Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/651c63b7-e13e-43bf-b010-265cb1f0b182/45770457779c89e619aab99c0e643278a4a01d93.roa
File:                     45770457779c89e619aab99c0e643278a4a01d93.roa (raw, json)
Hash identifier:          Yqftju5eQ9FsqGlG4JScQ3gHC8zEVCWvhj0uW2Ijswg=
Subject key identifier:   F3:71:DF:73:40:46:75:28:5B:98:03:FB:5A:A1:FF:19:57:84:06:85
Certificate issuer:       /CN=2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82
Certificate serial:       0D18F5
Authority key identifier: 92:B6:4A:50:EF:06:00:D0:23:FF:00:07:AC:5F:C0:FD:73:E1:A9:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/651c63b7-e13e-43bf-b010-265cb1f0b182/45770457779c89e619aab99c0e643278a4a01d93.roa
Signing time:             Mon 09 May 2022 22:31:55 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     27947
IP address blocks:        179.63.20.0/22 maxlen: 31

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 858357 (0xd18f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=45770457779c89e619aab99c0e643278a4a01d93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ce:a7:20:76:80:b0:b8:94:48:f7:2c:b4:21:
                    48:fe:36:2a:23:08:2f:e9:72:c3:90:63:f2:42:88:
                    42:c0:77:b1:ca:33:19:73:5c:6f:e1:52:fb:1b:d4:
                    45:fd:6b:23:b1:df:13:fa:0c:67:6b:4b:ef:72:47:
                    fb:36:18:0f:ec:c9:fc:05:14:6b:1b:e3:46:81:20:
                    43:69:f5:dc:0d:c5:4c:c6:cd:9f:2a:3f:94:21:de:
                    ab:f4:cb:8c:f4:4b:8b:6d:c2:e1:2a:a1:f5:a6:19:
                    58:9c:0b:ea:14:fe:22:74:34:fb:c0:1e:7f:75:21:
                    c6:00:62:a4:92:69:2c:3f:1e:af:40:be:0a:ca:59:
                    fb:98:28:ab:97:0d:98:01:bb:05:fd:0c:d8:36:31:
                    2a:91:fb:aa:20:e6:cf:ec:fa:39:91:f5:32:44:e8:
                    c6:b7:95:52:70:ae:e0:96:99:3f:d4:03:41:6d:8d:
                    06:43:9d:9e:9d:5c:b3:1a:dd:30:dc:10:1d:3f:90:
                    7f:44:50:0f:23:a6:93:91:7b:9f:b5:56:89:ab:a8:
                    c8:89:21:72:3b:e7:93:13:ec:f9:53:09:99:33:cf:
                    5c:55:c9:17:fc:a8:15:e9:a4:bf:54:bb:0e:33:b4:
                    eb:25:28:61:4e:b2:61:0d:53:0e:11:8b:65:7d:c4:
                    85:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:71:DF:73:40:46:75:28:5B:98:03:FB:5A:A1:FF:19:57:84:06:85
            X509v3 Authority Key Identifier:
                keyid:92:B6:4A:50:EF:06:00:D0:23:FF:00:07:AC:5F:C0:FD:73:E1:A9:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/651c63b7-e13e-43bf-b010-265cb1f0b182/45770457779c89e619aab99c0e643278a4a01d93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/651c63b7-e13e-43bf-b010-265cb1f0b182/2b7cd4fbbabfe5565e23150fa6f1ec48b4fd3a82.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:0f:3f:20:95:61:6a:ae:32:ab:93:2c:79:f1:33:36:6d:1b:
         d6:bd:3e:73:1c:eb:55:ef:ac:2d:e5:33:e5:0c:9b:37:17:e8:
         38:c3:51:be:d0:d3:f9:b2:36:5a:cc:29:ce:3e:50:76:25:9d:
         b2:d7:ab:db:31:cd:ba:a0:b3:ff:99:b4:24:d5:aa:c3:a0:91:
         5d:ff:4e:57:35:7e:57:ce:36:49:a5:7e:76:73:b3:77:92:74:
         f9:37:3b:ee:b0:ff:ef:58:18:b1:2d:20:0c:18:50:c2:a0:58:
         eb:ba:0c:6e:14:3c:20:a4:20:f1:25:e3:3a:ce:b4:55:d8:ef:
         3e:bf:7a:f1:51:2c:f1:6d:d1:a7:65:d6:bd:a8:ae:f7:a5:c0:
         bc:85:cc:c7:67:fc:90:eb:49:bd:b5:f0:f8:a6:9c:35:e8:25:
         73:b9:a1:d2:c5:34:cc:0a:7d:46:e3:ff:8c:a8:bf:17:c0:60:
         e3:a9:12:1a:31:9c:d9:5a:6c:48:cd:fe:c2:ab:fb:e7:91:3b:
         38:e5:77:08:0b:40:4e:71:9c:9d:2d:5d:bf:82:da:65:66:9b:
         3d:c5:0c:99:31:bd:cb:45:5d:db:64:49:03:43:80:a3:ad:90:
         73:87:6b:b8:53:13:ef:36:66:ab:d2:25:4a:7b:e9:77:f7:a9:
         ed:65:e8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:37 2023 by rpki-client on console-ams.rpki-client.org