Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6065f311-40a5-4bdb-ab8d-b0fa9bfc4a66/1afdc7e9db56379aa1b6e1f3bb02592cc8d89202.roa
File:                     1afdc7e9db56379aa1b6e1f3bb02592cc8d89202.roa (raw, json)
Hash identifier:          ig9R3NMdRdmYfFFyFgC5Z0OeoxyKzWBwOoHbYW9IOnc=
Subject key identifier:   04:1B:62:95:58:44:AE:48:34:C4:2A:01:CA:B9:44:8B:99:7E:68:CC
Certificate issuer:       /CN=5436c9c8d57c3e3253e79ac263352d27de50cae3
Certificate serial:       05FA42
Authority key identifier: 5C:11:CA:8B:F5:92:F1:72:E3:70:30:D8:B5:50:29:7A:D3:5A:B9:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5436c9c8d57c3e3253e79ac263352d27de50cae3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6065f311-40a5-4bdb-ab8d-b0fa9bfc4a66/1afdc7e9db56379aa1b6e1f3bb02592cc8d89202.roa
Signing time:             Wed 24 Mar 2021 14:34:39 +0000
ROA not before:           Wed 24 Mar 2021 14:34:39 +0000
ROA not after:            Tue 24 Mar 2026 14:34:39 +0000
asID:                     18678
IP address blocks:        45.162.76.0/23 maxlen: 24
                          45.162.78.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 391746 (0x5fa42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5436c9c8d57c3e3253e79ac263352d27de50cae3
        Validity
            Not Before: Mar 24 14:34:39 2021 GMT
            Not After : Mar 24 14:34:39 2026 GMT
        Subject: CN=1afdc7e9db56379aa1b6e1f3bb02592cc8d89202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:40:65:6d:bc:7e:81:47:79:ed:58:34:6f:00:
                    e1:61:08:d2:7f:da:db:ee:74:57:27:72:ce:b7:26:
                    5f:86:03:1f:6c:49:8b:e5:ec:48:bf:52:89:7f:12:
                    a5:83:fe:9c:21:69:d7:f0:fe:9d:a4:b2:f2:29:4b:
                    5b:9f:6a:4c:d8:f1:79:3e:df:92:22:72:b2:a7:da:
                    9c:a7:76:4a:24:93:82:6c:a9:75:c5:a7:47:58:19:
                    b1:99:88:7a:f3:df:d7:85:3c:c4:4a:27:1d:3f:1b:
                    45:40:d1:6b:19:32:6c:08:ba:10:89:c7:43:f3:00:
                    36:91:cd:6c:ef:96:c0:73:68:5a:7d:ed:e9:a4:71:
                    bf:09:64:92:f0:b2:ec:27:6f:67:4f:67:12:11:4c:
                    79:71:cf:32:4e:35:d0:e3:1e:d9:a4:6c:7c:e8:e2:
                    9b:b4:7b:2d:f4:9c:a9:a0:fa:03:ea:96:58:e3:92:
                    53:f9:33:ca:75:98:ac:ec:da:34:b4:2e:e4:47:d8:
                    11:98:44:3a:5e:41:ce:82:55:e8:35:66:b6:d6:32:
                    78:bc:e3:4b:5e:24:35:f0:6c:a9:72:0f:57:48:a5:
                    b6:d8:3b:93:d1:ba:af:b0:6d:d8:49:35:9b:2d:ab:
                    0c:93:29:c1:44:fd:d7:b5:77:8d:c4:88:82:08:77:
                    a8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:1B:62:95:58:44:AE:48:34:C4:2A:01:CA:B9:44:8B:99:7E:68:CC
            X509v3 Authority Key Identifier:
                keyid:5C:11:CA:8B:F5:92:F1:72:E3:70:30:D8:B5:50:29:7A:D3:5A:B9:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5436c9c8d57c3e3253e79ac263352d27de50cae3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6065f311-40a5-4bdb-ab8d-b0fa9bfc4a66/1afdc7e9db56379aa1b6e1f3bb02592cc8d89202.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6065f311-40a5-4bdb-ab8d-b0fa9bfc4a66/5436c9c8d57c3e3253e79ac263352d27de50cae3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.76.0-45.162.78.255

    Signature Algorithm: sha256WithRSAEncryption
         09:11:fd:3a:b0:38:68:d1:5b:66:e9:a7:af:b0:81:7c:c3:68:
         9e:0a:3d:59:34:2b:38:c3:cf:33:fb:26:4e:3f:7a:7d:52:32:
         05:44:50:bc:41:6e:85:28:f7:35:7b:3f:a2:8c:fa:fe:6a:6f:
         90:0a:fc:9b:84:94:8e:3d:9f:f0:cb:6a:8f:f4:0c:eb:7b:04:
         67:3c:d3:37:ff:28:9a:26:2d:01:83:df:38:73:2d:3f:67:a8:
         d0:ff:e2:45:5c:0b:9a:23:2a:d0:ea:14:9c:14:26:77:19:84:
         e9:f8:09:13:f7:a3:b8:e3:da:39:22:36:a0:0e:39:a3:4d:13:
         d3:f5:10:b4:1a:92:e5:5b:25:6b:c5:d7:e8:1e:c8:9f:ec:58:
         2c:66:13:bd:ea:49:e7:0e:5e:d6:e9:be:d1:c4:12:ff:74:8d:
         4e:4d:e2:7a:a7:0d:00:9e:d9:17:e8:fb:ef:23:cf:e9:31:ad:
         5e:70:04:a0:ea:9c:8d:28:c4:43:0b:6f:8e:44:4e:36:b5:79:
         24:80:47:79:b7:7b:3a:38:8f:5a:58:c5:4a:21:ff:e1:ed:b4:
         1a:bb:a2:df:36:ba:e8:48:96:b2:9e:45:21:e8:9d:ef:15:50:
         95:79:de:a2:96:56:d8:b4:b4:67:8e:76:49:3b:ea:12:ac:85:
         cd:6c:32:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:21 2023 by rpki-client on console-fra.rpki-client.org