Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/92164dfe-0588-4e9d-957c-f518707a5e35/62b7cf9cc022a484ce5d0d81e9509e15b6475fa7.roa
File:                     62b7cf9cc022a484ce5d0d81e9509e15b6475fa7.roa (raw, json)
Hash identifier:          /Aq5rqSZYaIuZnfBAsbb7cwBBH0OcBXG7N+QyuJx90w=
Subject key identifier:   73:33:B6:F8:CD:55:1F:53:F5:75:06:20:DC:D3:47:B3:95:AE:4F:AF
Certificate issuer:       /CN=f4d58c84621ad64623cd4679aa4e983e69c0c959
Certificate serial:       01109E
Authority key identifier: 45:42:12:0F:D0:AB:E1:79:D6:C9:E8:E4:F9:35:D5:37:89:97:CF:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4d58c84621ad64623cd4679aa4e983e69c0c959.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/92164dfe-0588-4e9d-957c-f518707a5e35/62b7cf9cc022a484ce5d0d81e9509e15b6475fa7.roa
Signing time:             Wed 08 Jun 2022 14:14:00 +0000
ROA not before:           Thu 28 Apr 2022 03:00:00 +0000
ROA not after:            Sun 28 Apr 2024 03:00:00 +0000
asID:                     14080
IP address blocks:        168.228.108.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69790 (0x1109e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4d58c84621ad64623cd4679aa4e983e69c0c959
        Validity
            Not Before: Apr 28 03:00:00 2022 GMT
            Not After : Apr 28 03:00:00 2024 GMT
        Subject: CN=62b7cf9cc022a484ce5d0d81e9509e15b6475fa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4f:8d:3f:22:47:cd:ce:48:a7:61:4b:95:e4:
                    7c:d9:fa:9c:14:6e:89:20:78:af:dd:68:78:2a:97:
                    78:a4:99:2e:b8:49:b0:a9:00:53:13:c1:fc:bc:18:
                    12:2e:bd:68:58:e9:2f:27:76:c0:0c:ae:a7:67:3a:
                    75:e6:2f:66:6c:73:05:ad:22:e2:51:ad:a8:34:dd:
                    52:d6:e9:83:51:2d:35:1b:8a:95:58:55:1b:b8:bd:
                    4b:3c:79:15:a4:46:78:03:e3:82:88:06:3f:4f:3b:
                    11:b3:a0:85:23:c8:22:bc:b1:b6:15:a5:26:9b:84:
                    fc:72:2b:01:63:af:70:50:17:28:e0:40:ec:3d:45:
                    b3:51:69:67:31:40:d8:3f:5d:e2:72:3a:cd:3a:9c:
                    f4:d0:a6:c8:b6:bd:b3:c2:89:08:5d:82:ca:ac:c7:
                    f3:f6:cb:44:eb:7c:f1:24:4c:ee:36:a8:1c:2e:f5:
                    6c:a2:4a:e3:3c:9e:f6:fe:e4:c5:5a:5f:4b:28:d6:
                    70:f2:b5:e4:86:1b:0c:05:d6:f2:8c:c0:d3:a2:6d:
                    b6:66:4d:66:ea:3c:82:a8:d0:bb:7d:8a:df:01:bf:
                    e0:30:78:df:f4:ff:8a:76:30:1e:a1:ba:9f:ac:53:
                    ca:c6:c8:a9:69:a7:18:92:e5:48:09:56:40:ff:69:
                    07:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:33:B6:F8:CD:55:1F:53:F5:75:06:20:DC:D3:47:B3:95:AE:4F:AF
            X509v3 Authority Key Identifier:
                keyid:45:42:12:0F:D0:AB:E1:79:D6:C9:E8:E4:F9:35:D5:37:89:97:CF:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4d58c84621ad64623cd4679aa4e983e69c0c959.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/92164dfe-0588-4e9d-957c-f518707a5e35/62b7cf9cc022a484ce5d0d81e9509e15b6475fa7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/92164dfe-0588-4e9d-957c-f518707a5e35/f4d58c84621ad64623cd4679aa4e983e69c0c959.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:68:5c:02:5b:32:65:88:4b:2e:75:c9:fa:37:6f:c8:c5:7b:
         e3:d5:35:ef:c9:c2:be:2f:25:30:fc:e4:ad:e1:53:05:e8:65:
         b5:76:5f:e3:b8:8b:4d:d1:79:f2:85:7f:e2:b3:33:90:b2:da:
         a3:8b:5b:98:9a:37:6c:0c:85:9a:3b:70:6c:a9:ae:73:55:12:
         06:f2:12:7f:e0:25:61:03:68:db:91:8e:81:6e:70:0c:e0:f5:
         b1:60:e6:8d:df:1a:27:d3:1e:de:62:cb:53:57:66:fd:2a:a7:
         f7:fd:0d:f9:e5:67:94:3f:dd:94:a0:c1:c0:07:b1:0d:80:07:
         d7:33:99:d8:7a:6b:50:22:68:6f:d0:31:c3:f9:1f:70:e6:17:
         7b:c9:72:c9:a8:42:60:b1:fa:68:04:91:64:eb:fd:9b:1f:3b:
         e1:08:d4:25:54:90:f7:13:0a:f2:8e:79:dd:7d:9a:ed:94:f8:
         29:2c:5f:d1:80:61:15:dd:2a:93:3e:7d:49:f0:c0:b4:28:36:
         0d:46:73:b8:b2:89:a7:a9:10:d3:9a:b5:8b:16:d0:4f:60:ce:
         e9:e1:25:b4:b1:e0:fb:0f:b0:cc:07:4f:e6:e8:e9:a1:25:a6:
         25:1d:77:42:21:93:28:65:48:b6:58:22:9f:43:c6:fd:b9:92:
         0a:8b:99:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 15 04:28:39 2023 by rpki-client on console-fra.rpki-client.org