Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5716c384-15b2-4cd4-9584-8f361d74c3b4/660b87d02642479c0b946425a6120d432f14267d.roa
File:                     660b87d02642479c0b946425a6120d432f14267d.roa (raw, json)
Hash identifier:          EGxA+aPm9igd7Aw76k3e1Kmbzd/INGCfVBRySkSwqCw=
Subject key identifier:   B5:8F:CD:CD:D1:90:86:38:3A:87:AB:4E:23:54:0C:4B:B3:16:43:99
Certificate issuer:       /CN=8e04677b51c6fee610279bb07461734e534b699e
Certificate serial:       15CB7B
Authority key identifier: 5C:CB:63:54:F2:B0:C7:52:06:99:0C:99:5C:C9:F1:FA:10:8B:21:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e04677b51c6fee610279bb07461734e534b699e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5716c384-15b2-4cd4-9584-8f361d74c3b4/660b87d02642479c0b946425a6120d432f14267d.roa
Signing time:             Fri 22 Apr 2022 23:00:28 +0000
ROA not before:           Thu 17 Feb 2022 03:00:00 +0000
ROA not after:            Sat 17 Feb 2024 03:00:00 +0000
asID:                     267782
IP address blocks:        45.171.132.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Fri 16 Feb 2024 07:30:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1428347 (0x15cb7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e04677b51c6fee610279bb07461734e534b699e
        Validity
            Not Before: Feb 17 03:00:00 2022 GMT
            Not After : Feb 17 03:00:00 2024 GMT
        Subject: CN=660b87d02642479c0b946425a6120d432f14267d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:34:01:c0:5d:3e:8a:e1:52:bb:32:2c:bb:fa:
                    72:22:34:7b:21:2a:4c:11:2e:2a:30:fd:e9:b1:10:
                    d4:86:d1:c8:a5:ab:b2:0a:48:4d:7b:ae:2b:ad:f3:
                    49:8c:b7:f9:31:0a:6f:db:ff:e4:24:3c:47:36:9f:
                    ed:38:d1:1a:d4:bd:97:86:d4:0b:ec:1d:0d:6c:af:
                    fb:a0:e8:ce:26:87:e1:06:5d:92:52:21:77:13:9b:
                    ee:b5:70:3d:ab:b5:8d:ba:95:4c:35:2b:46:1b:f5:
                    d1:2e:34:32:49:46:16:40:f2:1f:67:cd:4b:23:89:
                    95:bd:42:d4:5b:eb:3c:a6:9e:f3:6f:16:7b:85:5d:
                    b3:96:49:3a:48:d0:b9:3c:e5:4e:b5:6c:e2:53:07:
                    6a:73:ff:67:47:bf:73:62:d4:0a:cc:f5:57:71:b7:
                    9c:41:a7:7a:0f:33:18:46:53:f9:b9:d5:16:e3:54:
                    61:46:16:75:08:c9:d6:db:01:f0:e2:5e:2d:95:b3:
                    1c:b7:d1:01:35:0c:d9:22:d9:84:85:53:a3:93:20:
                    55:60:9e:6c:b1:70:03:ed:f6:7f:f7:59:9b:b6:2d:
                    8e:08:5c:18:54:31:bc:a3:26:fa:8c:01:0f:81:46:
                    27:c0:41:6c:50:d5:52:0f:01:23:ca:cd:79:23:e8:
                    9e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:8F:CD:CD:D1:90:86:38:3A:87:AB:4E:23:54:0C:4B:B3:16:43:99
            X509v3 Authority Key Identifier:
                keyid:5C:CB:63:54:F2:B0:C7:52:06:99:0C:99:5C:C9:F1:FA:10:8B:21:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e04677b51c6fee610279bb07461734e534b699e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5716c384-15b2-4cd4-9584-8f361d74c3b4/660b87d02642479c0b946425a6120d432f14267d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5716c384-15b2-4cd4-9584-8f361d74c3b4/8e04677b51c6fee610279bb07461734e534b699e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:77:4c:78:02:0b:df:03:40:7d:71:f3:b9:bd:1f:f3:9e:25:
         b1:f7:65:5d:3e:fe:49:36:37:ef:fe:da:97:f8:c2:84:bd:91:
         1b:50:a9:27:9a:12:90:53:17:c0:a4:67:0b:73:2f:83:60:d3:
         2b:b5:32:42:f2:65:39:0a:f1:91:35:37:a6:ee:86:2a:42:aa:
         d1:cd:49:14:a4:2b:33:85:95:1a:ef:10:f5:87:42:09:c6:33:
         8c:66:c6:e6:3b:e0:8a:ac:d5:6f:8b:05:bb:00:db:c0:2d:ed:
         f9:1b:11:96:56:b9:b5:4e:bf:fd:7c:bc:76:44:f2:8e:3f:e0:
         20:c8:68:00:2c:dd:d1:ab:bf:95:cc:c7:8e:b3:cf:12:a6:68:
         e1:e6:a4:48:36:ad:c3:5b:1a:f8:3e:6c:13:36:64:7b:bc:f3:
         81:50:86:bb:bf:40:63:07:72:e5:b0:23:df:d3:c4:0d:1e:9c:
         55:0f:4e:90:02:47:a2:65:95:36:80:b5:e7:3b:0a:04:22:14:
         95:4c:cc:fb:38:e3:dd:d8:53:45:a0:cb:6d:d6:cd:45:f8:37:
         85:60:f0:bb:8a:0d:0a:76:4b:b7:77:f6:3d:08:66:a2:47:06:
         96:72:4e:83:dd:ab:75:ba:86:be:2f:b2:41:39:da:a2:24:43:
         6c:0c:c5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 16 11:58:06 2024 by rpki-client on console-fra.rpki-client.org