Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ab0a0c22-92ab-490d-b608-186b92545691/babf328398a3836cf699a35f459c15d475f313bc.roa
File:                     babf328398a3836cf699a35f459c15d475f313bc.roa (raw, json)
Hash identifier:          J53zj55vCfzn02TUh727b1xTbqUDFRK34dILJ1kB6WQ=
Subject key identifier:   99:CD:E5:02:B5:7C:FA:2F:6C:C2:04:50:21:47:48:6D:41:3E:DE:CC
Certificate issuer:       /CN=0e9b4aea4f9aa6e849cc3b00ca9bab9d8d791ca9
Certificate serial:       0310D7
Authority key identifier: A4:8E:A9:62:07:0C:67:6D:11:85:5D:34:B3:93:96:C4:2D:5A:DC:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0e9b4aea4f9aa6e849cc3b00ca9bab9d8d791ca9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ab0a0c22-92ab-490d-b608-186b92545691/babf328398a3836cf699a35f459c15d475f313bc.roa
Signing time:             Mon 10 Apr 2023 18:42:19 +0000
ROA not before:           Sun 09 Apr 2023 18:41:45 +0000
ROA not after:            Thu 10 Apr 2025 18:41:45 +0000
asID:                     269766
IP address blocks:        45.182.82.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200919 (0x310d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e9b4aea4f9aa6e849cc3b00ca9bab9d8d791ca9
        Validity
            Not Before: Apr  9 18:41:45 2023 GMT
            Not After : Apr 10 18:41:45 2025 GMT
        Subject: CN=babf328398a3836cf699a35f459c15d475f313bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0b:61:ec:60:c3:ca:b4:c0:c0:4a:04:4d:e1:
                    71:3c:9c:2a:b8:a1:45:82:56:28:e2:10:fe:af:6d:
                    f6:f2:c0:4a:f8:b1:ce:be:70:95:7c:b7:8b:f2:a5:
                    43:1a:27:9c:fb:72:13:8d:38:56:7e:8b:eb:db:4b:
                    f6:c0:42:fa:84:9b:60:85:ee:10:12:c8:be:cf:dd:
                    b2:7a:ea:5f:64:f4:bb:9a:34:ee:6b:23:d8:06:79:
                    3d:86:97:f6:40:bf:61:a7:ed:5d:e1:2b:89:db:71:
                    08:f6:cc:05:38:42:35:78:4f:c6:fd:95:00:28:69:
                    52:cf:cb:f1:a1:43:5a:d7:f7:14:5a:98:52:87:29:
                    bf:ba:4e:3d:05:9d:e4:fe:e5:08:0c:61:4e:22:7c:
                    ff:ab:5d:4f:fb:85:41:5e:91:80:19:b6:2d:f5:bf:
                    1a:85:fc:19:b2:ab:08:c9:4d:f3:4c:43:db:ef:f6:
                    0b:48:94:a4:22:f4:1e:ef:ce:6f:83:f8:6e:b3:29:
                    1c:e6:62:1a:2e:3f:c2:df:96:30:bd:f8:a9:c4:0d:
                    28:4e:ac:b6:df:58:4d:5d:1c:3a:be:3f:e3:2e:0d:
                    96:e0:d7:0f:45:64:42:f6:2c:57:69:01:2d:2d:45:
                    b6:8d:19:13:02:63:94:25:57:90:bc:56:d7:d0:ba:
                    00:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:CD:E5:02:B5:7C:FA:2F:6C:C2:04:50:21:47:48:6D:41:3E:DE:CC
            X509v3 Authority Key Identifier:
                keyid:A4:8E:A9:62:07:0C:67:6D:11:85:5D:34:B3:93:96:C4:2D:5A:DC:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0e9b4aea4f9aa6e849cc3b00ca9bab9d8d791ca9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ab0a0c22-92ab-490d-b608-186b92545691/babf328398a3836cf699a35f459c15d475f313bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ab0a0c22-92ab-490d-b608-186b92545691/0e9b4aea4f9aa6e849cc3b00ca9bab9d8d791ca9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:a7:52:03:a5:06:f2:2d:cd:80:96:1c:78:32:8d:47:54:5c:
         33:89:38:31:8a:aa:f3:96:0a:34:52:ca:bc:62:20:cf:89:36:
         86:55:9b:04:2f:2d:40:73:ae:5e:e2:1c:ea:94:fb:e2:69:e0:
         b8:3d:e9:e1:eb:d0:07:30:c7:c6:44:4c:88:da:ba:2d:1f:05:
         1a:c5:ab:a8:b8:5b:7b:c9:63:ee:4a:ad:92:83:43:ae:99:78:
         7d:7f:d6:fd:ba:39:6f:47:d3:8d:e1:96:20:8d:89:0b:dc:6e:
         7b:e2:81:db:3c:a3:07:0b:87:18:55:16:28:81:53:a0:08:7c:
         47:4a:ef:a8:84:e7:5e:63:b7:8a:a4:57:19:f6:1f:ac:a4:a3:
         b7:84:3a:bc:65:9c:26:e6:ec:b7:73:d4:88:ec:6c:1c:7f:da:
         28:61:3f:2e:22:5e:ff:82:b2:35:12:ff:da:d4:27:05:ec:4c:
         1f:01:de:fd:20:79:21:60:92:de:06:1b:77:00:2f:69:1b:30:
         51:6b:0a:b0:b5:af:a8:f4:91:db:e6:d6:d5:90:45:cc:68:51:
         49:98:12:dc:06:34:09:df:08:be:52:1d:0d:a7:16:5e:c6:25:
         0b:62:00:02:11:df:fc:c7:82:1d:67:66:96:9e:c3:93:eb:da:
         23:cc:e9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 20 13:56:39 2023 by rpki-client on console-fra.rpki-client.org