Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6065f311-40a5-4bdb-ab8d-b0fa9bfc4a66/68bdda6afa8b2e9d0b8b792f486e439603055704.roa
File:                     68bdda6afa8b2e9d0b8b792f486e439603055704.roa (raw, json)
Hash identifier:          fUG+FRfRf+r+txmT8FN+pwdAb7WLbNaWJ+sdzYdOPZE=
Subject key identifier:   B4:32:7A:68:48:8A:4A:39:C4:60:C1:94:B0:B6:DC:46:B8:7E:FF:F8
Certificate issuer:       /CN=5436c9c8d57c3e3253e79ac263352d27de50cae3
Certificate serial:       05F75C
Authority key identifier: 5C:11:CA:8B:F5:92:F1:72:E3:70:30:D8:B5:50:29:7A:D3:5A:B9:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5436c9c8d57c3e3253e79ac263352d27de50cae3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6065f311-40a5-4bdb-ab8d-b0fa9bfc4a66/68bdda6afa8b2e9d0b8b792f486e439603055704.roa
Signing time:             Wed 24 Mar 2021 14:34:39 +0000
ROA not before:           Wed 24 Mar 2021 14:34:39 +0000
ROA not after:            Tue 24 Mar 2026 14:34:39 +0000
asID:                     267678
IP address blocks:        45.162.79.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 391004 (0x5f75c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5436c9c8d57c3e3253e79ac263352d27de50cae3
        Validity
            Not Before: Mar 24 14:34:39 2021 GMT
            Not After : Mar 24 14:34:39 2026 GMT
        Subject: CN=68bdda6afa8b2e9d0b8b792f486e439603055704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:c9:82:35:db:e0:75:d4:4b:5d:25:fc:bd:4d:
                    44:99:c8:7a:87:98:2f:bd:48:1a:d3:0c:1d:cf:63:
                    7e:60:9b:0d:10:6d:d0:66:09:5f:99:a3:99:e8:3d:
                    cf:b6:df:67:2b:51:c8:68:9a:1c:ce:bb:3f:48:19:
                    89:70:fa:b1:0c:87:9d:fa:ce:55:41:a8:61:e0:a9:
                    b3:df:17:41:39:d3:ae:33:b9:d7:13:9d:3e:fd:a8:
                    c5:db:07:09:36:51:40:b7:1a:cd:e3:22:3b:b1:57:
                    8a:8a:0d:48:da:d2:75:3f:38:9b:ad:3e:d1:d3:91:
                    91:5d:ab:c6:5e:01:03:68:ff:93:2b:4e:a4:11:92:
                    f4:ff:cc:41:f4:84:9b:f7:82:bc:ed:bd:13:b0:8a:
                    0f:54:03:06:8f:4a:c0:69:30:3f:db:49:00:2f:4c:
                    df:76:39:de:84:05:97:54:a7:10:10:85:8c:5a:f6:
                    a2:f0:75:71:b4:0a:2a:86:c0:ff:79:7d:90:8f:e7:
                    9f:84:b2:ba:3f:52:24:18:99:44:2c:13:83:75:7a:
                    78:43:ae:43:d8:04:a1:58:3b:30:3d:35:8b:30:14:
                    21:d1:ca:8e:d0:2e:c2:ed:f6:e8:fe:e5:a8:75:7f:
                    ab:e6:0f:c4:b3:1b:b4:79:81:9f:db:36:2d:20:c5:
                    0f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:32:7A:68:48:8A:4A:39:C4:60:C1:94:B0:B6:DC:46:B8:7E:FF:F8
            X509v3 Authority Key Identifier:
                keyid:5C:11:CA:8B:F5:92:F1:72:E3:70:30:D8:B5:50:29:7A:D3:5A:B9:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5436c9c8d57c3e3253e79ac263352d27de50cae3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6065f311-40a5-4bdb-ab8d-b0fa9bfc4a66/68bdda6afa8b2e9d0b8b792f486e439603055704.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6065f311-40a5-4bdb-ab8d-b0fa9bfc4a66/5436c9c8d57c3e3253e79ac263352d27de50cae3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:aa:25:0e:26:0c:07:7c:4f:e6:af:d3:40:d4:02:63:7d:71:
         28:d4:69:cc:ec:db:7d:b3:55:b1:bf:d4:00:c2:a9:5b:1e:37:
         8b:64:31:c5:df:79:ed:77:ca:b8:bf:df:4e:20:d0:90:ad:e1:
         91:1a:22:e7:57:e9:cd:3d:37:88:48:26:96:27:92:39:36:ab:
         b2:3a:ce:fc:ea:a1:64:1c:aa:54:05:15:79:a7:04:8a:a4:8b:
         c3:bf:c5:c8:98:dc:53:e8:62:51:9d:fb:19:fa:b5:5f:1f:3e:
         fc:a7:86:21:97:9c:80:e9:a8:af:81:74:4f:b5:b9:e2:a6:2d:
         6c:d1:c9:21:a8:bf:3c:58:ee:8b:71:21:bf:82:98:cc:eb:b9:
         7a:9d:cc:82:ce:84:f1:bc:42:24:73:43:23:05:59:48:c7:e7:
         20:0d:0e:93:9f:02:e4:05:0e:4d:d4:90:b8:c2:ed:30:52:85:
         5d:01:0f:f5:d4:b2:90:09:06:2f:1a:8a:5c:54:5e:e5:6e:63:
         7f:e5:47:99:98:e6:fe:28:5d:90:59:64:fe:b6:3b:0f:2c:3e:
         1e:8d:82:1f:49:80:c8:78:55:14:25:b1:96:7d:a1:e8:7f:c7:
         df:0e:f2:d4:e6:4b:2c:78:ab:54:e4:6a:cd:12:d1:4b:43:d2:
         18:76:e9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:36 2023 by rpki-client on console-ams.rpki-client.org