Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a81b5dee-5dfe-43ea-80bf-5c3ff1ae3c55/db96850ec82e1fa75b5bbb8ac5486bb69c371590.roa
File:                     db96850ec82e1fa75b5bbb8ac5486bb69c371590.roa (raw, json)
Hash identifier:          7hgm8T2g+movAfHv7QgHNYoUFH9+x7O2t3vyqAU/EmQ=
Subject key identifier:   66:46:76:D2:C1:A7:99:1D:A4:0B:AF:EF:EA:87:5D:90:8E:06:26:14
Certificate issuer:       /CN=694b3d580e07f84edc87befe8b29d4e23ac87258
Certificate serial:       0C1F47
Authority key identifier: 18:B1:57:82:A8:45:F8:32:C1:B4:30:C0:84:DC:A4:AF:2C:6C:E0:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/694b3d580e07f84edc87befe8b29d4e23ac87258.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a81b5dee-5dfe-43ea-80bf-5c3ff1ae3c55/db96850ec82e1fa75b5bbb8ac5486bb69c371590.roa
Signing time:             Wed 24 Mar 2021 14:44:38 +0000
ROA not before:           Wed 24 Mar 2021 14:44:37 +0000
ROA not after:            Tue 24 Mar 2026 14:44:37 +0000
asID:                     23470
IP address blocks:        45.170.245.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 794439 (0xc1f47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=694b3d580e07f84edc87befe8b29d4e23ac87258
        Validity
            Not Before: Mar 24 14:44:37 2021 GMT
            Not After : Mar 24 14:44:37 2026 GMT
        Subject: CN=db96850ec82e1fa75b5bbb8ac5486bb69c371590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5d:b7:5c:83:09:bf:f0:d8:dd:a8:63:35:36:
                    15:1e:52:54:fc:c0:bb:2a:7b:50:59:72:07:6e:94:
                    17:2d:5f:98:1f:05:8d:1e:74:38:70:ab:78:4f:4e:
                    ce:7d:1e:fd:d5:dc:cd:0b:f6:0b:36:1a:3a:8d:23:
                    15:86:74:4b:85:92:4b:cf:80:44:26:fd:0a:35:96:
                    2d:07:6e:67:9f:9b:23:d5:46:f4:cc:7c:b3:6a:3a:
                    04:68:a1:fe:1a:01:ef:02:f9:2d:2a:d6:ba:95:69:
                    5e:8e:4d:4f:47:66:d6:3c:34:8c:dc:3e:2a:a0:cb:
                    c7:64:b2:e1:6a:8e:88:62:2a:12:a0:33:a9:7e:df:
                    2f:8c:95:a7:19:a3:ec:bf:76:a3:4b:c2:c2:72:74:
                    4e:2e:17:6f:8d:bd:f8:c1:e2:81:d4:86:58:5e:2a:
                    3e:b4:a2:f8:0f:fd:be:7a:93:06:1e:ea:4c:bc:bb:
                    ee:8e:ba:f9:a5:97:b1:d8:3b:a5:ab:eb:c5:19:28:
                    e7:47:4f:c2:2f:f6:0a:46:c6:b5:80:1a:f6:59:48:
                    d9:da:08:5e:66:a8:e8:75:0d:c6:2f:cd:d7:3a:ff:
                    ed:46:3c:a5:0b:2d:a9:e0:74:56:10:45:ad:8c:30:
                    a8:07:3e:a3:4a:ad:5b:ad:55:44:f2:d2:28:19:71:
                    7a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:46:76:D2:C1:A7:99:1D:A4:0B:AF:EF:EA:87:5D:90:8E:06:26:14
            X509v3 Authority Key Identifier:
                keyid:18:B1:57:82:A8:45:F8:32:C1:B4:30:C0:84:DC:A4:AF:2C:6C:E0:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/694b3d580e07f84edc87befe8b29d4e23ac87258.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a81b5dee-5dfe-43ea-80bf-5c3ff1ae3c55/db96850ec82e1fa75b5bbb8ac5486bb69c371590.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a81b5dee-5dfe-43ea-80bf-5c3ff1ae3c55/694b3d580e07f84edc87befe8b29d4e23ac87258.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:19:fe:70:e1:0c:b3:8f:fb:e1:24:d1:30:c2:06:65:5b:fe:
         b3:c1:2d:37:51:cf:e4:a9:98:7c:09:b8:c4:92:b9:c4:ea:42:
         a0:6d:7a:4f:29:4f:97:f8:22:56:e4:b4:a0:f0:ae:f2:38:ab:
         58:89:b1:d8:71:28:8f:59:f6:26:08:13:3f:ca:51:0c:dd:26:
         c4:e7:d5:cf:5e:3d:4f:e2:cc:a8:da:56:f1:93:4b:87:53:9b:
         7b:3d:75:e9:11:17:8b:64:c2:a7:b4:3b:38:b1:75:6c:7c:35:
         c9:31:4a:01:91:41:fa:0e:fa:a8:3b:01:66:38:62:76:69:0c:
         44:a8:db:69:96:da:a5:b0:e9:1c:82:a3:83:a3:80:84:4f:59:
         c5:db:1f:fb:98:04:84:bf:38:04:09:0f:d8:2c:9e:e8:9a:e3:
         e2:f2:7a:0e:55:ca:59:83:bf:f2:0c:04:e2:65:4f:03:34:8e:
         cf:96:1d:77:85:34:6a:37:f4:37:95:e7:9a:4c:68:fa:c8:3e:
         5f:c9:3a:9a:a7:8a:6f:88:36:6a:97:43:67:20:d6:e2:65:d5:
         ec:42:ae:38:20:85:df:39:6a:11:90:54:6a:9f:90:40:31:af:
         fb:40:ba:8c:78:b5:33:44:78:7d:b8:e1:5a:9c:8d:1f:c5:a2:
         c4:80:77:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:50 2023 by rpki-client on console-ams.rpki-client.org