Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57c081c3-34a1-49d7-9aca-1a0eb83a838b/83a25de63674719d3cc5b2fa98beef524d54c111.roa
File:                     83a25de63674719d3cc5b2fa98beef524d54c111.roa (raw, json)
Hash identifier:          oY7l6PyV0J0cwaG1dLAQmPWN/FK1S9I2G5zacA87sB0=
Subject key identifier:   F9:CF:E2:16:8A:50:E7:E5:47:8C:2B:F0:36:88:0C:84:B3:46:66:A8
Certificate issuer:       /CN=592c73df8a5ecfa22ed98642ab6ae2e46949dd61
Certificate serial:       0DCEEF
Authority key identifier: C6:A2:6F:94:DA:2F:63:72:B3:F2:37:16:F2:78:17:C3:07:A5:F6:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/592c73df8a5ecfa22ed98642ab6ae2e46949dd61.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57c081c3-34a1-49d7-9aca-1a0eb83a838b/83a25de63674719d3cc5b2fa98beef524d54c111.roa
Signing time:             Wed 24 Mar 2021 14:41:04 +0000
ROA not before:           Wed 24 Mar 2021 14:41:04 +0000
ROA not after:            Tue 24 Mar 2026 14:41:04 +0000
asID:                     265724
IP address blocks:        45.6.225.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 904943 (0xdceef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=592c73df8a5ecfa22ed98642ab6ae2e46949dd61
        Validity
            Not Before: Mar 24 14:41:04 2021 GMT
            Not After : Mar 24 14:41:04 2026 GMT
        Subject: CN=83a25de63674719d3cc5b2fa98beef524d54c111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:37:8b:f0:07:38:c8:71:94:7b:7d:7c:19:83:
                    26:01:b1:93:db:b3:26:45:93:2f:24:f3:f0:3c:88:
                    fb:2d:0d:c1:5f:47:e6:03:8b:00:c6:b5:96:a2:3e:
                    13:2b:93:f7:d2:06:fe:c4:a4:18:3a:ad:67:5c:d8:
                    4d:a8:70:b7:2c:95:66:8a:f4:10:4c:17:e4:41:b6:
                    6d:9c:20:01:f8:80:e5:9a:c9:1d:af:e6:7c:12:95:
                    41:a2:b6:27:cc:f0:39:19:79:69:04:8f:17:80:0c:
                    59:c2:c9:89:dd:dd:cf:bf:2c:a6:6e:e4:85:b5:5c:
                    ed:05:13:9f:79:d6:5a:36:2a:2e:5a:66:91:92:46:
                    2b:a5:19:37:c4:d9:78:d5:2b:17:9f:c4:3b:05:9b:
                    88:41:7b:a7:d1:90:a5:32:13:cd:b2:c6:a3:74:01:
                    59:e1:83:3b:10:66:c5:60:c4:99:a0:83:7c:c7:60:
                    82:d1:c9:77:be:00:2f:29:0b:05:13:cb:11:a2:ab:
                    bc:3e:bf:9f:29:a1:dd:7f:36:13:a3:0d:cb:90:80:
                    4e:48:83:ba:76:26:aa:56:30:76:d1:ba:e0:36:7d:
                    22:59:73:4a:87:d6:65:46:6d:74:90:b0:8c:8e:37:
                    ea:9f:d3:07:89:03:a2:0c:a5:cb:93:c4:c4:1f:f1:
                    04:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:CF:E2:16:8A:50:E7:E5:47:8C:2B:F0:36:88:0C:84:B3:46:66:A8
            X509v3 Authority Key Identifier:
                keyid:C6:A2:6F:94:DA:2F:63:72:B3:F2:37:16:F2:78:17:C3:07:A5:F6:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/592c73df8a5ecfa22ed98642ab6ae2e46949dd61.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57c081c3-34a1-49d7-9aca-1a0eb83a838b/83a25de63674719d3cc5b2fa98beef524d54c111.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57c081c3-34a1-49d7-9aca-1a0eb83a838b/592c73df8a5ecfa22ed98642ab6ae2e46949dd61.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:90:ea:b3:90:87:e1:d8:d3:87:bb:b9:97:98:05:06:7b:a7:
         b3:f3:d3:c5:f7:a9:f5:9d:d3:77:f4:c7:a0:63:e6:62:b8:a8:
         4f:21:6d:3c:83:69:80:17:bb:79:c5:1e:ec:46:07:0d:84:c5:
         b9:67:67:e0:50:fe:64:b1:88:34:6d:d6:33:04:29:d0:98:4a:
         e1:76:2e:58:10:76:1b:e9:c6:8d:24:45:2a:ab:09:c9:b0:24:
         7a:fd:89:9b:a6:7c:f5:4e:03:75:fd:95:5a:f4:ed:2d:ff:54:
         f1:5c:16:3a:87:19:1e:4a:62:fe:de:0f:be:6f:da:0e:aa:c9:
         f8:af:57:27:dd:2f:23:77:1d:5f:12:54:fd:c6:8b:28:6d:5d:
         e1:cb:e9:1a:5f:07:8e:a4:2a:3e:c1:c1:1d:c0:40:5e:06:13:
         57:6f:e5:ba:59:df:46:30:df:76:5d:da:0c:be:fa:5d:b0:f4:
         b6:26:81:6e:53:bb:48:19:68:6a:7a:dc:ad:2e:db:4c:33:31:
         10:ce:66:3f:6d:4c:4e:89:8d:15:6e:99:24:12:d1:2f:b7:0f:
         02:29:13:95:ec:9b:c9:44:8c:85:17:f0:2d:1e:ce:30:50:09:
         32:f6:a4:35:8b:9b:bb:13:23:29:35:8b:8e:82:b0:db:d4:12:
         09:f8:e1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 16 14:16:54 2023 by rpki-client on console-fra.rpki-client.org