Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/85745477-cf2f-4c9b-bbc1-366019d6950c/5dce93b62fbb21a56d97c80184c1b4c2d0d2a12b.roa
File:                     5dce93b62fbb21a56d97c80184c1b4c2d0d2a12b.roa (raw, json)
Hash identifier:          MTjWJxZ3wkFvIwZKa5sjNZcyZ6PraziC27pUqeNAGRA=
Subject key identifier:   98:60:2F:30:44:82:5A:B6:3A:B4:19:6D:17:F9:40:24:04:51:D0:5D
Certificate issuer:       /CN=10c38b9181161ced9b3aca715f10eb6f09968296
Certificate serial:       0B3CE1
Authority key identifier: 32:4D:86:3A:FF:AF:AC:1D:7E:B0:AC:0A:5D:8D:43:65:EE:3B:C0:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/10c38b9181161ced9b3aca715f10eb6f09968296.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/85745477-cf2f-4c9b-bbc1-366019d6950c/5dce93b62fbb21a56d97c80184c1b4c2d0d2a12b.roa
Signing time:             Wed 24 Mar 2021 14:39:26 +0000
ROA not before:           Wed 24 Mar 2021 14:39:26 +0000
ROA not after:            Tue 24 Mar 2026 14:39:26 +0000
asID:                     269791
IP address blocks:        45.184.102.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 736481 (0xb3ce1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10c38b9181161ced9b3aca715f10eb6f09968296
        Validity
            Not Before: Mar 24 14:39:26 2021 GMT
            Not After : Mar 24 14:39:26 2026 GMT
        Subject: CN=5dce93b62fbb21a56d97c80184c1b4c2d0d2a12b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:98:f6:a6:ae:d4:21:64:a4:49:30:c2:c9:34:
                    23:70:e9:4a:a7:a6:8c:70:9f:53:09:a0:92:aa:5f:
                    5a:b7:60:a2:48:46:18:f2:a7:44:ff:26:af:6b:c5:
                    4d:15:79:10:d3:7a:fc:1a:12:d7:45:a5:6e:bc:2d:
                    49:6c:7f:08:a1:27:3c:16:41:0b:45:6b:99:e7:1c:
                    33:38:97:ad:60:9f:40:46:28:04:10:80:59:74:95:
                    7c:01:01:6b:a1:46:85:7a:e8:9a:fc:03:28:46:1b:
                    10:0e:04:b9:be:de:c5:72:79:2b:2b:69:c9:c8:4f:
                    54:70:04:fe:e6:aa:fa:65:63:d1:02:32:0b:5f:5d:
                    73:d8:44:3b:d2:f8:91:3f:88:af:fa:e9:5e:b5:88:
                    3f:23:8d:80:f6:67:85:73:ba:a2:2b:1c:58:8e:1f:
                    9f:d7:0b:cc:af:e3:d9:d9:78:2c:06:33:42:81:51:
                    2f:0f:e7:94:d6:51:97:7c:92:a5:a0:d1:56:fc:4c:
                    17:50:3e:b0:71:be:92:67:fb:8b:82:93:5f:c3:80:
                    c4:87:d0:8c:60:f9:f4:19:da:57:8b:7c:0b:57:ea:
                    36:30:f8:28:39:27:04:cb:fa:15:4a:00:83:6b:d7:
                    9d:be:25:98:9e:1d:ae:01:1e:f1:d6:be:ad:88:60:
                    49:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:60:2F:30:44:82:5A:B6:3A:B4:19:6D:17:F9:40:24:04:51:D0:5D
            X509v3 Authority Key Identifier:
                keyid:32:4D:86:3A:FF:AF:AC:1D:7E:B0:AC:0A:5D:8D:43:65:EE:3B:C0:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/10c38b9181161ced9b3aca715f10eb6f09968296.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/85745477-cf2f-4c9b-bbc1-366019d6950c/5dce93b62fbb21a56d97c80184c1b4c2d0d2a12b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/85745477-cf2f-4c9b-bbc1-366019d6950c/10c38b9181161ced9b3aca715f10eb6f09968296.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:35:b1:0f:e4:37:65:be:7b:29:19:77:fa:bd:0b:12:1a:92:
         4c:94:26:62:14:be:2c:e0:4b:78:48:29:4d:96:ae:6c:3f:f3:
         64:2a:83:e1:42:15:5c:ee:68:de:84:ab:8e:71:c6:9c:e4:60:
         67:5c:8c:e0:77:1a:08:0e:09:71:05:ff:e5:c6:6a:be:38:f1:
         ba:54:53:90:cc:7c:86:cf:45:0c:30:76:dd:e2:5e:fd:7e:3a:
         7c:d5:55:82:20:96:33:67:b7:97:cf:fd:17:89:2c:8d:82:d9:
         79:98:08:ef:83:3a:51:3d:eb:96:55:31:30:7e:07:80:9d:65:
         ab:b7:77:4a:c6:33:11:35:3a:fb:fc:f4:69:8b:04:e8:7e:f2:
         cc:6c:f2:99:e6:67:aa:45:72:46:17:9b:a6:97:e3:30:07:0e:
         79:98:c9:77:52:12:92:84:5d:84:bc:e0:01:74:de:35:7e:97:
         ae:d3:19:c1:9e:64:47:d7:13:32:ea:67:6d:6d:7e:b8:1d:a8:
         bf:50:9b:97:b4:58:d5:3b:64:6a:50:74:2a:80:2e:f2:2e:4a:
         5d:c7:b0:b5:5c:8d:92:7d:98:f4:45:f9:a5:a0:e0:af:ba:2a:
         f4:f8:28:64:39:ac:72:ae:60:c8:43:d3:52:ac:57:a1:15:0d:
         a9:a2:ca:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 4 21:27:46 2024 by rpki-client on console-fra.rpki-client.org