Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/3bbeef10fd41a9f50bc662bcbb30a70d66a0683e.roa
File:                     3bbeef10fd41a9f50bc662bcbb30a70d66a0683e.roa (raw, json)
Hash identifier:          W4imUsQ6Diqr7ePFg3yQoXj4mC5kRPoEbWL0Sv45IjM=
Subject key identifier:   75:8E:BB:EA:3D:83:DB:5D:FE:BC:69:06:F2:4C:52:1D:71:57:8F:9A
Certificate issuer:       /CN=981ee37ee8c6770b167c2590f30297cb10005f16
Certificate serial:       018880
Authority key identifier: 64:4C:33:2C:F6:42:5B:A3:59:20:EB:A0:30:C8:A6:D4:AD:F4:4D:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/981ee37ee8c6770b167c2590f30297cb10005f16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/3bbeef10fd41a9f50bc662bcbb30a70d66a0683e.roa
Signing time:             Thu 15 Apr 2021 15:29:37 +0000
ROA not before:           Thu 15 Apr 2021 03:00:00 +0000
ROA not after:            Sat 15 Apr 2023 03:00:00 +0000
asID:                     265855
IP address blocks:        45.173.4.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100480 (0x18880)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=981ee37ee8c6770b167c2590f30297cb10005f16
        Validity
            Not Before: Apr 15 03:00:00 2021 GMT
            Not After : Apr 15 03:00:00 2023 GMT
        Subject: CN=3bbeef10fd41a9f50bc662bcbb30a70d66a0683e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:db:99:14:8a:46:61:f5:f4:a6:bd:63:84:92:
                    51:1a:f0:da:38:76:bd:91:a2:82:9e:0a:5f:49:b5:
                    ac:fc:c9:21:1f:1f:e8:d7:80:20:e3:82:f6:b7:59:
                    9e:5c:2e:a5:97:1d:a6:5a:aa:d0:0a:c7:97:0c:83:
                    6e:af:28:bc:d5:34:36:c2:b2:3f:94:4a:b9:b8:fc:
                    66:8b:2b:4c:b9:17:82:23:8a:12:18:9d:a6:6c:84:
                    af:a7:72:e7:2f:65:80:03:d8:41:e0:a8:ec:f9:98:
                    cc:b7:52:b6:01:a2:5b:54:5a:87:04:6a:c6:b1:f4:
                    ce:64:fa:5c:d8:86:83:3d:82:ae:4c:61:16:5e:6b:
                    3c:ff:db:03:92:f3:0f:b3:71:0e:7e:0c:0b:46:4b:
                    f6:1a:4e:8c:a1:a8:46:e3:b2:f0:43:69:12:74:5f:
                    9d:9e:ec:a1:eb:27:b5:95:5e:34:35:0c:8c:92:87:
                    e8:3e:08:4d:28:de:e0:ce:54:03:dd:71:04:2b:32:
                    d9:ab:48:b6:f5:a6:02:2c:35:fd:9e:cc:df:61:fb:
                    ac:c1:a0:c1:b5:90:d4:39:02:e6:ee:a3:8f:74:bf:
                    ab:95:aa:e2:77:b6:8e:58:98:1c:cc:d3:18:e1:b1:
                    2f:f9:1e:0c:5a:cd:b0:86:d6:ef:8d:34:29:d2:6c:
                    a7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:8E:BB:EA:3D:83:DB:5D:FE:BC:69:06:F2:4C:52:1D:71:57:8F:9A
            X509v3 Authority Key Identifier:
                keyid:64:4C:33:2C:F6:42:5B:A3:59:20:EB:A0:30:C8:A6:D4:AD:F4:4D:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/981ee37ee8c6770b167c2590f30297cb10005f16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/3bbeef10fd41a9f50bc662bcbb30a70d66a0683e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/981ee37ee8c6770b167c2590f30297cb10005f16.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:a7:cf:84:30:a9:c3:8b:54:5d:46:ec:40:82:24:2a:e9:ac:
         48:89:72:ce:6c:dc:27:90:c1:c8:68:68:b4:46:de:be:44:b9:
         94:5f:87:77:da:1f:99:33:1f:24:05:cb:fa:d6:03:3f:27:4a:
         ed:78:c4:05:b5:0f:37:b0:76:f0:81:66:bd:40:46:44:0e:5f:
         4b:c8:1c:a1:f4:28:a8:94:f7:a2:dc:3d:4d:6f:25:b7:77:3c:
         62:51:62:48:23:b8:d6:9b:40:70:ed:2b:2e:17:e2:29:03:36:
         e5:61:de:d9:3a:1c:d8:37:c8:ef:c3:d8:e4:f0:02:bb:53:7c:
         61:8b:ed:24:cb:e2:4e:bf:20:69:e6:01:c9:cb:1a:79:d3:16:
         62:cd:3b:bd:6f:17:93:a0:f6:94:dc:da:f9:c4:e7:a8:5f:3c:
         89:88:0a:10:88:76:39:56:44:97:1e:2e:72:4e:63:d9:c7:1e:
         6b:08:05:1b:b9:e0:c3:82:2c:cb:46:c8:33:ed:da:be:73:0f:
         25:d2:22:6b:a3:85:96:2c:0a:b9:3b:36:f5:5a:9a:4e:09:85:
         16:7f:35:34:a7:74:6a:54:6b:08:90:ef:e1:77:7d:24:58:27:
         90:13:8d:ef:17:7a:e0:d4:b1:c7:f3:11:66:b9:a2:d4:09:f3:
         6f:01:41:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:25 2023 by rpki-client on console-fra.rpki-client.org