Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/78a46017-c255-4869-bb4d-256e3ba6be23/7497a7b71cc29da30f185b432138f3f17f89dfcc.roa
File:                     7497a7b71cc29da30f185b432138f3f17f89dfcc.roa (raw, json)
Hash identifier:          HeYEB3UnjWo4toKtdZDTqydvsZypAeQorMR5FNPVEdY=
Subject key identifier:   D3:EE:76:BC:D5:E1:95:E8:ED:5E:49:62:96:6C:74:1A:F7:45:A0:F6
Certificate issuer:       /CN=ee16626b2effff95f451b4227e9e67721082c9aa
Certificate serial:       096598
Authority key identifier: 8F:8F:4B:D8:2E:E7:50:77:B1:32:62:F0:18:79:41:9A:CF:13:10:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ee16626b2effff95f451b4227e9e67721082c9aa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/78a46017-c255-4869-bb4d-256e3ba6be23/7497a7b71cc29da30f185b432138f3f17f89dfcc.roa
Signing time:             Thu 03 Jun 2021 13:55:13 +0000
ROA not before:           Thu 03 Jun 2021 03:00:00 +0000
ROA not after:            Sat 03 Jun 2023 03:00:00 +0000
asID:                     28100
IP address blocks:        45.71.204.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 615832 (0x96598)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee16626b2effff95f451b4227e9e67721082c9aa
        Validity
            Not Before: Jun  3 03:00:00 2021 GMT
            Not After : Jun  3 03:00:00 2023 GMT
        Subject: CN=7497a7b71cc29da30f185b432138f3f17f89dfcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:86:28:59:64:38:25:5c:71:06:39:ca:87:0c:
                    e4:1d:73:0a:da:9a:b2:a7:07:0b:a5:7c:a9:fb:45:
                    18:bc:95:a1:11:1e:24:6c:db:a0:8d:b1:af:71:d4:
                    8d:2e:67:e6:43:e9:41:b3:45:59:bc:f2:27:af:fb:
                    fe:1a:fa:09:70:c9:58:0c:f2:d8:9c:68:31:56:d5:
                    34:1f:f4:82:ef:6b:90:bf:58:a0:98:00:a1:c1:95:
                    1b:76:af:76:be:e0:58:72:b4:65:37:30:a2:42:75:
                    05:a8:bb:c6:37:f3:d4:30:93:5a:e3:a1:bc:f5:bf:
                    ab:1c:11:bf:f1:07:00:40:6f:84:3c:ef:43:31:e5:
                    21:c7:ef:ac:d6:a5:b4:14:8f:bc:90:a6:d0:3c:9e:
                    a0:b9:fc:66:4c:0e:43:ab:f6:64:44:29:bc:d9:9d:
                    fa:59:d7:96:8c:b3:11:97:10:96:db:7c:fa:df:73:
                    05:4a:64:87:df:25:1a:88:4d:ed:25:4f:b3:bd:b3:
                    39:1b:ac:de:b3:af:7d:0b:8f:04:9e:89:0e:b7:0a:
                    06:cc:aa:02:2a:67:a4:bd:4f:36:9f:63:23:fc:5b:
                    ca:a3:0a:41:e1:5a:c5:0f:4c:57:1b:7e:8e:e1:2a:
                    86:7a:d7:f4:b5:64:a9:6a:ea:9e:5c:94:9a:ee:73:
                    4f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:EE:76:BC:D5:E1:95:E8:ED:5E:49:62:96:6C:74:1A:F7:45:A0:F6
            X509v3 Authority Key Identifier:
                keyid:8F:8F:4B:D8:2E:E7:50:77:B1:32:62:F0:18:79:41:9A:CF:13:10:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ee16626b2effff95f451b4227e9e67721082c9aa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/78a46017-c255-4869-bb4d-256e3ba6be23/7497a7b71cc29da30f185b432138f3f17f89dfcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/78a46017-c255-4869-bb4d-256e3ba6be23/ee16626b2effff95f451b4227e9e67721082c9aa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:dd:43:39:e0:4f:c6:59:a2:1e:52:87:6e:83:7e:70:90:19:
         c0:7d:8c:c7:8d:e1:5c:6d:1b:f4:64:ac:1b:4f:28:31:57:6e:
         c9:6c:1b:ae:e4:77:65:93:aa:d6:cf:cf:f3:3d:a7:ff:00:ac:
         5f:19:24:50:ba:dd:8f:69:8a:a2:1a:94:60:b2:4d:65:88:e5:
         6e:fe:80:59:e2:48:21:39:e6:28:30:99:09:f5:70:d6:43:16:
         e3:5d:ee:e9:d4:50:dd:ba:5c:b8:69:ee:a3:d6:e9:c0:11:5c:
         2f:c2:c5:76:26:fa:5f:b4:8a:29:c9:f6:48:6c:fc:4e:d8:fb:
         57:24:c2:8d:56:13:43:20:e3:9a:72:9e:02:d8:a2:0c:94:d2:
         c6:77:24:af:9c:63:bf:e7:57:4a:f7:23:71:52:d0:08:b4:17:
         ed:32:51:13:46:bb:7c:f9:04:f3:80:2c:20:46:78:37:60:41:
         3e:96:65:2e:82:23:9d:a1:b7:86:16:ad:f0:56:c0:7e:aa:d3:
         f4:56:05:3e:92:83:f0:96:8b:7d:c3:24:3d:b9:56:a7:3e:ec:
         fb:e2:85:15:93:8f:e3:6d:67:3f:20:50:58:c7:99:48:58:ad:
         25:0a:ea:02:82:e6:92:10:d0:37:a9:64:ff:66:22:1f:b8:0e:
         73:f9:22:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:39 2023 by rpki-client on console-ams.rpki-client.org