Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/92164dfe-0588-4e9d-957c-f518707a5e35/4ea7955661dfb1fccc9b2b46b7c1aab03aed7011.roa
File:                     4ea7955661dfb1fccc9b2b46b7c1aab03aed7011.roa (raw, json)
Hash identifier:          A0tx3e+sTls+gIIYwjl348D0a8XNqtU1hed8ss7Rkt0=
Subject key identifier:   7D:AC:34:12:DC:E4:A8:2A:35:37:AA:98:1F:9C:32:35:AD:6E:77:B1
Certificate issuer:       /CN=f4d58c84621ad64623cd4679aa4e983e69c0c959
Certificate serial:       01138C
Authority key identifier: 45:42:12:0F:D0:AB:E1:79:D6:C9:E8:E4:F9:35:D5:37:89:97:CF:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4d58c84621ad64623cd4679aa4e983e69c0c959.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/92164dfe-0588-4e9d-957c-f518707a5e35/4ea7955661dfb1fccc9b2b46b7c1aab03aed7011.roa
Signing time:             Wed 08 Jun 2022 14:14:22 +0000
ROA not before:           Thu 28 Apr 2022 03:00:00 +0000
ROA not after:            Sun 28 Apr 2024 03:00:00 +0000
asID:                     14080
IP address blocks:        168.228.108.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70540 (0x1138c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4d58c84621ad64623cd4679aa4e983e69c0c959
        Validity
            Not Before: Apr 28 03:00:00 2022 GMT
            Not After : Apr 28 03:00:00 2024 GMT
        Subject: CN=4ea7955661dfb1fccc9b2b46b7c1aab03aed7011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8f:cb:c2:95:b7:51:f6:fd:9d:dd:88:a4:99:
                    21:ca:7e:18:dd:d8:f6:eb:cc:ef:e6:63:81:da:4c:
                    dd:7d:6e:b9:77:95:81:14:83:d8:29:d0:b2:1c:64:
                    55:be:f3:c6:4b:d4:ed:2b:c3:c1:98:92:74:87:70:
                    f4:00:1c:cc:5a:3e:3f:f6:cd:8b:49:4a:48:2e:1f:
                    23:51:29:4b:af:0b:bc:93:e4:15:c0:9b:c2:f6:4c:
                    0b:2f:00:83:96:5b:f7:09:81:72:3f:c7:80:5d:7e:
                    bd:6a:1a:39:01:ff:db:ca:73:28:29:4f:19:c6:a5:
                    77:01:49:c8:05:18:1a:fc:ab:17:c1:11:61:de:02:
                    da:dc:03:d1:36:b3:7e:5a:d2:9c:ed:48:83:bc:54:
                    6f:5a:53:38:1e:19:e9:39:f0:91:cd:d5:c5:67:17:
                    57:cf:92:71:2c:6b:e3:a8:33:bf:cd:5e:59:33:c1:
                    62:8b:71:18:a9:14:9e:3b:17:3d:d8:a0:d1:c9:0c:
                    24:8e:5b:24:64:43:68:a2:09:e3:71:a2:98:03:61:
                    8f:bb:df:a5:72:b8:76:3b:81:89:9b:e3:b6:ee:33:
                    34:2f:09:91:66:29:a3:fc:78:92:9a:1e:bf:c6:cd:
                    1b:3d:81:20:11:1d:98:f6:af:33:bb:15:a7:43:d6:
                    b8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:AC:34:12:DC:E4:A8:2A:35:37:AA:98:1F:9C:32:35:AD:6E:77:B1
            X509v3 Authority Key Identifier:
                keyid:45:42:12:0F:D0:AB:E1:79:D6:C9:E8:E4:F9:35:D5:37:89:97:CF:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4d58c84621ad64623cd4679aa4e983e69c0c959.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/92164dfe-0588-4e9d-957c-f518707a5e35/4ea7955661dfb1fccc9b2b46b7c1aab03aed7011.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/92164dfe-0588-4e9d-957c-f518707a5e35/f4d58c84621ad64623cd4679aa4e983e69c0c959.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c7:e6:5d:a5:bb:0c:d1:dc:2e:f6:84:60:2b:f5:2f:48:7d:e2:
         f8:9c:22:bb:77:83:e1:db:dc:06:09:a5:c4:a8:09:7c:9e:d9:
         53:d0:bd:75:4e:6d:c0:41:37:63:08:d7:fe:bd:e8:53:ae:95:
         b1:35:dd:ba:a0:62:f5:e2:b2:3b:f7:8c:76:2b:4b:bb:8c:a6:
         8c:a6:68:e5:15:5d:cd:64:ad:2c:41:cd:45:ac:5d:02:91:30:
         6f:0b:88:71:55:e0:2d:b2:3b:fd:e5:2d:42:d1:86:41:47:84:
         5e:c5:d0:f8:5b:63:d5:5b:74:6a:13:9f:20:d5:b1:0d:89:80:
         63:96:e1:ca:b2:18:4c:fa:81:76:98:e4:a0:65:66:ea:b4:40:
         d6:ad:85:b8:8a:26:cf:1d:84:ae:43:b2:85:26:e2:65:d0:90:
         05:eb:bb:c4:a0:8a:04:b1:c7:1b:3a:1b:ae:72:2b:06:e5:06:
         92:c5:fa:73:f1:66:11:d8:98:9b:df:d4:42:66:1a:9d:8d:33:
         cc:34:a4:4c:7c:51:4e:47:75:dd:bc:9f:39:5c:d0:56:75:a0:
         89:35:30:b6:ee:33:e5:79:bf:c4:6d:40:f0:16:fd:16:c0:ad:
         0c:6d:a9:77:7e:55:2f:cd:fd:28:5f:0f:46:eb:f4:10:41:98:
         71:9e:68:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 15 04:28:39 2023 by rpki-client on console-fra.rpki-client.org