Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8b763bd2-def3-4d86-a8ee-0e53724ce3af/31434110840cc29cab050d80d07ab3d7ce0f7906.roa
File:                     31434110840cc29cab050d80d07ab3d7ce0f7906.roa (raw, json)
Hash identifier:          1VsIvmkegWA8CSqMurzekAoKh2Jg42kR34WIWPUU3lI=
Subject key identifier:   38:42:48:B9:FF:9A:C7:80:46:1D:34:31:2F:6D:D0:34:AD:D9:1C:40
Certificate issuer:       /CN=d18ca479c0e0e5c02374b1040c1143e21000ffd2
Certificate serial:       11902E
Authority key identifier: 84:89:21:42:45:2B:AE:18:06:FA:94:73:DF:69:CF:64:D9:CE:C3:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d18ca479c0e0e5c02374b1040c1143e21000ffd2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8b763bd2-def3-4d86-a8ee-0e53724ce3af/31434110840cc29cab050d80d07ab3d7ce0f7906.roa
Signing time:             Tue 05 Oct 2021 21:37:27 +0000
ROA not before:           Tue 05 Oct 2021 03:00:00 +0000
ROA not after:            Thu 05 Oct 2023 03:00:00 +0000
asID:                     265817
IP address blocks:        45.70.9.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1151022 (0x11902e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d18ca479c0e0e5c02374b1040c1143e21000ffd2
        Validity
            Not Before: Oct  5 03:00:00 2021 GMT
            Not After : Oct  5 03:00:00 2023 GMT
        Subject: CN=31434110840cc29cab050d80d07ab3d7ce0f7906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:18:be:7f:f1:9a:94:3c:75:78:73:07:9a:58:
                    51:af:6d:7c:01:e8:9f:3d:3f:1a:d0:18:0f:c1:dc:
                    46:c7:64:0e:da:dd:fe:64:28:73:01:23:12:f8:90:
                    aa:c0:09:57:97:f1:9c:ff:5b:b8:1d:55:c8:5a:c6:
                    9e:89:7c:6a:74:d4:be:50:79:da:3a:8b:ce:3f:d4:
                    5a:5f:9e:19:12:d9:6c:9d:d0:7b:d8:dd:48:fd:50:
                    b2:b3:1c:dc:a6:b3:dd:e3:2d:02:a6:59:e2:ca:e3:
                    53:ba:01:cf:6a:5e:a1:39:ce:de:82:68:d3:2c:6e:
                    01:4f:62:a7:51:c6:ae:bf:cf:82:c5:b6:39:60:cd:
                    e6:ec:3a:9d:f4:66:2a:f7:21:35:06:2b:c6:45:4d:
                    64:f6:b8:bf:dc:68:7e:96:b7:3e:4d:77:96:a6:b6:
                    b3:76:f6:35:90:ee:c0:b7:79:33:c1:ed:b8:5f:9b:
                    c0:0c:61:4c:8d:68:7f:c5:8c:3a:a9:c3:6d:81:d2:
                    6b:b6:07:8a:a1:fd:f6:dc:6c:9f:2a:53:a5:87:d5:
                    d7:a9:e2:7b:a5:c7:22:39:18:15:70:4b:67:e6:99:
                    fe:f7:61:35:a3:54:18:5d:c9:d8:f6:1f:e3:35:85:
                    08:1c:bb:9d:77:5c:4c:8c:92:ae:ee:33:3a:6f:73:
                    c8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:42:48:B9:FF:9A:C7:80:46:1D:34:31:2F:6D:D0:34:AD:D9:1C:40
            X509v3 Authority Key Identifier:
                keyid:84:89:21:42:45:2B:AE:18:06:FA:94:73:DF:69:CF:64:D9:CE:C3:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d18ca479c0e0e5c02374b1040c1143e21000ffd2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8b763bd2-def3-4d86-a8ee-0e53724ce3af/31434110840cc29cab050d80d07ab3d7ce0f7906.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8b763bd2-def3-4d86-a8ee-0e53724ce3af/d18ca479c0e0e5c02374b1040c1143e21000ffd2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:81:a6:e4:fc:a2:a2:d6:fc:ca:7b:b9:a6:3b:b7:a0:06:3b:
         8e:95:c1:42:5c:bb:17:73:a8:31:04:e5:d4:d8:c7:f2:7a:a0:
         f1:c9:6d:a8:6d:89:1c:40:d0:f4:96:be:7d:ab:6a:03:40:55:
         bd:91:b8:d7:18:50:17:44:e4:63:8a:9a:0b:f3:35:17:66:a3:
         f3:26:d9:e9:03:21:33:fc:59:61:25:2e:fa:44:69:37:89:68:
         e4:8d:93:3b:bd:fa:94:14:29:68:ed:59:49:40:2d:ed:06:ee:
         f3:aa:94:79:e4:ec:e4:cd:f9:b3:62:95:2a:5d:73:5c:d6:ba:
         f7:ac:b0:5e:34:e6:06:28:df:a5:58:ee:26:c3:51:11:22:3f:
         88:3a:7e:a3:55:d0:d2:77:69:d1:31:25:e0:eb:47:c7:97:56:
         ac:f7:37:8e:8b:06:27:8b:c8:54:9c:e4:d8:42:37:c6:57:10:
         78:a9:70:79:66:ea:b4:41:22:37:c6:2c:e4:0c:f5:85:d4:0f:
         24:a6:66:c1:e5:cd:78:47:0e:bd:ca:e7:e0:cd:5b:60:f6:09:
         e3:32:41:15:ff:13:6e:7f:4e:23:c6:91:ff:ae:f0:97:fa:8a:
         81:25:de:c8:31:8b:53:a3:d2:fa:cb:1e:bf:1e:73:d3:0a:2b:
         7e:28:c9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 12 15:29:37 2023 by rpki-client on console-fra.rpki-client.org