Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a815ce32-f0b4-4b96-8fdf-a0c4a7796f03/8cb6469050a846e167c5b60398cad7f8efe62bb7.roa
File:                     8cb6469050a846e167c5b60398cad7f8efe62bb7.roa (raw, json)
Hash identifier:          j3T3M5Sxa9scdWnBPtnoLxNXcyraPMrLlesvPkhxwdw=
Subject key identifier:   C1:44:71:EE:41:14:05:09:52:71:63:5A:92:57:FC:4F:F2:0A:12:77
Certificate issuer:       /CN=264594ab0a87e9fe0523de21ba1d3eda8a994014
Certificate serial:       08E90B
Authority key identifier: 7A:CD:C2:A7:9D:3E:91:CF:5B:35:93:D4:9B:D2:E5:BC:C6:E3:85:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/264594ab0a87e9fe0523de21ba1d3eda8a994014.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a815ce32-f0b4-4b96-8fdf-a0c4a7796f03/8cb6469050a846e167c5b60398cad7f8efe62bb7.roa
Signing time:             Tue 29 Mar 2022 07:15:25 +0000
ROA not before:           Tue 29 Mar 2022 03:00:00 +0000
ROA not after:            Fri 29 Mar 2024 03:00:00 +0000
asID:                     207688
IP address blocks:        45.182.189.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 583947 (0x8e90b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=264594ab0a87e9fe0523de21ba1d3eda8a994014
        Validity
            Not Before: Mar 29 03:00:00 2022 GMT
            Not After : Mar 29 03:00:00 2024 GMT
        Subject: CN=8cb6469050a846e167c5b60398cad7f8efe62bb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:95:d8:f9:d2:28:ad:50:fb:12:1f:aa:91:13:
                    44:35:cb:05:74:6e:8a:37:a8:49:f5:38:65:c7:47:
                    a0:0a:40:5a:f5:6d:6e:26:f4:fd:08:01:be:b3:50:
                    08:04:ac:d1:ae:69:da:c9:70:5f:20:5b:ad:a4:8b:
                    73:23:af:8b:20:26:04:64:fe:e4:b9:7e:79:26:93:
                    a3:ad:05:8b:16:4c:10:4d:3d:b7:33:53:94:c0:83:
                    9f:f1:c2:ff:a6:d0:be:56:c0:ec:9f:52:09:ed:af:
                    31:fd:a1:83:a6:29:61:70:5f:95:40:12:cd:ba:ce:
                    d6:64:1b:31:b9:3d:26:f0:83:ee:d6:17:7f:7f:65:
                    3d:81:a1:d0:d1:f6:df:fa:10:94:a1:c7:36:b9:a7:
                    6c:f4:5a:25:6d:94:ab:91:9e:78:c8:95:03:d7:70:
                    15:02:23:c2:e0:04:c2:98:b9:51:a8:76:40:f4:a3:
                    08:4b:62:ca:76:cf:3b:d2:6e:18:66:e7:d3:60:52:
                    d3:f3:73:b1:5a:b9:d7:d6:ab:d7:e5:ff:7e:be:b2:
                    24:3f:e2:4b:42:3d:0e:29:73:de:b7:d2:0e:fe:99:
                    1e:12:24:a4:04:8c:b3:c9:de:c4:95:e6:c2:9b:ed:
                    84:0a:88:53:7a:1f:60:83:b0:11:c0:2e:a0:4a:26:
                    d4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:44:71:EE:41:14:05:09:52:71:63:5A:92:57:FC:4F:F2:0A:12:77
            X509v3 Authority Key Identifier:
                keyid:7A:CD:C2:A7:9D:3E:91:CF:5B:35:93:D4:9B:D2:E5:BC:C6:E3:85:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/264594ab0a87e9fe0523de21ba1d3eda8a994014.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a815ce32-f0b4-4b96-8fdf-a0c4a7796f03/8cb6469050a846e167c5b60398cad7f8efe62bb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a815ce32-f0b4-4b96-8fdf-a0c4a7796f03/264594ab0a87e9fe0523de21ba1d3eda8a994014.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:ea:4b:c5:3e:d3:64:d5:6a:b2:13:8a:c8:6d:fb:4c:b7:02:
         20:36:f3:77:1e:d2:7c:00:03:72:0d:7c:73:79:21:f1:f7:ed:
         d7:d3:d9:b8:25:2d:81:f4:6e:90:c3:db:2d:73:18:90:2a:74:
         0f:d3:6a:6a:76:ca:bf:e3:38:01:83:49:f0:cc:5e:f6:e3:69:
         63:1e:0d:fa:4e:0e:9f:1a:a0:a3:47:df:2c:3b:e0:78:f1:9d:
         fa:13:12:63:f1:ed:4d:3f:6a:ae:75:23:1c:33:f6:72:8b:43:
         e4:04:27:f6:a7:eb:75:4d:0a:dc:4b:b3:81:4c:07:21:e8:cd:
         08:37:cc:a8:f7:5e:0e:c2:b3:3a:f0:ed:de:cb:d8:80:ab:29:
         9a:10:1e:e7:51:b7:1a:1c:0c:68:d5:b3:80:55:00:aa:5e:21:
         03:58:49:e9:74:9a:4a:0a:5d:bf:c2:a8:ca:79:b8:57:1d:ef:
         c2:84:a8:bd:47:f3:07:c4:b5:7a:78:f5:35:cd:a9:0e:ce:90:
         51:2c:f1:53:e0:b7:bc:97:57:08:a1:56:f4:10:e8:5b:d0:a9:
         6f:ec:3c:bf:67:79:49:f0:82:ff:90:20:bf:64:b6:38:7d:4c:
         8d:5c:85:35:64:7f:56:0f:d3:4d:aa:65:cf:72:f0:10:48:a1:
         03:15:af:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:35 2023 by rpki-client on console-fra.rpki-client.org