Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0ee2469-83ea-41e8-9535-dc1609caacc7/a517f15f553eddadf4848b6687e8cbc5d7bcb179.roa
File:                     a517f15f553eddadf4848b6687e8cbc5d7bcb179.roa (raw, json)
Hash identifier:          /4FHmJyo/VXmx1dJEykMNDW4b9XmPlKQhsIKwHBT6Fc=
Subject key identifier:   EA:07:48:6D:7A:30:4E:14:43:5C:99:8F:71:79:DB:71:46:62:D0:FB
Certificate issuer:       /CN=7d4b649384481a70163fa549e8ceb813fed96d9d
Certificate serial:       0C2179
Authority key identifier: 62:51:BF:3C:FB:DF:EB:83:4A:5C:2C:DD:97:5C:02:2F:18:86:D1:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d4b649384481a70163fa549e8ceb813fed96d9d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0ee2469-83ea-41e8-9535-dc1609caacc7/a517f15f553eddadf4848b6687e8cbc5d7bcb179.roa
Signing time:             Wed 24 Mar 2021 14:34:18 +0000
ROA not before:           Wed 24 Mar 2021 14:34:18 +0000
ROA not after:            Tue 24 Mar 2026 14:34:18 +0000
asID:                     267733
IP address blocks:        45.167.193.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 795001 (0xc2179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d4b649384481a70163fa549e8ceb813fed96d9d
        Validity
            Not Before: Mar 24 14:34:18 2021 GMT
            Not After : Mar 24 14:34:18 2026 GMT
        Subject: CN=a517f15f553eddadf4848b6687e8cbc5d7bcb179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e1:98:11:d9:50:8b:b7:3a:b6:84:d4:2c:12:
                    b4:98:1d:4d:4a:29:e7:fe:bc:78:77:45:7c:66:bd:
                    39:ab:c6:4b:a1:20:18:d5:1c:c0:aa:3b:e8:1f:46:
                    88:e8:02:39:a9:4b:33:96:f1:ad:7c:88:fe:87:15:
                    ce:fb:59:dd:af:1e:4d:4e:1a:95:f9:86:ef:6f:3b:
                    6e:86:ae:9d:57:e8:62:3b:af:14:8d:5d:35:fb:be:
                    df:bb:9a:1a:ea:9b:ce:91:8c:b4:8f:9f:c8:45:e3:
                    81:ec:9a:f7:49:ff:f7:ae:0c:ed:bb:ca:f1:c8:fe:
                    21:d6:09:e2:60:38:5d:95:6c:5c:fa:c9:be:95:1a:
                    64:06:2b:5b:1d:0f:aa:ff:f8:39:95:ae:bb:85:b7:
                    57:36:7c:ce:ec:2c:fd:f6:f3:53:d7:67:87:18:54:
                    9c:ad:40:dc:b0:88:74:80:48:ea:f4:24:ce:d4:cb:
                    5c:14:d1:ad:5d:d1:bc:77:e6:f0:d8:be:46:a5:20:
                    52:ac:01:30:6f:ac:24:26:3b:2d:28:2c:81:62:58:
                    be:b5:bd:04:4e:ac:71:97:8b:91:59:1d:37:3a:ae:
                    cf:2b:0f:a4:41:fd:25:e7:4f:7d:47:bf:0b:b5:e3:
                    d8:00:ad:1a:6b:05:85:34:60:86:4a:c5:a0:0a:47:
                    8d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:07:48:6D:7A:30:4E:14:43:5C:99:8F:71:79:DB:71:46:62:D0:FB
            X509v3 Authority Key Identifier:
                keyid:62:51:BF:3C:FB:DF:EB:83:4A:5C:2C:DD:97:5C:02:2F:18:86:D1:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d4b649384481a70163fa549e8ceb813fed96d9d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0ee2469-83ea-41e8-9535-dc1609caacc7/a517f15f553eddadf4848b6687e8cbc5d7bcb179.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0ee2469-83ea-41e8-9535-dc1609caacc7/7d4b649384481a70163fa549e8ceb813fed96d9d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:51:13:ff:14:07:83:1a:5c:91:57:df:c8:48:9e:3a:60:57:
         95:30:74:5a:d3:07:07:56:4f:e4:b9:38:a8:5d:8f:55:60:68:
         fa:50:f6:79:84:41:b7:39:bb:ea:ab:a3:dd:ca:7f:5d:1f:90:
         cc:36:3e:1e:2f:e6:66:05:42:9b:14:d1:f2:2f:93:c5:31:49:
         91:ec:69:04:57:df:c9:a7:09:e2:20:12:eb:6d:95:23:56:1b:
         ce:1a:c0:60:79:df:48:92:e1:e8:ea:0c:b9:12:46:04:10:5d:
         1a:bd:ba:ad:c4:61:44:b1:f3:4c:13:62:ee:59:b2:79:fe:98:
         17:90:69:08:33:bd:bb:1a:b6:7b:2c:96:0c:31:4b:a3:f7:68:
         93:58:0d:e9:db:3b:b2:36:dd:9c:c8:57:0b:6a:51:76:60:44:
         b4:60:ef:ea:1b:cb:aa:7f:2d:aa:42:5c:e7:60:cc:07:70:7a:
         a5:a6:2c:f8:dc:20:58:8b:39:44:bd:c1:58:b5:e7:8a:24:37:
         6a:12:52:8f:a4:95:d5:70:77:05:19:d7:8f:bf:f1:76:04:f2:
         ab:ec:46:81:c6:96:5c:5f:00:a5:29:68:e1:86:90:cb:fb:1b:
         de:8e:4f:0b:4f:08:4a:c7:49:ef:30:26:4f:57:01:b8:3d:c2:
         8b:bf:3c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 14 16:36:44 2023 by rpki-client on console-fra.rpki-client.org