Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55a48b38-424a-4e49-bcf6-18b3cb12251c/83eddec544787961b98bed6f8e5585bfba80b811.roa
File:                     83eddec544787961b98bed6f8e5585bfba80b811.roa (raw, json)
Hash identifier:          GyfGvsbN1pk6xbTnyvmuUpewJ18sv+qXimpSOgMriOU=
Subject key identifier:   8E:F6:10:DD:AA:C6:C2:A1:39:A7:93:65:45:8F:06:82:F4:27:8B:DD
Certificate issuer:       /CN=9bec122f444854416c46c5b459d8853cc0cb2e76
Certificate serial:       117023
Authority key identifier: 00:36:54:27:4E:AD:70:E0:1B:DF:36:7A:94:A8:B7:5F:75:8A:73:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bec122f444854416c46c5b459d8853cc0cb2e76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/55a48b38-424a-4e49-bcf6-18b3cb12251c/83eddec544787961b98bed6f8e5585bfba80b811.roa
Signing time:             Mon 25 Oct 2021 14:51:24 +0000
ROA not before:           Mon 25 Oct 2021 03:00:00 +0000
ROA not after:            Wed 25 Oct 2023 03:00:00 +0000
asID:                     266809
IP address blocks:        45.236.28.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1142819 (0x117023)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bec122f444854416c46c5b459d8853cc0cb2e76
        Validity
            Not Before: Oct 25 03:00:00 2021 GMT
            Not After : Oct 25 03:00:00 2023 GMT
        Subject: CN=83eddec544787961b98bed6f8e5585bfba80b811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8c:21:22:20:f1:da:e5:ee:fd:50:1c:7d:bd:
                    d0:b8:e5:25:7c:05:92:2e:c8:cc:fc:4a:c6:26:0a:
                    f7:fa:1c:cc:b8:65:6d:63:48:be:5a:eb:bf:ea:c7:
                    dc:aa:32:00:d3:81:7d:d1:9c:dc:24:f9:cb:be:6c:
                    50:ec:ab:84:49:00:f6:1e:40:32:6f:a7:eb:14:1d:
                    e2:0c:50:c1:cd:79:08:b2:f7:b9:c5:a3:5f:68:c3:
                    d7:1a:75:9e:d4:d3:85:5a:49:82:fe:32:bb:0a:0d:
                    bd:40:9e:36:f4:02:a2:88:4c:04:23:89:2a:8e:85:
                    b6:db:0c:b5:8d:89:46:10:02:09:4a:f0:54:02:d1:
                    47:af:c6:fe:f6:f6:13:62:ae:10:a6:33:c6:d5:5b:
                    21:f5:aa:8a:cc:cc:8e:3e:4a:d3:b5:b9:d1:b3:6d:
                    b1:96:e6:98:06:9e:53:58:8f:7a:e3:9c:e6:41:f7:
                    91:3e:0b:5f:0f:a5:2d:5c:9e:50:14:9e:7b:4c:56:
                    bd:92:e7:17:45:27:ef:0e:41:4b:96:ba:0f:25:56:
                    ac:5e:20:21:eb:31:b1:13:1a:d1:73:8f:04:94:3b:
                    be:09:f5:0f:81:97:bc:d8:f3:d3:49:ba:1b:15:de:
                    aa:91:2f:9f:19:55:9d:6f:89:7c:2f:57:7b:03:7f:
                    4e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F6:10:DD:AA:C6:C2:A1:39:A7:93:65:45:8F:06:82:F4:27:8B:DD
            X509v3 Authority Key Identifier:
                keyid:00:36:54:27:4E:AD:70:E0:1B:DF:36:7A:94:A8:B7:5F:75:8A:73:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bec122f444854416c46c5b459d8853cc0cb2e76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55a48b38-424a-4e49-bcf6-18b3cb12251c/83eddec544787961b98bed6f8e5585bfba80b811.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/55a48b38-424a-4e49-bcf6-18b3cb12251c/9bec122f444854416c46c5b459d8853cc0cb2e76.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:a1:0e:e3:04:fc:57:04:6f:84:23:9b:9e:3e:d7:f9:e2:24:
         a5:82:73:34:e1:bb:4e:77:69:51:9b:1a:26:32:2a:e0:e1:56:
         43:2b:61:9d:d5:98:e8:7d:05:9c:2b:cb:cb:23:25:9c:96:e3:
         12:6e:32:2e:3b:aa:4a:c8:bd:87:d8:f0:8a:8c:d5:e4:a6:ce:
         6c:02:52:e1:c4:4d:63:b7:b5:2f:87:1d:21:2b:fb:bd:96:be:
         39:83:17:4f:f5:fe:ae:d4:7f:55:71:61:53:89:ae:59:18:d7:
         6a:45:47:4a:94:1c:fe:c6:1d:cf:16:1f:a1:00:e8:3f:90:8a:
         05:01:a6:86:a7:e7:91:9b:97:63:78:0e:fb:7c:3f:61:80:c5:
         fb:16:18:6c:7e:09:93:66:38:ea:e8:14:ac:95:06:87:56:4f:
         20:7f:fc:77:e5:d5:11:05:79:72:ba:5c:15:76:69:45:da:7a:
         22:54:f8:0b:32:b1:a9:1d:40:78:9d:84:0a:84:ac:9c:76:53:
         d5:40:47:1e:82:3f:4c:38:df:67:9b:34:7b:77:14:b4:83:6f:
         ff:80:ab:02:76:04:5a:5c:bf:63:21:6d:39:4b:3b:9b:f7:af:
         78:16:29:4e:64:e7:59:ef:4f:fa:8f:32:16:3f:0b:c5:7a:40:
         24:89:ea:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 08:01:01 2023 by rpki-client on console-fra.rpki-client.org