Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/96bd6def-85a5-41d8-8d27-5ec3984dc72e/e29bf3f5d8e0705a42e3c838760486b61d3b2326.roa
File:                     e29bf3f5d8e0705a42e3c838760486b61d3b2326.roa (raw, json)
Hash identifier:          Q0YuPn3NqmzoQYQPBH3ZV0ILTDH8Sk9csIAj+cGGwHg=
Subject key identifier:   91:27:B3:CA:FE:6C:8A:7A:02:69:44:13:85:A7:81:E9:51:74:B8:FD
Certificate issuer:       /CN=2014fe312f512b7a037dbccfd3a2ed388671449a
Certificate serial:       220A78
Authority key identifier: 7D:34:3C:49:9B:65:2F:11:F3:02:18:BF:DD:B0:28:38:87:5F:A4:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2014fe312f512b7a037dbccfd3a2ed388671449a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/96bd6def-85a5-41d8-8d27-5ec3984dc72e/e29bf3f5d8e0705a42e3c838760486b61d3b2326.roa
Signing time:             Wed 05 Jul 2023 01:47:31 +0000
ROA not before:           Tue 04 Jul 2023 01:47:31 +0000
ROA not after:            Sat 05 Jul 2025 01:47:31 +0000
asID:                     52468
IP address blocks:        45.70.236.0/23 maxlen: 23
                          45.70.238.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2230904 (0x220a78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2014fe312f512b7a037dbccfd3a2ed388671449a
        Validity
            Not Before: Jul  4 01:47:31 2023 GMT
            Not After : Jul  5 01:47:31 2025 GMT
        Subject: CN=e29bf3f5d8e0705a42e3c838760486b61d3b2326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cd:d0:d4:32:8d:47:2b:2f:c8:6e:da:60:83:
                    b3:e2:cf:ab:0f:eb:0c:8c:b3:dd:78:91:69:3e:e8:
                    73:82:e1:d2:d6:62:79:c5:6a:7f:09:af:ab:88:98:
                    fa:43:24:a7:60:1a:46:77:64:d7:c2:67:03:7f:80:
                    4e:a9:0a:b6:b5:2d:14:0e:8b:68:35:3d:31:19:ab:
                    aa:cd:9b:97:8c:3d:f9:de:5f:96:32:92:e3:c6:3b:
                    18:0a:4b:f2:3a:e7:a7:bd:c3:52:a2:72:06:ea:cf:
                    1f:65:ec:eb:00:30:25:0e:cd:38:5c:bc:d5:25:a0:
                    b6:3e:7c:87:e1:ad:f6:47:38:fc:7e:de:02:c0:e9:
                    c0:55:5a:07:24:61:e1:43:d7:22:c1:d4:2d:95:f9:
                    81:ec:0a:ea:a6:ee:6e:64:63:0c:86:50:79:c5:30:
                    09:64:bb:9c:f4:1b:a3:52:dc:7b:9a:31:14:2b:87:
                    8c:67:ab:88:79:c3:e2:8f:68:7a:63:ad:a8:2f:25:
                    fb:ad:13:37:26:23:06:d6:7f:fe:61:c3:b7:6c:6b:
                    1a:5e:52:75:db:56:2e:0e:06:ae:87:66:95:b4:bf:
                    8a:9d:ba:c5:e9:e4:00:f0:bf:57:25:ee:94:cb:25:
                    a1:60:62:c9:08:3e:8c:4b:fd:51:e1:a6:32:d2:d8:
                    47:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:27:B3:CA:FE:6C:8A:7A:02:69:44:13:85:A7:81:E9:51:74:B8:FD
            X509v3 Authority Key Identifier:
                keyid:7D:34:3C:49:9B:65:2F:11:F3:02:18:BF:DD:B0:28:38:87:5F:A4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2014fe312f512b7a037dbccfd3a2ed388671449a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/96bd6def-85a5-41d8-8d27-5ec3984dc72e/e29bf3f5d8e0705a42e3c838760486b61d3b2326.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/96bd6def-85a5-41d8-8d27-5ec3984dc72e/2014fe312f512b7a037dbccfd3a2ed388671449a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:22:04:b8:ca:d3:68:09:d5:8b:2f:f5:7d:bb:f8:35:92:af:
         4b:bb:16:01:7e:be:ce:cc:c7:3b:ef:7a:13:7c:ae:d3:dd:40:
         47:93:cd:c7:1a:47:45:4a:49:32:36:94:aa:d8:48:63:b7:4a:
         c4:c3:5a:46:f1:93:65:6e:71:1c:4a:ae:e2:fb:b9:dd:33:de:
         aa:a3:41:1a:98:02:f7:ca:20:e2:f5:d0:74:ac:eb:c2:54:e7:
         12:c6:f6:f5:32:05:58:d2:d6:0e:ae:6e:1d:30:7d:08:44:16:
         96:58:b1:c8:07:81:05:28:e2:14:af:18:b0:57:39:70:83:4e:
         d9:ca:6d:67:47:7f:4a:a6:0b:f9:4e:ca:67:5e:a1:b8:32:30:
         55:ea:5d:ab:6d:6b:b7:6e:88:c7:73:c8:5f:bb:e2:9d:1d:d5:
         16:c0:db:77:a8:e5:e8:08:71:23:56:0e:83:7e:36:bf:63:9a:
         0e:76:a8:4c:0d:39:a1:ac:e3:82:d8:0f:87:8b:5b:00:6e:a7:
         41:6b:95:91:77:3a:19:8e:42:ee:1b:34:f6:1b:c9:c1:fc:7b:
         07:a2:36:c6:08:06:df:f4:73:4b:b3:05:9b:69:54:f5:50:15:
         e9:98:70:7c:db:ae:22:7f:a4:42:50:e4:aa:e6:38:e0:65:2e:
         95:5f:63:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 17 20:26:36 2023 by rpki-client on console-ams.rpki-client.org