Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/98f790dd-aea8-4bcd-989d-902f50a2158a/96249702c5b9c8453f06a9a488824dad2d5e41cc.roa
File:                     96249702c5b9c8453f06a9a488824dad2d5e41cc.roa (raw, json)
Hash identifier:          Yb8cnzcAi0fO+73XE7srSvDHrB3OqbIs3mnZYJtKtyI=
Subject key identifier:   96:0C:D8:C2:FC:CC:C4:03:21:3D:43:D3:20:33:9C:F9:F8:C7:79:87
Certificate issuer:       /CN=5a94482ea23f8a34d4c28f0cdd4038c641e63bbc
Certificate serial:       0C79D1
Authority key identifier: EB:AC:B3:6C:5A:F5:85:44:32:08:96:80:B3:20:B0:19:BB:28:5E:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a94482ea23f8a34d4c28f0cdd4038c641e63bbc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/98f790dd-aea8-4bcd-989d-902f50a2158a/96249702c5b9c8453f06a9a488824dad2d5e41cc.roa
Signing time:             Wed 14 Apr 2021 04:42:46 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Fri 22 Apr 2022 03:00:00 +0000
asID:                     265621
IP address blocks:        45.176.190.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 817617 (0xc79d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a94482ea23f8a34d4c28f0cdd4038c641e63bbc
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Apr 22 03:00:00 2022 GMT
        Subject: CN=96249702c5b9c8453f06a9a488824dad2d5e41cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:04:c0:3d:b6:df:63:94:eb:f1:67:e4:d6:54:
                    1b:2a:73:7e:d2:95:63:37:15:30:2a:40:a8:ef:6c:
                    6c:82:0e:ad:c1:d1:0a:5a:50:53:f2:c7:25:23:23:
                    78:75:f0:30:77:0e:fc:ce:d8:f7:9b:b4:41:15:a3:
                    53:0b:91:6f:bb:c9:a9:f3:20:0a:82:b6:ca:e2:e8:
                    15:54:e5:28:ed:c3:2e:4b:5d:32:4c:88:37:c5:d7:
                    c5:c0:86:fb:12:58:76:8e:c2:b7:9f:de:18:68:35:
                    59:2f:f9:82:54:5d:5f:f9:ae:2a:12:15:3f:09:d0:
                    68:69:c3:55:86:e5:f9:a3:08:83:4e:c8:36:3f:41:
                    56:44:0c:f2:98:84:d0:31:4e:ad:6b:93:97:86:bb:
                    fd:4a:88:cc:74:f7:12:94:83:39:5b:10:c5:1a:07:
                    86:f6:09:3d:3e:aa:bd:01:54:8a:73:36:f3:52:a1:
                    69:36:ef:d7:f1:af:3e:b3:03:37:7c:03:38:10:8b:
                    f2:e4:8c:db:4a:87:4f:07:de:c2:de:5d:9a:12:b8:
                    57:e7:77:40:21:8a:cf:9a:b3:0d:84:68:79:f0:43:
                    d1:b0:b0:79:b0:44:cc:0a:47:e1:fc:6d:29:08:1c:
                    29:83:ee:bb:82:a4:e1:58:f4:b5:31:ba:3f:85:01:
                    9a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:0C:D8:C2:FC:CC:C4:03:21:3D:43:D3:20:33:9C:F9:F8:C7:79:87
            X509v3 Authority Key Identifier:
                keyid:EB:AC:B3:6C:5A:F5:85:44:32:08:96:80:B3:20:B0:19:BB:28:5E:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a94482ea23f8a34d4c28f0cdd4038c641e63bbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/98f790dd-aea8-4bcd-989d-902f50a2158a/96249702c5b9c8453f06a9a488824dad2d5e41cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/98f790dd-aea8-4bcd-989d-902f50a2158a/5a94482ea23f8a34d4c28f0cdd4038c641e63bbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:01:dc:ef:3c:02:81:c5:ef:d4:52:81:45:a7:e2:8c:2a:9d:
         d1:3f:e0:a2:d4:76:71:63:8d:c7:ce:dd:8c:31:f9:56:5e:6c:
         8a:5e:7a:52:fa:45:78:3d:06:81:21:8c:c4:5d:73:73:7e:12:
         fc:46:96:c5:59:47:98:f5:25:da:b8:a9:41:9b:5c:16:34:63:
         4d:84:74:51:33:62:73:77:d3:e3:63:70:d1:a8:8f:e4:46:37:
         4f:12:c3:36:49:d6:74:b1:06:11:05:ee:d6:b9:89:82:a6:cd:
         25:1e:51:6a:0b:0f:de:9e:d2:35:df:f9:a5:16:12:6b:bf:59:
         03:e7:92:5e:32:3e:0d:33:eb:33:55:2c:14:fa:21:9f:b7:3e:
         e1:96:a5:c8:84:ca:0b:e3:f9:83:7d:96:12:c7:1c:c9:a9:38:
         ba:7d:84:83:f9:19:96:94:c9:90:4b:8d:bf:95:68:8b:d1:3a:
         dd:5f:4b:9d:47:64:4a:9a:cc:33:68:cb:32:53:89:69:0a:e5:
         1d:c6:f9:de:4d:e5:28:ea:e8:aa:86:8a:74:12:8d:a3:0c:cd:
         95:57:06:02:c0:02:15:7a:5c:9d:f8:9f:7b:0c:73:2c:82:14:
         ea:27:bf:35:2d:dd:51:6d:a9:c8:08:bd:a6:38:6e:47:c3:f5:
         28:9b:15:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:31 2023 by rpki-client on console-fra.rpki-client.org