Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/89ddefe1-247a-4290-98fd-d8cab981e090/35337fa5cb9c2c95b8801f428d3a404c5ce39d53.roa
File:                     35337fa5cb9c2c95b8801f428d3a404c5ce39d53.roa (raw, json)
Hash identifier:          wpCpqH2P3ztAGSsuDCaEEmq6J2UOz8WDgEnkHJlJCgk=
Subject key identifier:   75:87:9E:D2:DA:5C:EC:FC:FF:F9:D9:E1:27:10:29:2E:86:5A:0A:C6
Certificate issuer:       /CN=4ebda0b19a36926365ea456c1ad0f1fdf7ec2327
Certificate serial:       0B8A55
Authority key identifier: E6:BA:70:06:4E:24:60:88:72:C6:B6:1E:E5:86:51:3B:23:86:5D:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ebda0b19a36926365ea456c1ad0f1fdf7ec2327.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/89ddefe1-247a-4290-98fd-d8cab981e090/35337fa5cb9c2c95b8801f428d3a404c5ce39d53.roa
Signing time:             Wed 24 Mar 2021 14:40:14 +0000
ROA not before:           Wed 24 Mar 2021 14:40:14 +0000
ROA not after:            Tue 24 Mar 2026 14:40:14 +0000
asID:                     269805
IP address blocks:        45.184.225.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 756309 (0xb8a55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ebda0b19a36926365ea456c1ad0f1fdf7ec2327
        Validity
            Not Before: Mar 24 14:40:14 2021 GMT
            Not After : Mar 24 14:40:14 2026 GMT
        Subject: CN=35337fa5cb9c2c95b8801f428d3a404c5ce39d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:50:76:ab:bd:42:25:41:df:38:97:3d:71:f6:
                    ff:8f:01:20:9f:6a:b6:0d:fe:f5:d7:7e:96:7f:2f:
                    d2:ad:a1:00:87:f1:cc:bd:06:4b:0a:f8:85:90:e8:
                    f4:8d:ef:1f:d9:65:fe:ca:f5:f3:75:84:a7:7d:d3:
                    f3:32:d1:56:78:48:65:e9:04:24:e4:f0:0c:27:9b:
                    5d:85:99:dc:79:37:5f:eb:15:56:ef:02:5f:fe:74:
                    26:23:31:00:58:8a:d9:18:82:28:50:53:55:ca:a7:
                    fc:c5:a7:e7:f6:a8:6a:e9:8c:54:69:5c:e6:33:1f:
                    49:04:de:43:6d:08:53:18:d4:66:34:05:d4:5f:25:
                    07:8c:2c:de:2e:23:ce:3e:1b:eb:74:bd:1c:40:80:
                    6e:a7:f2:ea:f9:fe:e6:41:fc:d1:94:86:c7:14:81:
                    77:06:60:15:95:9b:88:91:e9:e4:04:95:0c:6c:0c:
                    2c:16:a0:51:de:58:e6:ab:68:dd:5d:46:e1:55:c0:
                    fc:f8:cd:e8:88:f0:6c:04:b6:94:34:57:78:6d:1e:
                    8d:db:5c:bf:c7:e2:af:13:5e:7d:be:cc:61:bf:f6:
                    a3:9a:f0:b0:6a:45:5c:3c:71:f3:fa:7f:1d:8d:5e:
                    bc:e0:e7:9f:81:c0:f4:9a:74:bc:66:3a:fd:3e:0d:
                    3b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:87:9E:D2:DA:5C:EC:FC:FF:F9:D9:E1:27:10:29:2E:86:5A:0A:C6
            X509v3 Authority Key Identifier:
                keyid:E6:BA:70:06:4E:24:60:88:72:C6:B6:1E:E5:86:51:3B:23:86:5D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ebda0b19a36926365ea456c1ad0f1fdf7ec2327.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/89ddefe1-247a-4290-98fd-d8cab981e090/35337fa5cb9c2c95b8801f428d3a404c5ce39d53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/89ddefe1-247a-4290-98fd-d8cab981e090/4ebda0b19a36926365ea456c1ad0f1fdf7ec2327.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:3d:97:f4:24:aa:9d:9d:52:4b:bc:2d:e9:ec:df:e8:30:58:
         94:96:0a:dc:34:24:d7:8d:df:9c:22:98:ad:f3:dd:d4:d8:dd:
         ba:4d:5b:36:9c:a5:ce:f8:6a:0e:d3:0c:bf:26:d0:29:e4:8b:
         d3:91:00:b8:1f:86:4b:29:5d:01:56:b3:e2:18:45:32:8a:a2:
         a7:dc:d9:cc:89:42:cf:af:e7:6a:e2:eb:8c:91:9f:be:a3:f9:
         3b:34:10:21:9a:d0:54:27:a9:bc:f0:fa:92:26:29:ea:d3:6f:
         83:60:e9:af:4c:43:3f:cc:ce:29:bc:df:13:0f:f9:c2:51:74:
         67:a1:90:ca:2e:35:79:7e:53:53:db:70:d9:36:d3:23:83:27:
         00:42:83:46:0d:0a:30:19:5c:1e:d2:d5:5d:28:3d:da:3c:f6:
         90:63:e5:9e:e4:51:36:6a:4f:57:8b:17:02:87:83:75:2b:2f:
         69:d7:99:e9:f2:3c:1d:88:3a:29:19:ec:59:aa:0d:1d:cf:a8:
         4a:d8:cc:28:53:10:14:6a:49:66:28:85:74:e9:73:5b:15:81:
         c6:a6:b3:bc:87:bd:69:bb:66:fd:6a:f3:1a:a1:4e:b7:ae:8e:
         f5:7e:a9:a3:ef:9b:73:53:4a:a6:18:7f:52:32:47:35:23:58:
         04:05:62:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 21:39:26 2023 by rpki-client on console-ams.rpki-client.org