Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/8b9c6584d2441f32582e1f49632a5da1a2febc8d.roa
File:                     8b9c6584d2441f32582e1f49632a5da1a2febc8d.roa (raw, json)
Hash identifier:          6C/HCiY+oxZjeTflqjdLtjD7uSw3d4Ae+YihWP6wv4k=
Subject key identifier:   7F:6E:10:5E:24:27:E8:B7:C2:FA:88:F1:D6:5A:CB:F0:22:BA:8B:9A
Certificate issuer:       /CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
Certificate serial:       1E438F
Authority key identifier: 07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/8b9c6584d2441f32582e1f49632a5da1a2febc8d.roa
Signing time:             Thu 05 Jan 2023 22:52:26 +0000
ROA not before:           Sat 05 Nov 2022 23:25:28 +0000
ROA not after:            Thu 07 Nov 2024 23:25:28 +0000
asID:                     272075
IP address blocks:        45.71.254.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1983375 (0x1e438f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7
        Validity
            Not Before: Nov  5 23:25:28 2022 GMT
            Not After : Nov  7 23:25:28 2024 GMT
        Subject: CN=8b9c6584d2441f32582e1f49632a5da1a2febc8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9f:dd:8e:87:fb:60:10:2b:97:a0:16:b5:ed:
                    04:24:6b:fd:dd:cf:5c:b1:25:45:60:08:d3:31:5c:
                    68:8a:9f:9d:08:dd:bc:96:44:79:a1:29:a0:89:df:
                    54:49:a6:52:12:17:17:ad:d1:34:07:a7:25:f1:f4:
                    f7:c8:aa:2d:8d:ae:a9:13:ff:07:68:d9:1d:37:d0:
                    a5:0e:66:7e:88:9a:87:a3:b2:1d:f4:a7:37:cd:1a:
                    42:37:3f:e3:86:11:3f:b4:7e:c7:11:29:0d:31:4c:
                    0f:90:65:b5:bc:06:06:99:52:c6:2c:ee:84:7f:b8:
                    5e:44:f8:1c:b4:35:0d:a9:e7:63:fd:08:d8:43:b3:
                    76:1a:72:4f:a3:bf:c1:ae:95:aa:e7:30:2a:d6:39:
                    55:b1:78:35:45:c5:b9:2e:9e:b2:de:84:b9:4a:96:
                    ec:34:35:77:f1:9d:e1:7c:f2:5b:1e:dd:78:40:f9:
                    af:ed:25:c0:30:60:d4:94:90:a9:11:f1:1f:5c:86:
                    72:a0:57:9d:27:c3:b6:2a:46:a8:5b:81:eb:87:1e:
                    e5:27:8e:1f:66:23:f6:81:c5:e5:3d:43:52:89:0f:
                    59:84:e2:51:24:7a:ed:0a:73:e4:66:31:52:51:7f:
                    83:61:a3:bf:f0:52:1d:5c:ae:6d:bd:38:5a:a8:bd:
                    7f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:6E:10:5E:24:27:E8:B7:C2:FA:88:F1:D6:5A:CB:F0:22:BA:8B:9A
            X509v3 Authority Key Identifier:
                keyid:07:C2:BF:82:B8:B2:AC:98:C0:79:8B:B0:30:1F:56:49:15:D3:30:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/8b9c6584d2441f32582e1f49632a5da1a2febc8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95597c66-f0cb-4bec-9675-f3435dc55d57/78c33cb79f65c2e1ac85aa524fd84d74e8cca2a7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:f0:08:2c:60:ba:92:a8:a2:8a:a0:e8:ac:74:85:95:90:37:
         de:75:2d:b6:ea:f3:98:cb:2f:1d:b0:e7:0a:d3:9c:50:79:9e:
         5c:1a:c9:0e:f8:02:32:52:c0:fe:42:a6:1c:7f:d9:bd:c3:0b:
         b0:d1:78:fd:5f:9e:ad:b7:07:46:42:1a:31:6c:46:06:17:05:
         cb:35:bf:0a:af:e5:39:62:57:ef:53:a0:9e:47:8e:3e:24:22:
         1f:88:a7:2b:18:0e:00:3c:14:e0:2d:76:7a:53:09:2a:e5:5d:
         9c:c9:e0:cb:51:25:7e:ea:ef:78:13:1c:61:c7:00:68:04:85:
         fa:c8:d1:2b:df:67:d0:46:97:63:9f:d2:eb:20:a0:ca:2b:38:
         c8:48:c6:b7:1c:78:1b:45:ad:ee:33:f2:06:48:2d:bb:15:e7:
         75:ec:c6:80:5d:2a:ec:35:ed:99:e5:62:21:11:34:1a:c4:18:
         ef:95:27:b3:f2:61:88:af:b1:2a:98:bd:1b:54:aa:6c:1b:3b:
         6c:0a:51:59:cf:f8:6c:bb:6a:db:23:e0:ac:fb:6c:c6:97:e6:
         18:25:da:a9:58:3b:bc:86:51:a0:dd:5c:24:09:16:eb:29:a9:
         9f:31:5d:5d:35:83:bc:49:ce:37:ff:6b:37:78:70:62:38:a2:
         bc:42:48:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:31 2023 by rpki-client on console-fra.rpki-client.org