Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71b2d803-0a93-4e95-99f0-13c753ed136c/250c366bb720fc43291525ba9a35c877e1690e0b.roa
File:                     250c366bb720fc43291525ba9a35c877e1690e0b.roa (raw, json)
Hash identifier:          MAK7FcG1qk7y0B2egAdXHQfpyTNKYm4Q3LeeZWp/m5s=
Subject key identifier:   AA:B2:DC:A5:C1:86:21:5D:1D:B8:F2:F3:2B:E4:6C:13:88:D6:72:4D
Certificate issuer:       /CN=a6ebe33530373d2c2bffaaed1e53f05db8e2a436
Certificate serial:       03ECD5
Authority key identifier: 05:2B:45:49:AE:7E:4E:27:CD:57:65:C8:E8:2C:77:61:8C:EC:27:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a6ebe33530373d2c2bffaaed1e53f05db8e2a436.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71b2d803-0a93-4e95-99f0-13c753ed136c/250c366bb720fc43291525ba9a35c877e1690e0b.roa
Signing time:             Fri 17 Sep 2021 16:18:49 +0000
ROA not before:           Fri 17 Sep 2021 03:00:00 +0000
ROA not after:            Sun 17 Sep 2023 03:00:00 +0000
asID:                     267857
IP address blocks:        45.177.110.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 257237 (0x3ecd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6ebe33530373d2c2bffaaed1e53f05db8e2a436
        Validity
            Not Before: Sep 17 03:00:00 2021 GMT
            Not After : Sep 17 03:00:00 2023 GMT
        Subject: CN=250c366bb720fc43291525ba9a35c877e1690e0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:80:9d:85:b4:53:a1:4f:7c:42:e1:b8:69:b4:
                    5a:22:dc:a5:55:8a:62:3d:3e:8e:6e:a3:3d:b9:8c:
                    c7:18:a5:58:e2:d0:9a:c5:f7:ff:28:22:c5:31:95:
                    5e:e2:9e:c6:a6:a2:7d:31:5a:27:09:fa:6e:d5:18:
                    7b:94:22:a2:c1:f2:24:6d:61:3d:31:97:0d:67:95:
                    e6:49:e6:cc:ad:74:37:e7:05:f0:a7:32:60:91:c5:
                    18:ba:78:2b:b3:a1:06:0f:c3:d3:fc:cf:b2:97:05:
                    40:32:4e:08:c8:9c:2c:6e:43:f6:49:38:b0:1f:7e:
                    22:45:33:86:fa:ef:d0:a0:45:13:ff:26:44:ad:7d:
                    e7:7b:f7:eb:76:32:a6:e4:1b:0f:60:22:d4:00:f3:
                    4f:68:f8:15:3f:04:10:17:d7:e7:2a:c8:05:a0:72:
                    04:5c:6c:0c:96:22:f7:68:d0:7e:42:a9:2c:80:b3:
                    9e:36:11:42:8e:f3:3f:5d:7a:44:ca:bc:72:33:91:
                    a5:d1:3a:01:74:cc:b3:cf:ac:91:df:65:4e:24:bf:
                    2c:65:bf:0b:36:88:d1:ed:f9:1f:35:ae:8a:45:84:
                    6f:55:7d:c0:9d:42:64:c4:29:0a:dd:df:ad:6c:5b:
                    4d:43:ff:31:fd:6b:0b:b3:0d:10:34:d8:4d:4d:1f:
                    2c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B2:DC:A5:C1:86:21:5D:1D:B8:F2:F3:2B:E4:6C:13:88:D6:72:4D
            X509v3 Authority Key Identifier:
                keyid:05:2B:45:49:AE:7E:4E:27:CD:57:65:C8:E8:2C:77:61:8C:EC:27:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a6ebe33530373d2c2bffaaed1e53f05db8e2a436.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71b2d803-0a93-4e95-99f0-13c753ed136c/250c366bb720fc43291525ba9a35c877e1690e0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71b2d803-0a93-4e95-99f0-13c753ed136c/a6ebe33530373d2c2bffaaed1e53f05db8e2a436.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:67:e8:2f:0a:48:91:40:19:08:fc:8b:11:63:40:3d:18:aa:
         aa:80:fd:d5:1a:48:18:dc:fe:8d:2c:4b:9a:df:5b:f1:83:00:
         76:7d:76:39:43:39:29:90:23:c1:34:40:e0:54:38:08:b9:6b:
         d2:73:34:f2:3b:fc:48:06:67:5f:a0:79:92:3c:2e:e0:65:9c:
         a0:03:9e:cc:97:28:88:36:69:fc:1d:56:56:b2:40:85:ff:c7:
         46:cf:14:72:bf:ff:bb:fe:8b:b7:04:a5:ca:4c:42:f4:6f:98:
         9d:c4:7c:44:81:07:64:b9:6f:2d:22:6e:1a:ce:61:8f:35:d0:
         18:9a:20:83:ae:36:06:e6:54:5a:9f:22:20:bc:a2:13:d3:73:
         1e:7a:4e:88:76:ee:51:b6:00:c3:70:88:2d:e8:9d:fc:a6:dd:
         ca:f7:b2:35:33:65:45:66:b7:ed:66:8c:7b:c8:eb:09:6e:2e:
         68:3c:91:84:01:ed:66:48:1a:90:74:d0:5d:70:f7:e2:f6:e4:
         44:19:2d:3a:7d:e0:5c:ed:cb:ea:eb:90:d8:83:50:6a:2d:e6:
         95:d3:d6:a4:45:82:dc:76:a6:7e:14:f0:4f:7f:8a:0d:6a:70:
         3c:92:01:d1:08:e3:49:ce:e1:84:a5:15:c9:c5:af:08:39:a5:
         a3:8e:03:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 16 09:19:29 2023 by rpki-client on console-ams.rpki-client.org