Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a8bb0059-7482-4e32-aff7-cf155b7dffd6/ec0c7ee1c0c2846c2fd1a580410019a9ced257ef.roa
File:                     ec0c7ee1c0c2846c2fd1a580410019a9ced257ef.roa (raw, json)
Hash identifier:          nfCIU6efOzSj0BedNHamHzciD6FPKqlnIFV5L0R3Mco=
Subject key identifier:   29:DF:EF:A9:5D:25:92:5F:C4:53:5E:17:C6:78:70:E9:39:C7:EE:95
Certificate issuer:       /CN=6906eabd95def3829dbd18ad3f94145f4f04a9b7
Certificate serial:       0D0165
Authority key identifier: 5A:B7:98:C9:FD:53:05:1E:06:87:EA:0F:FD:FC:32:33:99:18:AD:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6906eabd95def3829dbd18ad3f94145f4f04a9b7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a8bb0059-7482-4e32-aff7-cf155b7dffd6/ec0c7ee1c0c2846c2fd1a580410019a9ced257ef.roa
Signing time:             Wed 24 Mar 2021 14:45:16 +0000
ROA not before:           Wed 24 Mar 2021 14:45:15 +0000
ROA not after:            Tue 24 Mar 2026 14:45:15 +0000
asID:                     43350
IP address blocks:        45.227.255.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 852325 (0xd0165)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6906eabd95def3829dbd18ad3f94145f4f04a9b7
        Validity
            Not Before: Mar 24 14:45:15 2021 GMT
            Not After : Mar 24 14:45:15 2026 GMT
        Subject: CN=ec0c7ee1c0c2846c2fd1a580410019a9ced257ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:60:15:00:14:5f:99:85:29:70:54:65:79:1c:
                    e4:50:f7:e0:27:98:32:c4:cc:ca:ab:0a:3f:55:99:
                    39:90:e4:b2:3b:66:b9:dc:f7:64:a7:04:79:61:f5:
                    90:ab:62:02:24:63:74:c2:95:ca:9d:ce:d8:55:6e:
                    d3:9e:fc:52:47:38:f7:98:1c:98:ef:3b:df:1d:7a:
                    24:19:c8:21:a2:c6:b0:30:3c:ea:29:7c:f9:f0:54:
                    cc:f6:fb:35:4d:5e:c8:f8:1c:69:92:e0:7f:27:9c:
                    a8:40:79:72:1c:7f:6d:4e:ba:cc:44:b0:46:ee:32:
                    56:55:92:da:f3:e1:27:c7:47:8f:50:cb:3c:d6:c8:
                    65:6e:e6:65:f6:71:f4:c8:8c:de:7c:30:02:8f:c2:
                    a4:a7:07:0c:d8:7e:ab:05:7f:ce:a7:09:0e:d5:33:
                    a4:83:39:dd:e4:d0:69:53:54:91:f4:a8:c6:27:e8:
                    47:61:15:09:3f:ee:f2:ef:bb:14:76:d3:e1:0a:9f:
                    d4:00:fa:bf:f2:bd:0e:fe:3d:19:b6:1c:de:80:3a:
                    08:32:b3:cb:b2:9c:58:8b:9c:92:81:81:df:c8:a9:
                    c1:8e:15:71:1a:db:b1:d4:e8:db:3b:a6:9c:b4:4a:
                    4c:8e:45:cd:7c:9e:64:43:60:11:7f:3d:4c:14:d4:
                    d1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:DF:EF:A9:5D:25:92:5F:C4:53:5E:17:C6:78:70:E9:39:C7:EE:95
            X509v3 Authority Key Identifier:
                keyid:5A:B7:98:C9:FD:53:05:1E:06:87:EA:0F:FD:FC:32:33:99:18:AD:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6906eabd95def3829dbd18ad3f94145f4f04a9b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a8bb0059-7482-4e32-aff7-cf155b7dffd6/ec0c7ee1c0c2846c2fd1a580410019a9ced257ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a8bb0059-7482-4e32-aff7-cf155b7dffd6/6906eabd95def3829dbd18ad3f94145f4f04a9b7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:fa:a4:1e:0c:b8:b4:29:c2:4d:6b:fd:83:39:a2:fa:65:0e:
         4b:2c:9d:bc:97:4d:ec:d2:8d:e7:33:a7:a1:0b:fc:05:46:db:
         32:4d:b0:46:19:0d:bd:7c:2c:3c:a2:15:b1:53:f1:a2:be:70:
         90:46:1b:02:d5:86:9a:90:01:89:71:0b:80:e5:2e:99:53:87:
         7e:44:5e:ce:19:d8:96:85:25:bc:f0:c2:f3:03:17:57:fc:5d:
         b7:84:dd:9a:25:f2:7c:50:41:6d:80:3b:cd:c7:04:5f:b6:e0:
         57:94:2c:5c:9a:47:10:1b:8c:07:7c:33:5a:62:64:80:73:9d:
         33:98:ef:e8:95:5b:b8:9e:f2:ac:e2:c3:7a:ee:9f:2c:8b:e8:
         c2:1d:5e:70:15:15:35:c7:35:a2:86:e6:de:1e:ff:fb:f6:9a:
         4e:d0:25:3a:ec:cf:8f:36:2c:26:35:06:dd:6a:f3:58:d8:21:
         02:5c:25:48:e4:34:d4:ed:29:85:8b:ec:7a:a0:1a:2e:04:70:
         db:2d:f3:58:7e:de:8a:98:9d:21:26:5e:d5:67:5e:a0:07:62:
         dd:ec:f6:cf:08:b0:09:56:76:90:11:59:1b:89:58:db:c1:04:
         ed:19:6d:23:70:00:6e:3b:a4:14:ee:45:40:84:84:44:93:27:
         f4:ec:92:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:50 2023 by rpki-client on console-ams.rpki-client.org