Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/f0125247c3a50f8c8dd98a17076527fd5a417629.roa
File:                     f0125247c3a50f8c8dd98a17076527fd5a417629.roa (raw, json)
Hash identifier:          V5VbWpSWdP5LKyhqUjJTMuNDvAQLz/W3PRFwGyclbvA=
Subject key identifier:   47:A4:24:22:E2:B6:E8:86:77:0A:BB:35:C9:2A:69:15:72:55:6B:13
Certificate issuer:       /CN=981ee37ee8c6770b167c2590f30297cb10005f16
Certificate serial:       0185C9
Authority key identifier: 64:4C:33:2C:F6:42:5B:A3:59:20:EB:A0:30:C8:A6:D4:AD:F4:4D:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/981ee37ee8c6770b167c2590f30297cb10005f16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/f0125247c3a50f8c8dd98a17076527fd5a417629.roa
Signing time:             Thu 15 Apr 2021 15:29:01 +0000
ROA not before:           Thu 15 Apr 2021 03:00:00 +0000
ROA not after:            Sat 15 Apr 2023 03:00:00 +0000
asID:                     262191
IP address blocks:        45.173.7.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99785 (0x185c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=981ee37ee8c6770b167c2590f30297cb10005f16
        Validity
            Not Before: Apr 15 03:00:00 2021 GMT
            Not After : Apr 15 03:00:00 2023 GMT
        Subject: CN=f0125247c3a50f8c8dd98a17076527fd5a417629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5a:29:5e:f4:8e:6b:bf:6c:2c:d8:a2:d3:e0:
                    35:a7:dc:86:8e:3a:cf:35:64:1c:0d:5c:8b:fd:c3:
                    ce:9c:0c:73:d2:ac:35:3d:54:4d:0d:76:2d:3f:b8:
                    c6:62:6d:65:35:ae:45:c3:f2:e9:63:e4:7a:64:90:
                    3f:5d:56:4f:b0:06:5b:28:be:3c:d8:26:cc:11:40:
                    9a:a2:59:b2:0d:77:87:c0:43:8c:2c:55:a8:8f:96:
                    e5:13:2a:31:04:9b:17:02:73:4c:f2:c2:1b:ce:48:
                    ea:ea:bf:b1:b0:4e:ab:9f:71:36:95:60:8d:1d:d9:
                    4b:08:22:2f:af:8f:f2:e0:75:1f:87:61:76:47:00:
                    e3:7d:b4:45:26:6b:b7:6e:7b:bd:c4:21:d7:9f:ae:
                    47:8b:b4:22:0f:fc:85:19:6f:c7:bf:6a:13:6c:ff:
                    c4:b8:bc:54:18:b5:19:e9:01:2b:19:a0:cb:68:f8:
                    6d:a6:85:d2:9d:1c:7f:45:0e:c6:e2:9b:3f:38:89:
                    5d:50:23:26:59:01:7f:f8:c3:d3:eb:50:e8:e6:74:
                    8b:5e:ce:05:97:db:d1:e4:db:26:38:d7:b7:80:09:
                    ad:80:d2:90:95:75:d7:07:c9:8c:59:73:b8:8a:36:
                    dc:c8:76:b3:80:5e:92:07:76:79:93:fd:3b:e1:fd:
                    29:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A4:24:22:E2:B6:E8:86:77:0A:BB:35:C9:2A:69:15:72:55:6B:13
            X509v3 Authority Key Identifier:
                keyid:64:4C:33:2C:F6:42:5B:A3:59:20:EB:A0:30:C8:A6:D4:AD:F4:4D:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/981ee37ee8c6770b167c2590f30297cb10005f16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/f0125247c3a50f8c8dd98a17076527fd5a417629.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/808c6cb6-bb60-46a6-91f6-8e5613e660b9/981ee37ee8c6770b167c2590f30297cb10005f16.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:cd:57:7c:ed:43:9c:3c:04:38:74:e2:c3:20:b5:89:e5:96:
         1e:fc:d7:fb:8f:4e:68:6c:3a:b7:7d:d0:d0:ea:6f:9f:21:50:
         c1:0d:bd:88:bf:74:f2:ca:f9:72:bb:70:15:b7:5d:5b:60:5b:
         2c:af:d1:12:45:19:1f:99:4c:5c:2e:e6:26:39:0b:18:53:6d:
         66:88:91:1b:65:7f:f3:82:d2:05:c7:b2:04:10:e8:32:d1:a4:
         82:c0:d4:e3:28:39:01:a9:44:0e:4f:77:fc:13:f3:a3:7e:a3:
         e4:a5:dd:ae:e6:e5:34:1e:ea:f4:52:3e:31:18:e5:d2:89:b4:
         a9:98:df:26:7e:d4:fd:8e:2f:52:97:4c:d5:36:b0:44:17:dc:
         52:dc:3a:0b:02:47:a0:0a:bf:0b:ab:6f:bb:94:28:c8:96:9c:
         92:08:95:9c:50:61:13:d5:3c:a8:d3:89:db:ab:69:db:32:18:
         4c:73:a0:c5:2c:cf:a5:61:7d:df:95:38:a0:4c:c4:dc:e5:49:
         95:ee:d4:46:a5:f2:17:52:8a:16:8c:2f:1b:fa:0c:46:ff:2d:
         ab:ae:aa:26:1e:88:82:f1:5f:c1:6b:72:dc:02:ea:3c:76:e7:
         59:9b:6f:eb:99:a7:7f:80:5f:93:22:fd:a2:eb:5e:83:f5:22:
         2e:3b:9d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:25 2023 by rpki-client on console-fra.rpki-client.org