Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a8bb0059-7482-4e32-aff7-cf155b7dffd6/7ff553d347b09c945e8f129f8bd3cfe80144aecf.roa
File:                     7ff553d347b09c945e8f129f8bd3cfe80144aecf.roa (raw, json)
Hash identifier:          6g6AeVtOeZhRNiPZdo8mkRX0SfxTJR4jv7AwQdWYs94=
Subject key identifier:   0E:53:03:53:D6:35:23:FF:75:B5:11:37:AB:DB:BD:29:0E:A6:3B:73
Certificate issuer:       /CN=6906eabd95def3829dbd18ad3f94145f4f04a9b7
Certificate serial:       0D00CC
Authority key identifier: 5A:B7:98:C9:FD:53:05:1E:06:87:EA:0F:FD:FC:32:33:99:18:AD:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6906eabd95def3829dbd18ad3f94145f4f04a9b7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a8bb0059-7482-4e32-aff7-cf155b7dffd6/7ff553d347b09c945e8f129f8bd3cfe80144aecf.roa
Signing time:             Wed 24 Mar 2021 14:45:16 +0000
ROA not before:           Wed 24 Mar 2021 14:45:15 +0000
ROA not after:            Tue 24 Mar 2026 14:45:15 +0000
asID:                     209272
IP address blocks:        45.227.252.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 852172 (0xd00cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6906eabd95def3829dbd18ad3f94145f4f04a9b7
        Validity
            Not Before: Mar 24 14:45:15 2021 GMT
            Not After : Mar 24 14:45:15 2026 GMT
        Subject: CN=7ff553d347b09c945e8f129f8bd3cfe80144aecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fc:0d:ce:ad:ad:c3:4d:ca:5c:cb:bd:48:b5:
                    65:c8:5e:eb:96:6b:ae:7d:e7:2b:7b:c2:29:a1:25:
                    43:d2:57:36:b9:3a:0f:f9:60:55:c4:81:84:eb:50:
                    11:5b:63:dd:e6:72:8f:3d:7b:69:31:1d:97:70:ac:
                    96:8b:94:f7:1b:dc:0f:fd:b2:27:5a:03:d6:52:c1:
                    bc:95:32:d5:43:7c:4f:0a:fb:43:c1:0d:8e:5e:33:
                    48:65:75:eb:2e:04:f8:8a:cf:8c:de:76:b8:60:35:
                    6c:c2:ae:3b:3a:2b:2c:5e:f7:75:cd:98:3d:c6:fa:
                    7d:43:60:0e:f3:f3:a0:ae:a4:c0:61:03:d2:84:b5:
                    51:45:c2:bb:5b:4e:87:20:8c:89:a3:35:b6:ea:73:
                    11:00:67:c1:f1:f9:ff:08:1c:0a:ef:25:c1:92:6d:
                    5a:24:89:9a:bc:3d:77:92:64:12:48:ec:66:a4:c4:
                    02:58:bc:c0:41:10:02:49:3e:36:95:93:f0:47:6e:
                    fd:52:e1:5d:2a:46:b8:7e:03:17:29:5a:3d:7e:da:
                    6a:19:7e:32:c5:31:f6:12:c7:18:72:3b:f1:51:15:
                    f8:d3:7b:5f:fd:03:51:05:0a:53:f5:28:29:85:85:
                    7d:2c:e4:58:ef:bc:f9:86:3b:05:15:c8:d7:2e:27:
                    5d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:53:03:53:D6:35:23:FF:75:B5:11:37:AB:DB:BD:29:0E:A6:3B:73
            X509v3 Authority Key Identifier:
                keyid:5A:B7:98:C9:FD:53:05:1E:06:87:EA:0F:FD:FC:32:33:99:18:AD:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6906eabd95def3829dbd18ad3f94145f4f04a9b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a8bb0059-7482-4e32-aff7-cf155b7dffd6/7ff553d347b09c945e8f129f8bd3cfe80144aecf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a8bb0059-7482-4e32-aff7-cf155b7dffd6/6906eabd95def3829dbd18ad3f94145f4f04a9b7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:1a:7e:4c:a8:3a:7d:08:67:e0:a3:a9:d8:08:76:c2:35:1d:
         79:db:66:25:5c:55:58:05:c9:cc:1a:eb:e1:e6:8a:2f:d9:4b:
         62:6a:1c:04:c4:2e:43:30:27:0c:35:71:c9:12:ea:d6:56:9e:
         9e:ca:74:73:0f:4f:b4:63:60:f3:36:5a:3c:3c:34:8b:00:fe:
         40:f2:f0:1e:2b:b7:ac:d2:3b:ac:66:4b:b3:00:8a:e5:44:53:
         e1:c9:9e:0b:28:84:b3:1a:3f:e4:58:5e:bd:4e:ea:86:f8:bd:
         b6:62:54:3b:3b:03:70:eb:a2:61:47:56:1d:e0:c0:03:2e:5b:
         fb:65:ba:d8:98:6b:3e:4e:7f:ab:99:33:a0:2e:18:14:44:8b:
         a0:d4:37:43:3c:95:97:de:eb:bb:37:19:ea:fc:ea:28:3a:21:
         3f:9b:12:61:89:cc:79:25:94:a7:f8:44:11:b0:a3:d6:93:98:
         ad:c6:ba:33:1e:1f:0f:3b:c4:46:d8:f3:8e:5f:de:a3:e5:ea:
         64:85:22:4f:8a:40:78:64:d1:e6:52:54:92:7f:4b:2d:fa:ae:
         63:10:53:1e:bc:13:f7:97:80:8c:d5:1f:54:be:b7:85:03:38:
         62:a2:6c:61:03:4c:29:a8:84:cc:f2:f5:7f:aa:6f:c5:8c:56:
         b5:11:89:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:35 2023 by rpki-client on console-fra.rpki-client.org