Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/82124976-cabd-45bc-87d6-d972b64d0f40/8d2bdbf8f39c22a6ec65076063a95ad732fcae6a.roa
File:                     8d2bdbf8f39c22a6ec65076063a95ad732fcae6a.roa (raw, json)
Hash identifier:          ZvbQ6V3c1x6p6IZMnaREHew9xcxO4hero8C5ByqX9Vk=
Subject key identifier:   EE:53:0B:7D:AD:25:EC:01:EE:03:9F:EB:6B:22:37:5C:09:FD:3E:37
Certificate issuer:       /CN=9dcf18a346927814b6691b49d822d55f0dc1093b
Certificate serial:       1579AB
Authority key identifier: CE:2C:E9:B9:A2:FC:3A:4A:A0:C4:13:39:3B:72:F8:12:DF:25:03:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9dcf18a346927814b6691b49d822d55f0dc1093b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/82124976-cabd-45bc-87d6-d972b64d0f40/8d2bdbf8f39c22a6ec65076063a95ad732fcae6a.roa
Signing time:             Thu 31 Mar 2022 21:03:21 +0000
ROA not before:           Sun 23 Jan 2022 03:00:00 +0000
ROA not after:            Tue 23 Jan 2024 03:00:00 +0000
asID:                     270094
IP address blocks:        45.237.132.0/24 maxlen: 24
                          45.237.133.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 22 Jan 2024 07:30:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1407403 (0x1579ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dcf18a346927814b6691b49d822d55f0dc1093b
        Validity
            Not Before: Jan 23 03:00:00 2022 GMT
            Not After : Jan 23 03:00:00 2024 GMT
        Subject: CN=8d2bdbf8f39c22a6ec65076063a95ad732fcae6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2a:ba:32:ff:87:7a:3e:2c:ff:ac:cf:ab:4d:
                    1a:0f:72:0d:47:1a:52:88:83:19:e1:3d:8d:9a:e2:
                    87:d0:b3:6c:a4:d2:3c:06:69:e5:15:78:15:7f:83:
                    a0:ab:9c:89:9a:7d:c1:23:f2:d1:bf:e9:7d:9c:ac:
                    8e:6e:49:3d:37:a6:66:57:1b:e1:ca:94:04:77:96:
                    cc:08:2a:38:71:42:92:d8:48:72:6a:84:7c:a0:66:
                    93:ba:e9:9a:1e:4d:4f:73:9b:11:bb:12:e8:8c:8b:
                    fe:a3:03:ca:f5:ef:27:a5:d6:97:f4:05:f9:93:78:
                    06:62:b4:b6:8f:db:f0:98:94:3a:3a:3e:3f:85:ea:
                    7c:30:d4:2d:3a:b1:04:a5:cb:b1:96:50:b7:85:62:
                    56:ee:e3:7d:a6:94:ed:b1:2e:71:2c:5d:68:80:68:
                    c7:19:cd:73:66:1c:1e:df:42:1b:35:49:16:14:fc:
                    56:0d:00:06:8a:36:6c:e2:3f:a2:c5:27:f6:96:72:
                    a5:eb:86:54:20:6b:6d:b6:80:33:5e:54:8f:f4:4a:
                    55:2d:8c:b7:27:d5:f7:c7:e0:05:7f:51:c9:d8:64:
                    cb:21:ef:78:73:1c:e7:3b:66:2e:f6:6c:51:56:7e:
                    cf:9a:50:24:c5:cc:e8:64:5e:b4:32:44:8a:bc:bf:
                    0d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:53:0B:7D:AD:25:EC:01:EE:03:9F:EB:6B:22:37:5C:09:FD:3E:37
            X509v3 Authority Key Identifier:
                keyid:CE:2C:E9:B9:A2:FC:3A:4A:A0:C4:13:39:3B:72:F8:12:DF:25:03:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9dcf18a346927814b6691b49d822d55f0dc1093b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/82124976-cabd-45bc-87d6-d972b64d0f40/8d2bdbf8f39c22a6ec65076063a95ad732fcae6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/82124976-cabd-45bc-87d6-d972b64d0f40/9dcf18a346927814b6691b49d822d55f0dc1093b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:ce:9b:c9:8b:d1:3f:65:08:b3:4a:31:be:2c:2b:a7:12:25:
         d4:57:9e:ea:d1:3b:a8:a7:68:1a:16:f3:fe:21:51:4f:02:28:
         50:89:fe:64:b0:6f:8e:df:48:e5:73:84:2b:60:0a:b4:8c:12:
         a9:f6:3f:3b:67:b8:2e:b4:39:c1:1c:ac:c7:6c:1a:38:e9:d0:
         38:09:54:9c:a9:0e:c3:60:c5:c0:09:c0:1a:0d:c2:8b:bf:15:
         87:2a:73:b1:3a:96:ce:83:8e:73:76:ba:2f:2b:d6:5f:12:c4:
         fb:9a:f7:f5:6f:2a:14:56:31:3a:21:80:1b:6d:7e:6b:0f:ad:
         06:90:6e:60:92:dc:16:32:c9:ed:6a:ae:f4:06:ef:cb:0c:af:
         d9:36:81:b1:91:30:30:9f:98:06:ee:0c:cc:96:b6:06:d0:6c:
         d0:73:1f:be:91:a7:7d:a6:ec:9a:2c:ad:d4:4e:0a:5b:fa:ec:
         c5:23:03:89:d2:8e:32:0b:cc:8a:0f:e4:d6:31:9a:e0:ab:f4:
         1c:f5:53:15:22:1c:5b:03:60:a3:64:ae:ac:ce:10:9b:08:99:
         4f:96:a1:f6:73:96:3b:ff:a6:41:81:8e:b2:31:01:8f:27:c2:
         7b:2f:1f:46:4a:60:a8:a6:10:7e:a5:fc:da:f4:08:73:fc:fc:
         62:2b:d3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 22 08:18:51 2024 by rpki-client on console-fra.rpki-client.org