Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57c081c3-34a1-49d7-9aca-1a0eb83a838b/f67d0fe8975b560fc483f743e5ab39e4f4665039.roa
File:                     f67d0fe8975b560fc483f743e5ab39e4f4665039.roa (raw, json)
Hash identifier:          zqNls4fEPuw86w75q8lpwTeiuvm9HKD4C6BltSvOuwc=
Subject key identifier:   01:F4:D1:4F:EB:DF:95:95:95:5E:F2:C7:60:F3:D9:34:FF:EE:6E:00
Certificate issuer:       /CN=592c73df8a5ecfa22ed98642ab6ae2e46949dd61
Certificate serial:       0DD159
Authority key identifier: C6:A2:6F:94:DA:2F:63:72:B3:F2:37:16:F2:78:17:C3:07:A5:F6:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/592c73df8a5ecfa22ed98642ab6ae2e46949dd61.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57c081c3-34a1-49d7-9aca-1a0eb83a838b/f67d0fe8975b560fc483f743e5ab39e4f4665039.roa
Signing time:             Wed 24 Mar 2021 14:41:04 +0000
ROA not before:           Wed 24 Mar 2021 14:41:04 +0000
ROA not after:            Tue 24 Mar 2026 14:41:04 +0000
asID:                     265724
IP address blocks:        45.6.226.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 905561 (0xdd159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=592c73df8a5ecfa22ed98642ab6ae2e46949dd61
        Validity
            Not Before: Mar 24 14:41:04 2021 GMT
            Not After : Mar 24 14:41:04 2026 GMT
        Subject: CN=f67d0fe8975b560fc483f743e5ab39e4f4665039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:bd:af:b5:18:7a:75:2d:9f:3e:47:38:0d:d8:
                    46:85:9c:18:e8:0c:11:47:85:24:73:a6:a5:b0:b1:
                    95:07:e5:a2:67:15:38:32:56:d4:2f:bd:40:aa:50:
                    e5:69:c7:00:51:86:1f:2c:66:c2:23:86:80:6c:fa:
                    68:dc:06:9e:07:10:94:67:95:3c:b1:82:ea:02:cb:
                    c6:2c:92:03:f0:f5:ba:db:70:66:c4:d3:7f:b4:45:
                    5d:c7:99:da:c8:32:c0:62:d7:13:8f:c4:14:59:db:
                    09:75:a3:df:87:dd:3f:e0:22:4b:87:c8:7c:80:d0:
                    01:2e:77:3f:6e:d4:8d:45:79:3f:99:40:6e:40:c4:
                    d0:b3:7a:a7:1e:ea:93:12:4a:c0:65:bb:26:97:fb:
                    a4:11:eb:44:17:89:ba:19:87:96:72:12:34:9d:a8:
                    0f:3d:57:ee:b2:ab:a8:9c:0d:43:14:07:83:89:44:
                    af:0a:30:fc:8f:c1:56:2a:23:a1:bb:ca:d9:76:35:
                    2c:3f:65:4b:da:aa:d4:17:bf:54:b2:24:11:41:0c:
                    3b:35:4d:9f:0d:6e:14:77:91:ee:26:85:c4:ec:3f:
                    03:ed:72:7a:58:c9:8e:6b:81:c9:0a:9a:a4:30:85:
                    93:28:30:6f:18:92:a5:cd:d8:4f:e9:cb:2b:2a:df:
                    68:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F4:D1:4F:EB:DF:95:95:95:5E:F2:C7:60:F3:D9:34:FF:EE:6E:00
            X509v3 Authority Key Identifier:
                keyid:C6:A2:6F:94:DA:2F:63:72:B3:F2:37:16:F2:78:17:C3:07:A5:F6:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/592c73df8a5ecfa22ed98642ab6ae2e46949dd61.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57c081c3-34a1-49d7-9aca-1a0eb83a838b/f67d0fe8975b560fc483f743e5ab39e4f4665039.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57c081c3-34a1-49d7-9aca-1a0eb83a838b/592c73df8a5ecfa22ed98642ab6ae2e46949dd61.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:79:9d:82:5b:d7:b6:2d:a2:af:62:86:82:8d:96:b9:6c:02:
         a3:76:cd:f3:57:a0:19:3d:42:7f:ea:2d:27:fe:aa:9e:f6:2c:
         e4:10:35:60:a4:80:62:f8:7d:94:eb:25:c7:a8:bb:c0:23:48:
         7b:b0:1a:9d:64:6f:d6:c3:e5:78:58:32:1c:a2:9d:2f:92:72:
         e8:54:57:16:14:2c:d4:9b:69:8e:d4:8a:ff:ea:81:3e:75:2d:
         bc:dd:31:b6:98:e9:ae:79:fb:39:30:d2:53:67:38:18:af:6f:
         7c:e6:17:e9:51:4a:75:f5:d5:8c:3c:8a:fe:68:c9:b0:09:f5:
         b8:63:c9:a3:85:95:d3:b9:49:27:39:f4:18:a6:6a:68:0f:4c:
         91:d2:d4:ee:f5:c3:83:6b:20:48:85:cf:83:a4:5d:5f:f6:4e:
         f3:4e:91:86:5a:74:18:cc:dd:10:87:46:c8:8f:b4:70:ac:4c:
         b7:b3:4f:a4:25:89:9f:d2:21:9a:89:0a:03:bf:88:26:a3:cf:
         ea:44:c2:85:af:88:78:63:17:8e:c5:ed:25:db:0a:65:94:3c:
         f1:42:64:21:73:45:35:a4:ee:1b:e9:71:49:52:04:e2:56:34:
         d7:86:c0:26:48:cc:58:d8:03:35:6b:9c:93:a3:5a:82:3b:45:
         f2:8f:8e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 16 14:48:59 2023 by rpki-client on console-ams.rpki-client.org