Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/82bd0309-39fc-4bbc-b121-fff7c80d221e/e606a7c24ec92b825c275df5ebe126fd4ef530c5.roa
File:                     e606a7c24ec92b825c275df5ebe126fd4ef530c5.roa (raw, json)
Hash identifier:          Q16U1PESSVoZkRg1ungLkIF55G3yahS65nBu/3Jd/iE=
Subject key identifier:   1E:DD:20:57:6D:A8:18:1C:28:F3:35:77:7E:6F:1A:E4:F3:4B:E8:71
Certificate issuer:       /CN=43b6833cf6ce9e345cb92183fae39b42838f55b4
Certificate serial:       19F002
Authority key identifier: 55:01:F1:97:B6:F4:1E:E4:40:0B:27:53:05:F0:6B:96:57:74:FB:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43b6833cf6ce9e345cb92183fae39b42838f55b4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/82bd0309-39fc-4bbc-b121-fff7c80d221e/e606a7c24ec92b825c275df5ebe126fd4ef530c5.roa
Signing time:             Thu 29 Sep 2022 22:40:14 +0000
ROA not before:           Wed 24 Mar 2021 14:40:40 +0000
ROA not after:            Tue 24 Mar 2026 14:40:40 +0000
asID:                     267881
IP address blocks:        45.177.124.0/22 maxlen: 22
                          45.177.124.0/24 maxlen: 24
                          45.177.125.0/24 maxlen: 24
                          45.177.126.0/24 maxlen: 24
                          45.177.127.0/24 maxlen: 24
                          2803:2a60::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1699842 (0x19f002)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43b6833cf6ce9e345cb92183fae39b42838f55b4
        Validity
            Not Before: Mar 24 14:40:40 2021 GMT
            Not After : Mar 24 14:40:40 2026 GMT
        Subject: CN=e606a7c24ec92b825c275df5ebe126fd4ef530c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:53:3b:4b:71:86:49:f4:71:8c:2f:f7:62:84:
                    e3:70:85:a8:0f:32:8d:35:65:c2:ca:3b:1e:36:98:
                    ec:15:53:00:cd:1d:27:19:bc:e6:b8:bc:5a:2f:80:
                    c7:fd:f3:84:50:19:d4:63:76:ba:8e:34:72:59:e3:
                    e5:fa:41:81:19:56:34:13:be:24:6e:21:44:3e:cf:
                    c4:86:fb:10:ee:52:bd:fb:51:84:29:a3:31:4d:f8:
                    6c:e5:6d:2f:92:35:b4:e6:97:df:a3:03:60:ae:84:
                    59:18:ff:b0:08:39:a1:9d:57:2c:92:ce:f1:09:48:
                    98:d2:56:69:8e:3a:d3:98:d8:38:6d:c8:d7:ec:8c:
                    82:cb:6e:99:61:b8:1e:43:2e:60:e1:09:2a:a9:15:
                    70:a5:1e:1c:81:3b:03:fe:8f:85:78:60:b5:53:3a:
                    55:0c:db:7a:9c:34:7e:98:13:6a:de:22:76:c2:71:
                    21:1c:6c:03:5e:0d:06:2e:10:c7:26:3d:71:32:25:
                    78:26:6d:ad:37:90:fc:0b:94:02:af:e3:5b:c3:28:
                    31:c9:55:0c:e4:af:2f:c7:b3:14:b3:89:ea:53:c0:
                    f0:92:dd:80:ea:39:fb:f7:1c:e7:a2:11:72:8c:36:
                    a5:d5:ff:70:08:14:99:8a:e2:7a:de:7e:01:13:a9:
                    a1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:DD:20:57:6D:A8:18:1C:28:F3:35:77:7E:6F:1A:E4:F3:4B:E8:71
            X509v3 Authority Key Identifier:
                keyid:55:01:F1:97:B6:F4:1E:E4:40:0B:27:53:05:F0:6B:96:57:74:FB:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43b6833cf6ce9e345cb92183fae39b42838f55b4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/82bd0309-39fc-4bbc-b121-fff7c80d221e/e606a7c24ec92b825c275df5ebe126fd4ef530c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/82bd0309-39fc-4bbc-b121-fff7c80d221e/43b6833cf6ce9e345cb92183fae39b42838f55b4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.124.0/22
                IPv6:
                  2803:2a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:8c:c8:d5:8b:f1:4c:14:58:cc:d1:40:c8:4d:99:ec:ff:b4:
         7f:e7:d1:01:8f:01:cf:11:fb:70:b3:1d:16:88:5e:f9:15:b5:
         53:70:c5:60:4d:25:67:7a:cd:5e:15:57:9a:6d:db:a7:ee:b9:
         25:b8:c1:96:2a:a4:f5:44:19:83:8b:45:43:01:a9:8a:75:9f:
         6e:7d:fd:29:d0:ba:3a:42:c0:38:08:ec:1d:52:f4:04:3d:3e:
         41:95:95:99:a1:ac:03:c8:5e:f1:ea:b3:61:1a:b5:c4:23:ae:
         03:b9:f6:af:af:b3:9a:12:82:8b:5b:22:11:e7:f4:c0:0a:fc:
         00:6a:56:fc:cd:4a:33:fc:4c:e5:7b:99:62:b2:97:5a:e0:1a:
         41:f1:2e:65:30:e2:35:a7:26:37:96:9f:a8:7a:b9:62:8f:17:
         bd:5e:d4:22:07:af:af:b4:d2:c2:66:cd:ef:e6:89:2d:c2:b1:
         35:61:8f:77:23:fe:b1:5a:6e:86:92:e2:b5:3c:c8:7d:61:9a:
         ab:48:b9:34:97:53:fe:12:f1:39:66:9f:20:73:e3:fd:9e:90:
         bc:ec:26:da:b9:10:61:ee:a9:2d:42:54:a9:25:48:52:13:54:
         f8:63:4c:18:92:fc:d2:5c:62:67:04:9d:8c:36:a2:09:d3:7a:
         b7:b4:07:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:42 2023 by rpki-client on console-ams.rpki-client.org