Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8d2c5922-a702-4472-b427-25731d531f00/e7ba742f82544735f73cc1ac635bbd2c0a5cc209.roa
File:                     e7ba742f82544735f73cc1ac635bbd2c0a5cc209.roa (raw, json)
Hash identifier:          S9UCL6x/AxGCMYbRWYnEy8BatP7fJbf9ok8U93c6Fxc=
Subject key identifier:   FD:63:24:68:50:87:10:18:22:91:7B:C7:BF:F2:9E:17:D2:9F:17:D1
Certificate issuer:       /CN=72abba6b7cd25cc52bbab3345005452793c3070a
Certificate serial:       0481E0
Authority key identifier: DF:A6:D1:42:79:C2:7D:AB:84:68:F0:56:15:83:0F:3A:0C:FB:A5:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/72abba6b7cd25cc52bbab3345005452793c3070a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8d2c5922-a702-4472-b427-25731d531f00/e7ba742f82544735f73cc1ac635bbd2c0a5cc209.roa
Signing time:             Mon 24 Jan 2022 20:37:53 +0000
ROA not before:           Mon 24 Jan 2022 03:00:00 +0000
ROA not after:            Wed 24 Jan 2024 03:00:00 +0000
asID:                     271938
IP address blocks:        45.5.216.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 23 Jan 2024 07:30:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 295392 (0x481e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72abba6b7cd25cc52bbab3345005452793c3070a
        Validity
            Not Before: Jan 24 03:00:00 2022 GMT
            Not After : Jan 24 03:00:00 2024 GMT
        Subject: CN=e7ba742f82544735f73cc1ac635bbd2c0a5cc209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:45:1a:c0:e3:b3:4a:a3:3e:c2:46:38:cd:8f:
                    b7:66:59:be:3d:ae:19:01:16:4d:b8:cb:1a:78:53:
                    03:63:f8:41:3e:0b:1a:b4:90:1a:a9:97:2c:e9:e6:
                    43:88:fb:14:15:33:ae:5d:a2:e3:0f:6e:74:58:44:
                    65:9e:56:9b:4d:9d:06:a1:82:d3:d2:16:06:d6:af:
                    fa:02:db:0d:4f:45:89:bf:8b:40:66:1f:d6:a6:4c:
                    0c:ef:d2:16:b9:80:9c:f4:13:6c:4d:1a:31:da:9b:
                    7f:7c:d3:c9:29:0f:7c:21:b5:f7:b0:62:98:2e:59:
                    9e:be:6b:3d:a0:13:40:9b:9a:2c:de:48:85:f5:ec:
                    49:72:93:97:f3:9c:9b:26:36:f7:cf:ca:85:10:0e:
                    02:a9:e0:b3:10:8e:ea:91:4e:46:6f:68:ec:d1:87:
                    45:36:ac:40:0a:32:d2:03:fe:03:9d:ee:e3:0b:38:
                    de:3e:f7:64:ae:12:3a:83:20:ed:68:3a:5b:47:7c:
                    86:30:85:ab:79:85:b3:94:b8:20:e7:d5:ae:e2:91:
                    00:7f:3c:38:30:c1:f0:e1:02:e6:01:7c:03:87:d2:
                    49:fc:2c:35:92:98:e0:48:a4:34:53:c1:e5:97:23:
                    4d:a7:3c:9c:0a:1e:8a:b1:fb:cf:3f:e6:bc:4f:e2:
                    fc:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:63:24:68:50:87:10:18:22:91:7B:C7:BF:F2:9E:17:D2:9F:17:D1
            X509v3 Authority Key Identifier:
                keyid:DF:A6:D1:42:79:C2:7D:AB:84:68:F0:56:15:83:0F:3A:0C:FB:A5:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/72abba6b7cd25cc52bbab3345005452793c3070a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8d2c5922-a702-4472-b427-25731d531f00/e7ba742f82544735f73cc1ac635bbd2c0a5cc209.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8d2c5922-a702-4472-b427-25731d531f00/72abba6b7cd25cc52bbab3345005452793c3070a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cf:8c:40:68:59:66:43:a8:48:0b:11:ab:4d:1f:5d:75:60:9c:
         60:83:d9:c5:5e:6d:00:1e:74:82:02:85:ac:ec:8b:3a:9e:97:
         49:c4:61:16:63:f6:50:f8:35:2b:d0:ff:fb:1c:ba:a7:e2:04:
         26:d3:d9:53:59:b7:a7:3f:fd:78:11:3d:d3:88:6c:2b:c7:b7:
         12:ea:a4:50:f0:34:73:50:64:df:29:0e:89:f0:52:ab:68:f2:
         4e:f6:98:60:85:f7:0c:19:64:fa:dc:45:89:d1:2e:c6:b7:14:
         0b:cc:22:31:f3:e6:da:1c:26:84:f2:e3:e8:a4:e6:91:75:70:
         e6:91:41:ab:60:67:9c:d3:e8:2d:47:b2:a7:26:d4:1a:2f:c1:
         a4:0e:10:83:c3:1d:81:5a:68:ab:6b:07:ed:47:d8:d5:d3:af:
         25:b6:92:24:65:0f:1c:f1:3e:e6:ad:a2:f4:91:ab:51:76:ce:
         d0:16:35:f3:19:61:f8:a1:9d:7a:25:ec:ae:41:3f:0e:76:38:
         7e:69:af:ab:81:1f:67:28:69:ff:f3:31:81:35:7c:b0:43:47:
         91:93:bc:29:b7:b6:c4:00:b3:c9:fc:ba:99:65:96:cc:c0:83:
         26:8f:43:a0:83:57:9b:e9:75:a6:53:2f:62:1f:6e:f7:96:e4:
         f1:a1:f2:39
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBIHgMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcy
YWJiYTZiN2NkMjVjYzUyYmJhYjMzNDUwMDU0NTI3OTNjMzA3MGEwHhcNMjIwMTI0
MDMwMDAwWhcNMjQwMTI0MDMwMDAwWjAzMTEwLwYDVQQDEyhlN2JhNzQyZjgyNTQ0
NzM1ZjczY2MxYWM2MzViYmQyYzBhNWNjMjA5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxEUawOOzSqM+wkY4zY+3Zlm+Pa4ZARZNuMsaeFMDY/hBPgsa
tJAaqZcs6eZDiPsUFTOuXaLjD250WERlnlabTZ0GoYLT0hYG1q/6AtsNT0WJv4tA
Zh/WpkwM79IWuYCc9BNsTRox2pt/fNPJKQ98IbX3sGKYLlmevms9oBNAm5os3kiF
9exJcpOX85ybJjb3z8qFEA4CqeCzEI7qkU5Gb2js0YdFNqxACjLSA/4Dne7jCzje
PvdkrhI6gyDtaDpbR3yGMIWreYWzlLgg59Wu4pEAfzw4MMHw4QLmAXwDh9JJ/Cw1
kpjgSKQ0U8HllyNNpzycCh6KsfvPP+a8T+L8yQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFP1jJGhQhxAYIpF7x7/ynhfSnxfRMB8GA1UdIwQYMBaAFN+m0UJ5wn2rhGjw
VhWDDzoM+6WjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzJhYmJh
NmI3Y2QyNWNjNTJiYmFiMzM0NTAwNTQ1Mjc5M2MzMDcwYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOGQyYzU5MjItYTcwMi00NDcyLWI0MjctMjU3MzFk
NTMxZjAwL2U3YmE3NDJmODI1NDQ3MzVmNzNjYzFhYzYzNWJiZDJjMGE1Y2MyMDku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84ZDJjNTkyMi1hNzAyLTQ0NzItYjQyNy0yNTcz
MWQ1MzFmMDAvNzJhYmJhNmI3Y2QyNWNjNTJiYmFiMzM0NTAwNTQ1Mjc5M2MzMDcw
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi0F2DANBgkqhkiG9w0BAQsFAAOCAQEAz4xAaFlmQ6hICxGr
TR9ddWCcYIPZxV5tAB50ggKFrOyLOp6XScRhFmP2UPg1K9D/+xy6p+IEJtPZU1m3
pz/9eBE904hsK8e3EuqkUPA0c1Bk3ykOifBSq2jyTvaYYIX3DBlk+txFidEuxrcU
C8wiMfPm2hwmhPLj6KTmkXVw5pFBq2BnnNPoLUeypybUGi/BpA4Qg8MdgVpoq2sH
7UfY1dOvJbaSJGUPHPE+5q2i9JGrUXbO0BY18xlh+KGdeiXsrkE/DnY4fmmvq4Ef
Zyhp//MxgTV8sENHkZO8Kbe2xACzyfy6mWWWzMCDJo9DoINXm+l1plMvYh9u95bk
8aHyOQ==
-----END CERTIFICATE-----
Generated at Tue Jan 23 12:11:39 2024 by rpki-client on console-ams.rpki-client.org