Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/6c8906e0cffcef073589903b591da94653bdae2f.roa
File:                     6c8906e0cffcef073589903b591da94653bdae2f.roa (raw, json)
Hash identifier:          RIbH7LuOhzWLZ+j69Q43vZ9+CA7JtZqi/+55e5uEYwQ=
Subject key identifier:   A2:F6:D4:81:88:F9:46:38:E6:87:5C:B3:E3:42:64:2F:A4:43:5A:60
Certificate issuer:       /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial:       0DF48C
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/6c8906e0cffcef073589903b591da94653bdae2f.roa
Signing time:             Wed 24 Mar 2021 14:47:14 +0000
ROA not before:           Wed 24 Mar 2021 14:47:14 +0000
ROA not after:            Tue 24 Mar 2026 14:47:14 +0000
asID:                     28002
IP address blocks:        45.6.248.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 914572 (0xdf48c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Validity
            Not Before: Mar 24 14:47:14 2021 GMT
            Not After : Mar 24 14:47:14 2026 GMT
        Subject: CN=6c8906e0cffcef073589903b591da94653bdae2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c0:48:d8:19:d0:eb:a7:64:61:a2:c3:c5:fc:
                    35:f6:b0:61:4e:34:b0:a0:3c:3c:90:86:c5:c3:ad:
                    a2:cb:4c:f9:9d:7a:67:be:78:94:9d:a8:ba:40:9f:
                    4e:76:a5:ce:2c:22:14:68:0d:6f:7b:cb:b2:2d:62:
                    7f:00:e7:36:39:88:ee:aa:eb:77:b8:70:28:32:34:
                    07:a0:36:7f:c8:bf:5a:f6:63:aa:da:71:98:4a:71:
                    5a:76:8a:38:89:c6:6c:46:0b:66:08:02:bb:b5:87:
                    ec:98:8a:b1:dc:9a:5d:c9:0d:b0:0d:c4:20:40:08:
                    22:44:68:46:b3:38:4f:26:e7:7b:8e:1a:16:33:a1:
                    cb:67:22:c5:8f:2f:b4:f7:b4:8e:af:77:8a:c7:46:
                    26:92:2c:92:aa:fc:45:0b:63:25:80:74:07:60:06:
                    3d:97:f4:6f:ea:f0:97:26:01:ac:4b:cf:9f:50:a4:
                    59:bc:37:6c:8f:fa:19:3b:56:14:b9:d6:fe:19:b9:
                    d0:d1:b4:0f:e8:48:89:c1:33:60:10:9c:ba:46:cb:
                    84:47:7c:1d:44:8a:86:8e:75:b8:83:e8:b0:86:f7:
                    1a:d5:7c:22:36:25:47:7f:70:96:32:2a:78:3d:7d:
                    3f:ec:59:65:a6:7f:b8:47:de:ae:00:61:f2:a6:96:
                    7b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F6:D4:81:88:F9:46:38:E6:87:5C:B3:E3:42:64:2F:A4:43:5A:60
            X509v3 Authority Key Identifier:
                keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/6c8906e0cffcef073589903b591da94653bdae2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         13:b7:92:43:61:4f:3c:fc:cd:36:00:bc:e3:67:7a:ce:8a:4b:
         33:8c:93:02:c1:33:16:0d:26:bd:f0:b1:bd:72:c0:57:7f:68:
         22:85:97:7f:d8:e7:90:4a:49:a3:f3:b7:e6:8f:1e:ae:ac:8b:
         6d:8d:84:64:2f:03:c6:44:b3:cc:65:00:89:5c:fc:c4:8a:d2:
         4f:c9:be:a6:56:8d:23:52:dd:a0:12:69:f2:58:fc:10:fb:98:
         07:73:85:87:7f:27:22:e4:78:f1:0f:3b:39:7d:a4:76:bf:57:
         64:45:64:8f:3f:6c:2e:5c:28:33:d3:79:f7:3b:da:c7:e8:7e:
         a3:2b:c5:b5:d8:21:d2:1d:c6:41:39:bf:f0:e5:20:0e:bc:23:
         01:0d:3e:a1:d6:41:7e:ec:a5:d6:57:eb:ae:5b:83:27:1a:8f:
         e1:f5:f0:a3:4e:ef:8d:e0:22:b7:5b:0e:82:76:7c:2f:24:47:
         36:98:cd:38:60:16:50:ac:ac:e0:2c:9d:85:35:6d:e1:47:2a:
         30:8e:1f:8a:9e:41:45:bd:d9:20:8d:87:d7:20:c6:e9:94:48:
         7c:26:8a:4b:de:f0:b7:1f:8d:44:bc:68:e1:22:3a:00:c9:44:
         c7:6f:2e:e9:3b:2c:c5:7b:15:36:87:ee:83:9c:88:28:a7:f2:
         c8:dd:56:80
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDfSMMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDli
ZDNiNjMyNTJmYWZiY2Q2YmFlNmUxZjRjZWJiMDJmY2MyYWY4ZDIwHhcNMjEwMzI0
MTQ0NzE0WhcNMjYwMzI0MTQ0NzE0WjAzMTEwLwYDVQQDEyg2Yzg5MDZlMGNmZmNl
ZjA3MzU4OTkwM2I1OTFkYTk0NjUzYmRhZTJmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgcBI2BnQ66dkYaLDxfw19rBhTjSwoDw8kIbFw62iy0z5nXpn
vniUnai6QJ9OdqXOLCIUaA1ve8uyLWJ/AOc2OYjuqut3uHAoMjQHoDZ/yL9a9mOq
2nGYSnFadoo4icZsRgtmCAK7tYfsmIqx3JpdyQ2wDcQgQAgiRGhGszhPJud7jhoW
M6HLZyLFjy+097SOr3eKx0YmkiySqvxFC2MlgHQHYAY9l/Rv6vCXJgGsS8+fUKRZ
vDdsj/oZO1YUudb+GbnQ0bQP6EiJwTNgEJy6RsuER3wdRIqGjnW4g+iwhvca1Xwi
NiVHf3CWMip4PX0/7Fllpn+4R96uAGHyppZ78QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFKL21IGI+UY45odcs+NCZC+kQ1pgMB8GA1UdIwQYMBaAFH+Jf8zsEQtTeV2M
m5FVamZ66VzVMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWJkM2I2
MzI1MmZhZmJjZDZiYWU2ZTFmNGNlYmIwMmZjYzJhZjhkMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjIyYzBjMjgtY2M3ZC00MjFkLWI0NWItOWFjMmI3
Y2VkMjA5LzZjODkwNmUwY2ZmY2VmMDczNTg5OTAzYjU5MWRhOTQ2NTNiZGFlMmYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MjJjMGMyOC1jYzdkLTQyMWQtYjQ1Yi05YWMy
YjdjZWQyMDkvOWJkM2I2MzI1MmZhZmJjZDZiYWU2ZTFmNGNlYmIwMmZjYzJhZjhk
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAy0G+DANBgkqhkiG9w0BAQsFAAOCAQEAE7eSQ2FPPPzNNgC8
42d6zopLM4yTAsEzFg0mvfCxvXLAV39oIoWXf9jnkEpJo/O35o8erqyLbY2EZC8D
xkSzzGUAiVz8xIrST8m+plaNI1LdoBJp8lj8EPuYB3OFh38nIuR48Q87OX2kdr9X
ZEVkjz9sLlwoM9N59zvax+h+oyvFtdgh0h3GQTm/8OUgDrwjAQ0+odZBfuyl1lfr
rluDJxqP4fXwo07vjeAit1sOgnZ8LyRHNpjNOGAWUKys4CydhTVt4UcqMI4fip5B
Rb3ZII2H1yDG6ZRIfCaKS97wtx+NRLxo4SI6AMlEx28u6TssxXsVNofug5yIKKfy
yN1WgA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:37 2023 by rpki-client on console-ams.rpki-client.org