Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/d4aca8b90d0bfb850b3f4e23dc8799d27bb21fba.roa
File:                     d4aca8b90d0bfb850b3f4e23dc8799d27bb21fba.roa (raw, json)
Hash identifier:          n2DA5ej7ZTpheHkSS21nXpJ8txQvs/V5Wsw5QFDnjps=
Subject key identifier:   F4:78:1B:70:83:11:C5:02:D0:53:87:F4:52:91:E3:FD:D3:15:B4:50
Certificate issuer:       /CN=84a7a446b5912a684e23e2c1eb2619b25184f613
Certificate serial:       1A16C9
Authority key identifier: 93:7B:94:1B:07:C4:AE:1B:05:18:7B:9E:8B:AD:BC:61:A6:F4:4C:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/84a7a446b5912a684e23e2c1eb2619b25184f613.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/d4aca8b90d0bfb850b3f4e23dc8799d27bb21fba.roa
Signing time:             Wed 10 Aug 2022 17:05:53 +0000
ROA not before:           Tue 14 Jun 2022 03:00:00 +0000
ROA not after:            Fri 14 Jun 2024 03:00:00 +0000
asID:                     264746
IP address blocks:        45.231.148.0/24 maxlen: 24
                          45.231.149.0/24 maxlen: 24
                          45.231.150.0/24 maxlen: 24
                          45.231.151.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1709769 (0x1a16c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84a7a446b5912a684e23e2c1eb2619b25184f613
        Validity
            Not Before: Jun 14 03:00:00 2022 GMT
            Not After : Jun 14 03:00:00 2024 GMT
        Subject: CN=d4aca8b90d0bfb850b3f4e23dc8799d27bb21fba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2a:96:97:18:93:cd:57:64:6a:1e:fb:a9:79:
                    89:9c:05:3e:96:84:c3:db:ea:83:ea:47:bc:38:8d:
                    e1:dc:b5:ec:ac:5d:ec:e2:2c:31:99:da:84:92:b9:
                    bb:e2:58:45:4c:eb:95:04:4a:2b:ec:62:a0:ba:f9:
                    6c:72:ba:53:3a:19:bc:09:3a:ba:d8:0f:79:d5:60:
                    d3:ed:24:3c:53:d9:04:e6:63:88:57:85:e9:21:ce:
                    aa:48:8e:dd:9d:df:fe:4e:a4:35:6b:bb:3e:b9:72:
                    f0:3e:31:4b:bf:18:3f:a2:aa:4e:fd:ef:b0:2b:bb:
                    b5:52:d0:bf:56:27:b7:bc:39:6e:5d:03:21:70:11:
                    2c:c8:61:ea:d5:18:02:67:25:54:bc:03:c5:93:81:
                    84:63:a2:31:d9:40:28:84:a9:5c:e0:98:42:36:82:
                    27:d5:3c:32:6a:4a:3e:3e:9d:5e:59:26:57:9e:73:
                    3d:5a:44:00:f4:86:82:f3:56:df:d1:fe:77:94:44:
                    05:bb:48:13:87:02:17:89:4f:b5:a9:5c:3f:f1:fa:
                    82:9c:99:dd:68:15:80:24:8f:68:4b:96:17:28:3e:
                    90:d9:24:33:1c:ac:8d:01:b9:fa:fb:b0:7c:05:f3:
                    49:dc:a8:a8:d9:3a:1a:83:6c:6b:56:38:46:cc:3f:
                    06:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:78:1B:70:83:11:C5:02:D0:53:87:F4:52:91:E3:FD:D3:15:B4:50
            X509v3 Authority Key Identifier:
                keyid:93:7B:94:1B:07:C4:AE:1B:05:18:7B:9E:8B:AD:BC:61:A6:F4:4C:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/84a7a446b5912a684e23e2c1eb2619b25184f613.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/d4aca8b90d0bfb850b3f4e23dc8799d27bb21fba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8a0ea2ea-35a3-434c-9d57-4b0e4465c943/84a7a446b5912a684e23e2c1eb2619b25184f613.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:54:d0:63:78:0a:95:cd:4c:d4:8a:e5:fd:b0:19:26:c3:f5:
         3e:3f:38:6c:f5:99:fa:e9:a4:a4:ab:83:6e:00:60:72:49:c5:
         17:15:89:48:5e:b7:1b:ff:60:89:cb:7c:8b:91:b1:68:b7:0b:
         7d:dc:34:f2:1f:72:ad:f5:38:76:e3:16:fc:1d:d5:47:6a:a4:
         24:ef:fd:05:93:68:51:ec:fc:c1:5d:86:8f:63:ba:67:81:ad:
         5c:67:02:b3:13:f7:3c:55:25:66:42:68:fe:30:b4:32:35:0a:
         b6:77:0e:af:ea:c5:1a:12:ef:e1:4a:8f:24:23:03:7c:03:d2:
         19:d8:ef:8c:bd:76:7d:1d:12:4f:fa:89:e9:48:7c:3d:67:84:
         4f:8b:c7:7e:53:0e:fe:02:57:d5:8a:10:01:d0:20:9d:a0:1f:
         d0:72:e1:d9:20:4e:4e:62:67:96:e5:e5:f1:6c:d3:f7:c0:6d:
         77:29:fd:f9:a1:74:02:b6:c7:0c:e8:e1:e8:7e:58:4b:ba:d5:
         af:59:af:7c:ce:e1:32:ec:8f:3b:42:7e:29:19:cf:68:ea:7c:
         f9:31:cc:f0:aa:fb:ff:c7:92:72:56:fb:07:b3:49:00:1d:d2:
         64:82:56:cb:a9:9e:b6:77:00:7a:3a:77:9d:2e:81:70:3f:84:
         30:7e:a7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 22 15:01:10 2023 by rpki-client on console-fra.rpki-client.org