Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8b763bd2-def3-4d86-a8ee-0e53724ce3af/39993670de713f5c01b8a1ea404efbb88f0c5240.roa
File:                     39993670de713f5c01b8a1ea404efbb88f0c5240.roa (raw, json)
Hash identifier:          upbp6FQ9+RtdBmQsQNK5kHA4RU3HuI1LzmdFMTKY+ss=
Subject key identifier:   A4:87:F9:F7:01:0C:8A:AF:F5:D1:0D:A6:04:35:05:31:55:C9:E8:6F
Certificate issuer:       /CN=d18ca479c0e0e5c02374b1040c1143e21000ffd2
Certificate serial:       1198BF
Authority key identifier: 84:89:21:42:45:2B:AE:18:06:FA:94:73:DF:69:CF:64:D9:CE:C3:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d18ca479c0e0e5c02374b1040c1143e21000ffd2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8b763bd2-def3-4d86-a8ee-0e53724ce3af/39993670de713f5c01b8a1ea404efbb88f0c5240.roa
Signing time:             Tue 05 Oct 2021 23:10:51 +0000
ROA not before:           Tue 05 Oct 2021 03:00:00 +0000
ROA not after:            Thu 05 Oct 2023 03:00:00 +0000
asID:                     265817
IP address blocks:        45.70.11.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1153215 (0x1198bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d18ca479c0e0e5c02374b1040c1143e21000ffd2
        Validity
            Not Before: Oct  5 03:00:00 2021 GMT
            Not After : Oct  5 03:00:00 2023 GMT
        Subject: CN=39993670de713f5c01b8a1ea404efbb88f0c5240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:de:53:72:0b:35:dd:1d:a8:98:39:fb:9a:47:
                    d7:5a:1f:49:b3:8f:0d:4e:ea:27:75:48:ea:48:c8:
                    be:d3:5b:09:2a:4d:0b:70:36:fd:ff:b0:49:da:b9:
                    bf:23:bd:dc:52:f2:c6:3b:44:f6:be:61:6a:2d:ee:
                    b6:7d:05:49:93:f7:16:76:3e:9d:a1:09:c7:1b:fc:
                    f7:0b:3f:38:aa:e4:9d:ae:86:f7:94:3c:7b:17:3f:
                    c2:e3:09:40:d4:7a:34:8b:72:77:c7:3d:dd:db:0f:
                    d6:fc:ac:f3:96:18:ff:34:99:b3:9c:ea:1d:f8:9f:
                    a2:d4:94:54:72:53:3a:7b:93:83:87:e0:cb:96:ca:
                    f5:d5:cb:42:62:70:b8:be:fe:28:20:be:bf:0b:5b:
                    fd:8f:36:e1:49:58:fa:c4:cf:7c:6a:48:5d:4c:63:
                    e6:e2:01:1f:c5:87:68:6c:48:3e:ad:3a:69:c3:3a:
                    b7:20:c0:15:a0:66:89:db:7d:c6:25:48:78:51:5e:
                    24:53:98:2a:cd:a2:9f:99:c6:3b:57:50:88:ed:a1:
                    10:a5:62:c3:87:5c:6a:6f:60:da:13:cc:a0:9a:de:
                    5b:41:bd:13:e5:62:03:2e:38:73:3c:f1:c0:52:1e:
                    b2:53:3f:b4:d0:fd:8c:da:1d:66:55:7a:2c:0f:01:
                    84:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:87:F9:F7:01:0C:8A:AF:F5:D1:0D:A6:04:35:05:31:55:C9:E8:6F
            X509v3 Authority Key Identifier:
                keyid:84:89:21:42:45:2B:AE:18:06:FA:94:73:DF:69:CF:64:D9:CE:C3:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d18ca479c0e0e5c02374b1040c1143e21000ffd2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8b763bd2-def3-4d86-a8ee-0e53724ce3af/39993670de713f5c01b8a1ea404efbb88f0c5240.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8b763bd2-def3-4d86-a8ee-0e53724ce3af/d18ca479c0e0e5c02374b1040c1143e21000ffd2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:24:2d:28:05:89:d4:ee:31:b0:a9:29:50:fc:f2:4a:71:cc:
         3e:0e:bd:ba:66:6b:90:95:74:a5:cc:b9:c7:7f:6a:4c:93:fd:
         32:2c:bf:25:b4:47:aa:df:d9:07:52:cc:a4:29:11:1b:78:64:
         59:51:c2:34:db:28:69:bf:02:57:16:7d:7c:60:c2:98:f4:9e:
         34:79:18:1e:6d:ca:7e:95:86:73:be:9c:cb:5b:d4:c1:28:6a:
         1d:98:5b:6d:2d:da:bc:a0:28:df:b0:29:74:a2:7a:33:2d:a7:
         28:a5:4b:a7:83:a1:91:ae:83:67:cc:17:70:91:32:ee:74:71:
         a2:70:21:91:db:c5:70:2b:ee:37:05:d7:3a:cc:af:f6:41:09:
         ad:31:51:18:0e:8d:3e:67:76:61:7c:9b:db:b7:39:3a:74:5b:
         0f:32:6d:d4:23:94:67:a0:fe:ce:f7:00:8c:79:7d:71:c6:81:
         7b:6f:5a:c3:78:e9:26:06:91:23:fd:06:94:c6:15:31:fa:bc:
         3b:9d:05:2c:f4:16:84:9a:9a:5a:d8:f6:95:87:f8:80:ff:c8:
         22:bb:36:a2:f6:56:cd:c2:e9:27:30:b1:c5:f3:1e:ff:67:30:
         0b:85:7d:95:54:6a:c5:8c:34:33:d0:e4:cd:c8:c9:aa:8c:44:
         f8:12:a6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 12 15:29:37 2023 by rpki-client on console-fra.rpki-client.org