Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71b2d803-0a93-4e95-99f0-13c753ed136c/ddbd1e14dd97713d5f5806bc2836a0936c67499a.roa
File:                     ddbd1e14dd97713d5f5806bc2836a0936c67499a.roa (raw, json)
Hash identifier:          NCrl9BGA3P8jICrFRkKX0xV13CAS6+JMwvaYLNWTK9Q=
Subject key identifier:   BF:27:4B:A0:DB:9E:10:E6:68:24:FA:24:10:E3:38:32:47:F2:63:41
Certificate issuer:       /CN=a6ebe33530373d2c2bffaaed1e53f05db8e2a436
Certificate serial:       087A
Authority key identifier: 05:2B:45:49:AE:7E:4E:27:CD:57:65:C8:E8:2C:77:61:8C:EC:27:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a6ebe33530373d2c2bffaaed1e53f05db8e2a436.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71b2d803-0a93-4e95-99f0-13c753ed136c/ddbd1e14dd97713d5f5806bc2836a0936c67499a.roa
Signing time:             Thu 15 Apr 2021 16:40:03 +0000
ROA not before:           Thu 15 Apr 2021 03:00:00 +0000
ROA not after:            Sat 15 Apr 2023 03:00:00 +0000
asID:                     265855
IP address blocks:        45.177.108.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2170 (0x87a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6ebe33530373d2c2bffaaed1e53f05db8e2a436
        Validity
            Not Before: Apr 15 03:00:00 2021 GMT
            Not After : Apr 15 03:00:00 2023 GMT
        Subject: CN=ddbd1e14dd97713d5f5806bc2836a0936c67499a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d5:84:5d:31:59:e1:50:6a:fb:3a:9a:4d:d2:
                    d6:1b:70:51:dd:3b:c3:20:17:58:35:e9:cf:84:4b:
                    a6:7e:fd:c8:58:74:59:e5:6b:d5:f6:54:85:cd:6e:
                    62:f9:80:f3:d8:ff:1e:c8:ed:8f:29:91:72:e3:32:
                    40:88:cd:29:3a:b0:1a:29:29:ab:0c:a7:2d:79:da:
                    3f:0b:9e:94:15:d4:97:bb:f9:60:1a:33:a5:d2:11:
                    e3:57:71:6c:4e:31:e4:e4:eb:cf:7b:9c:d4:25:06:
                    71:27:33:f6:84:8b:81:da:cc:b8:83:ac:e5:fc:d3:
                    35:3e:fb:df:04:76:f2:82:f9:e6:f6:fc:2b:82:56:
                    54:fb:6d:2e:0d:38:0f:e2:32:75:f4:1b:e4:bf:8e:
                    5e:68:ce:05:4d:65:a2:6b:fd:a1:a2:8d:18:3d:a9:
                    91:f2:47:db:fd:26:5a:b7:4d:4b:56:aa:f0:0f:3f:
                    89:0c:ab:00:32:5f:1a:eb:05:32:d0:e9:d6:85:b9:
                    48:2c:5c:53:1c:89:e9:1f:57:d6:f8:85:1c:57:da:
                    29:a1:21:6b:db:8a:a6:6a:01:49:0f:8d:54:b3:71:
                    d3:90:bc:2a:7c:c0:af:5f:56:47:4f:0c:fb:41:8e:
                    f4:9e:0f:3c:b5:04:0e:d7:f6:c9:ed:b6:6f:b5:b2:
                    8e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:27:4B:A0:DB:9E:10:E6:68:24:FA:24:10:E3:38:32:47:F2:63:41
            X509v3 Authority Key Identifier:
                keyid:05:2B:45:49:AE:7E:4E:27:CD:57:65:C8:E8:2C:77:61:8C:EC:27:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a6ebe33530373d2c2bffaaed1e53f05db8e2a436.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71b2d803-0a93-4e95-99f0-13c753ed136c/ddbd1e14dd97713d5f5806bc2836a0936c67499a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71b2d803-0a93-4e95-99f0-13c753ed136c/a6ebe33530373d2c2bffaaed1e53f05db8e2a436.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:72:1c:1a:6a:d5:40:cc:54:1a:38:73:c8:a1:99:e8:da:37:
         c1:d6:1f:86:ee:3f:8d:fd:1e:58:cc:47:97:12:d7:9a:d9:2a:
         7b:d5:bc:df:08:05:65:77:22:8f:5a:15:8f:89:3c:25:62:ea:
         03:af:24:f0:7d:c0:2d:bd:f4:37:86:5c:de:cb:98:a7:dd:ce:
         5f:df:a7:58:25:4e:e5:50:d4:a2:a0:94:ce:ab:b8:f9:79:15:
         2e:87:a5:89:73:41:7a:58:9c:12:4b:c5:95:36:9a:7c:15:92:
         0c:cb:39:4d:f0:61:79:05:5a:20:3e:99:e1:18:bd:30:90:02:
         34:ac:cc:d6:8e:60:9f:4c:71:90:da:c0:0e:3e:8f:37:67:98:
         65:98:15:4c:1b:10:2e:20:4d:e0:20:ca:38:7c:6a:a6:2a:82:
         f6:7c:10:63:ed:fa:65:e0:a7:a1:be:c6:91:8c:50:8c:48:ba:
         fe:d7:7d:77:53:26:1d:ae:72:f8:e2:85:28:7f:d0:82:f1:a9:
         34:f0:8a:a6:ca:9b:2c:9f:50:ac:24:44:8a:1f:26:05:3c:63:
         c3:df:9e:90:0f:eb:9c:c3:9b:d7:da:5c:27:76:05:33:8e:46:
         16:ce:f1:1f:55:6a:7b:58:bf:95:f2:ba:ec:1a:df:25:71:da:
         a3:d4:9f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:39 2023 by rpki-client on console-ams.rpki-client.org