a1:07:d5:1a:ff:19:f5:4e:19:8f:4a:80:ef:e5:
                    31:71:ec:32:c6:6f:86:a0:7a:9b:c8:4b:71:80:d0:
                    4b:a1:84:9c:c9:f6:d7:26:6e:03:2f:5a:8d:46:c2:
                    af:65:c1:02:78:07:04:4d:38:f0:43:b5:43:13:8a:
                    65:88:47:df:23:11:0d:2d:1f:36:c7:fc:d5:9e:03:
                    bd:30:7e:3a:2b:25:1d:68:e2:75:2d:35:db:67:4c:
                    06:b9:2c:ed:bb:c5:98:d6:55:3d:2e:b0:4d:f8:7a:
                    27:82:41:aa:35:db:bc:f6:02:d5:83:76:c8:34:63:
                    0a:5b:90:3e:e2:88:e2:61:dc:e1:e1:dc:95:c2:25:
                    8f:58:07:1b:26:37:16:18:22:78:07:d5:f6:4b:f9:
                    fb:2b:fb:1d:aa:e9:98:df:57:39:d0:3a:06:3b:7a:
                    0e:2e:ff:93:72:8e:45:7b:3f:f9:d0:f2:5e:ab:52:
                    21:a3:6f:88:59:f4:7a:a2:17:de:ff:4b:7c:d6:d0:
                    30:67:21:74:f4:46:70:78:da:18:1f:ab:41:37:96:
                    2f:86:13:f8:5c:34:d0:15:5b:bf:c2:69:68:c3:43:
                    df:f6:e1:13:49:6c:50:8e:09:75:1f:72:2b:62:86:
                    e1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:3F:4C:AA:C5:EE:3A:19:D2:F7:59:69:35:A1:04:C5:7F:B2:9C:27
            X509v3 Authority Key Identifier:
                keyid:B5:79:94:3F:42:C6:25:1A:23:84:80:D5:12:8C:89:9B:97:3A:F0:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1dc2333d1a049c4e8b328286573de8024220c17.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51df2027-9b4f-4cfe-a657-b7d2463525ee/cce12a626ed3d703c66a9f7b521915031e0007a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51df2027-9b4f-4cfe-a657-b7d2463525ee/c1dc2333d1a049c4e8b328286573de8024220c17.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:38:b4:f3:d2:ed:b1:39:ea:eb:b1:c4:68:a8:49:25:91:37:
         8a:53:4f:e9:73:b9:68:9a:26:14:0b:39:72:19:4a:25:e9:72:
         55:91:07:59:91:d3:88:08:3e:d7:2b:f1:83:ba:56:da:ec:06:
         a3:dc:88:74:e9:29:e9:73:a3:e8:ff:ad:42:24:ba:df:e6:20:
         6c:25:7b:28:d9:fd:ef:01:d9:18:56:9d:2a:b2:22:1d:7d:30:
         a1:85:d6:c0:0a:cc:82:84:a7:6c:b0:f3:f5:d8:66:f6:e3:fd:
         73:09:3c:07:be:e8:9e:89:f1:88:f9:a1:a0:da:46:81:77:1e:
         b1:cb:1b:53:8b:7f:c9:90:3a:3b:67:2b:4b:d9:f6:cc:98:ee:
         4c:55:ed:63:bf:db:d7:fa:a6:4e:61:6b:6d:ac:9b:33:67:3f:
         21:09:71:21:01:d5:2b:7e:53:3f:6b:51:39:8f:6b:c3:bb:2d:
         96:5a:33:44:f7:d7:ff:f0:0c:ab:e8:1a:dc:e4:d7:fc:5d:3b:
         79:4e:1e:eb:77:66:87:51:10:1e:18:fa:f1:84:e5:77:28:02:
         b9:03:72:ca:d2:b8:f8:fb:b6:07:3a:f1:dc:5c:04:12:ad:2f:
         fa:d8:c0:5e:4d:f9:98:34:ed:13:36:e6:93:ad:e5:90:0f:22:
         38:5c:14:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 8 15:33:52 2023 by rpki-client on console-ams.rpki-client.org