Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6623c23d-a07e-4281-bafb-f4074923a733/c0e3a8f5280b98edd272ad4e9259115b0810e15c.roa
File:                     c0e3a8f5280b98edd272ad4e9259115b0810e15c.roa (raw, json)
Hash identifier:          9zwi49TcIEaq1Rp3Ckm1EFCDAuL3foPFjWQvN5GvWb4=
Subject key identifier:   A6:D8:1F:7F:A7:4C:FE:96:3A:7A:E7:B1:BA:E9:8D:8B:BB:C4:AE:6F
Certificate issuer:       /CN=aba98f92d75773ce486003b4ad13562a026abb7d
Certificate serial:       0333
Authority key identifier: B8:74:DC:AD:16:7A:F2:9F:BD:95:C4:AB:16:7C:B1:C0:B3:82:09:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aba98f92d75773ce486003b4ad13562a026abb7d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6623c23d-a07e-4281-bafb-f4074923a733/c0e3a8f5280b98edd272ad4e9259115b0810e15c.roa
Signing time:             Tue 16 Nov 2021 18:42:43 +0000
ROA not before:           Tue 16 Nov 2021 02:00:00 +0000
ROA not after:            Thu 16 Nov 2023 02:00:00 +0000
asID:                     265534
IP address blocks:        45.174.228.0/22 maxlen: 24
                          2806:32c::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 819 (0x333)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aba98f92d75773ce486003b4ad13562a026abb7d
        Validity
            Not Before: Nov 16 02:00:00 2021 GMT
            Not After : Nov 16 02:00:00 2023 GMT
        Subject: CN=c0e3a8f5280b98edd272ad4e9259115b0810e15c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:83:f6:bc:43:50:65:90:21:99:83:fc:f6:4f:
                    b4:4b:a8:46:d2:7b:a0:b8:d6:b3:db:c4:f5:24:89:
                    cf:e7:a5:67:62:37:4f:19:48:3a:58:09:c5:6d:81:
                    7c:36:8e:a0:0f:cb:37:da:d4:83:0e:86:14:7c:9f:
                    c1:60:42:db:4a:13:0d:89:65:5f:16:a6:5c:a3:a7:
                    bb:d5:8d:93:e4:98:ae:0e:e0:3b:b8:53:d2:1d:a9:
                    9e:a8:7d:4b:7f:65:0b:ee:5c:e2:91:72:f2:38:ab:
                    16:b5:80:a3:c5:08:41:10:ca:86:a2:4e:88:2f:b2:
                    cb:21:fc:bd:78:98:b2:44:34:91:dc:9a:e4:da:27:
                    b4:75:51:3a:a0:13:6e:82:ae:a4:43:b5:d4:df:d7:
                    9a:18:48:1c:36:b6:92:fc:86:e2:59:37:16:45:86:
                    5f:b6:7c:7d:cd:9d:7f:af:d3:f1:08:a9:86:46:8b:
                    48:ca:c4:cb:b4:f3:42:08:37:3d:67:d7:f7:85:d7:
                    bf:56:81:4d:4d:f2:6c:a3:e9:41:a6:85:a5:e3:4b:
                    4e:65:f5:c1:c6:42:f0:19:af:91:ee:1b:af:ff:5a:
                    b7:a0:09:07:12:00:e9:39:b2:c9:34:25:0d:b4:83:
                    08:57:75:04:1a:6e:09:d2:cb:77:38:b1:d0:99:cb:
                    98:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D8:1F:7F:A7:4C:FE:96:3A:7A:E7:B1:BA:E9:8D:8B:BB:C4:AE:6F
            X509v3 Authority Key Identifier:
                keyid:B8:74:DC:AD:16:7A:F2:9F:BD:95:C4:AB:16:7C:B1:C0:B3:82:09:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aba98f92d75773ce486003b4ad13562a026abb7d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6623c23d-a07e-4281-bafb-f4074923a733/c0e3a8f5280b98edd272ad4e9259115b0810e15c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6623c23d-a07e-4281-bafb-f4074923a733/aba98f92d75773ce486003b4ad13562a026abb7d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.228.0/22
                IPv6:
                  2806:32c::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:82:67:9f:9d:99:d5:83:94:01:3b:86:8d:11:6f:31:ee:41:
         40:54:94:d2:64:d6:e1:05:89:a3:fa:3d:31:fe:12:73:25:ca:
         72:0b:53:a9:54:77:bd:de:24:33:c3:df:c5:5a:8c:77:11:0a:
         d5:87:0e:0f:db:ab:95:dd:49:78:7a:b6:f3:c8:65:1b:00:70:
         ac:96:b5:57:aa:9f:16:18:d6:94:44:0a:6e:a0:bc:90:d0:3b:
         a3:0e:24:b7:39:69:69:f2:33:58:34:a0:0c:d4:5a:92:32:fd:
         69:8e:47:ee:c0:1c:47:e1:1a:b8:6d:85:2f:0e:9a:85:d1:02:
         ba:05:00:fa:a9:b1:08:0b:32:0b:85:43:f2:96:89:46:70:d0:
         02:60:69:43:56:f8:b6:69:87:fb:fb:5c:2d:93:10:a9:aa:5d:
         c9:3b:56:e9:88:0c:08:8c:11:52:bb:6c:f2:18:d4:63:82:11:
         ba:48:04:3b:37:61:77:1d:f3:68:89:fa:06:a8:ea:5a:f0:91:
         ef:8d:0e:69:f5:24:77:d6:92:06:ce:92:b0:19:3c:6a:d2:b7:
         ee:0e:43:82:98:9d:3d:ad:46:bc:59:15:63:2f:6f:53:7f:73:
         a4:40:4b:a1:21:ea:1d:93:2f:a8:b0:6a:34:b3:f9:91:7e:f1:
         7d:58:e3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 15 07:57:25 2023 by rpki-client on console-fra.rpki-client.org