Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/12602e0305d34d5ff7bc67a0f449b5c752aa34fb.roa
File:                     12602e0305d34d5ff7bc67a0f449b5c752aa34fb.roa (raw, json)
Hash identifier:          uJn6/mIClYu7jPCyXciNpsNrnjtYJVL7g0xQaB0uybY=
Subject key identifier:   C4:EC:C0:11:CD:5D:08:4A:0D:CD:B7:FB:6F:78:C9:7A:F3:F5:52:79
Certificate issuer:       /CN=657d9dd95ecfd67113ddcd4cff4ced5d8177cf65
Certificate serial:       04908E
Authority key identifier: 58:8B:D2:7A:78:D9:8D:63:93:83:95:E9:E1:80:7D:75:C6:13:D1:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/12602e0305d34d5ff7bc67a0f449b5c752aa34fb.roa
Signing time:             Wed 06 Jul 2022 11:48:39 +0000
ROA not before:           Mon 04 Jul 2022 03:00:00 +0000
ROA not after:            Thu 04 Jul 2024 03:00:00 +0000
asID:                     52444
IP address blocks:        179.40.69.0/24 maxlen: 24
                          179.40.70.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 299150 (0x4908e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=657d9dd95ecfd67113ddcd4cff4ced5d8177cf65
        Validity
            Not Before: Jul  4 03:00:00 2022 GMT
            Not After : Jul  4 03:00:00 2024 GMT
        Subject: CN=12602e0305d34d5ff7bc67a0f449b5c752aa34fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:75:a7:1d:76:9e:46:a3:e8:68:6d:f8:79:93:
                    97:90:21:85:0d:f9:48:de:76:ad:df:76:d9:2f:1f:
                    60:71:9b:7b:61:bb:fa:d9:ac:da:a6:96:50:5e:c5:
                    bd:93:f2:49:96:87:85:d7:e3:32:46:dc:f1:6d:13:
                    cf:e8:55:fc:1a:18:20:8f:ea:0d:6b:28:41:73:8c:
                    0f:53:56:d8:8d:89:09:ed:d9:58:79:44:22:a3:82:
                    f0:32:cc:01:36:83:e1:1d:d8:e4:68:9a:87:6b:7a:
                    b2:32:24:f9:e3:a3:95:7a:78:79:ae:cc:e2:2d:f7:
                    f4:79:03:8e:b5:39:9e:5d:59:82:d7:ff:ed:b4:ca:
                    37:9a:49:19:ff:2a:9b:ed:6f:b5:74:fe:18:35:d6:
                    45:5d:cb:2e:ad:90:3b:a8:21:f7:98:e2:85:4c:1c:
                    bf:42:5e:41:5e:71:96:e5:61:06:d3:a1:26:bb:1d:
                    e2:58:64:1c:b8:be:90:48:b4:96:d0:31:5b:85:15:
                    68:5d:c8:e4:22:37:8b:9f:ab:16:6c:48:0e:f4:b5:
                    d9:96:df:86:49:eb:02:9d:76:5e:6b:23:4a:59:f3:
                    38:b7:14:38:35:f4:55:78:e2:47:37:48:ea:2f:b4:
                    bd:ed:fb:3e:ab:94:af:a3:de:18:f5:3d:f4:72:24:
                    18:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:EC:C0:11:CD:5D:08:4A:0D:CD:B7:FB:6F:78:C9:7A:F3:F5:52:79
            X509v3 Authority Key Identifier:
                keyid:58:8B:D2:7A:78:D9:8D:63:93:83:95:E9:E1:80:7D:75:C6:13:D1:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/12602e0305d34d5ff7bc67a0f449b5c752aa34fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.40.69.0-179.40.70.255

    Signature Algorithm: sha256WithRSAEncryption
         56:5f:85:49:26:66:a2:25:48:a7:e2:78:13:e3:ac:3c:a7:1f:
         a6:bc:ff:80:23:0d:2c:90:18:bd:c4:0f:83:30:a2:cf:53:42:
         e7:eb:a8:8a:ca:0e:0a:29:20:51:3f:d1:1b:1f:4b:cb:ea:56:
         a2:fd:99:41:cb:b1:1c:bd:be:a5:a6:f0:01:ce:03:bf:87:f2:
         df:76:5e:fa:54:38:93:c3:ee:22:53:9f:73:f0:e8:27:a9:21:
         c3:b1:5c:23:b9:d9:d7:08:e5:27:aa:df:a1:57:b8:09:f6:90:
         76:be:8c:b4:a1:86:9b:87:9c:22:9e:f6:78:78:a3:0f:4f:a1:
         08:a5:60:d5:8b:a5:b7:d4:ae:ab:8a:51:23:18:b6:67:7e:29:
         34:c6:54:37:63:5b:58:9c:96:c1:75:f5:5b:0f:24:56:58:fc:
         c3:7e:56:79:07:22:91:19:03:a9:ef:7f:44:f0:b6:2c:53:9b:
         3c:e9:53:41:08:34:74:4a:bd:3d:ea:49:86:0e:8e:77:cd:ce:
         44:be:29:9c:09:43:90:66:7f:e2:97:5c:31:66:0b:d4:99:53:
         95:cd:51:c6:2c:08:8a:87:10:7f:70:1d:86:67:ca:a3:a9:17:
         62:9c:23:7c:38:a2:e0:ce:db:2b:81:78:8d:ab:8e:83:cd:93:
         02:82:a9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:34 2023 by rpki-client on console-ams.rpki-client.org