Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ad7975b2-0c2a-4092-a543-f7b0a8abb63a/9ec6e4440975408bc87add243a9c4bafc802e7d9.roa
File:                     9ec6e4440975408bc87add243a9c4bafc802e7d9.roa (raw, json)
Hash identifier:          0sbWPX9MvAzgFxgQZRAuQUfr8/mEsI+R73qqZs5Lslc=
Subject key identifier:   48:88:0F:6F:68:0F:44:E9:23:4F:15:54:25:5B:48:42:C1:35:B8:F5
Certificate issuer:       /CN=a5c8adf6f7bb40c78965ae212032e0e1788ce533
Certificate serial:       466B
Authority key identifier: 95:FF:B9:81:4C:78:CA:AC:C7:C8:D5:F6:29:18:E4:F2:86:00:59:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5c8adf6f7bb40c78965ae212032e0e1788ce533.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ad7975b2-0c2a-4092-a543-f7b0a8abb63a/9ec6e4440975408bc87add243a9c4bafc802e7d9.roa
Signing time:             Tue 05 Oct 2021 22:10:34 +0000
ROA not before:           Mon 04 Oct 2021 03:00:00 +0000
ROA not after:            Wed 04 Oct 2023 03:00:00 +0000
asID:                     267700
IP address blocks:        45.164.12.0/22 maxlen: 24
                          2803:d1a0::/32 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18027 (0x466b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5c8adf6f7bb40c78965ae212032e0e1788ce533
        Validity
            Not Before: Oct  4 03:00:00 2021 GMT
            Not After : Oct  4 03:00:00 2023 GMT
        Subject: CN=9ec6e4440975408bc87add243a9c4bafc802e7d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:af:7c:ff:3a:36:fd:12:81:7d:9c:c8:93:75:
                    38:54:10:b2:b2:1f:80:bf:eb:1d:a8:53:a3:6b:48:
                    d0:01:f6:92:eb:98:7e:10:5d:3e:d9:a8:e1:ea:27:
                    1d:34:46:bf:3b:f5:ae:02:40:7d:30:a6:e7:a9:d6:
                    f2:10:96:7d:d3:2a:61:67:63:71:cf:05:7d:f4:21:
                    2e:d0:6f:5b:69:52:50:e9:fc:49:50:5d:1f:36:46:
                    b6:78:a9:6e:bc:d1:5c:f6:b5:d4:70:4a:0e:df:20:
                    45:6c:9f:30:62:c0:22:c6:3b:c6:cb:e9:ac:90:e1:
                    00:0d:83:c0:93:14:25:b3:2b:cd:da:4a:ea:bc:89:
                    27:2d:93:14:f8:8b:69:2d:6f:49:a4:a0:88:55:b0:
                    23:f4:53:01:30:51:bd:12:8b:b2:71:2a:e3:e9:54:
                    6b:a0:60:3b:d4:0c:91:9b:16:82:54:e0:bf:2f:e4:
                    18:15:fe:59:48:96:3f:de:02:ea:7c:ad:91:91:27:
                    32:b1:02:c8:6a:aa:d9:e8:a7:a7:c9:94:64:76:db:
                    e4:ae:26:24:4a:f5:8d:9a:75:c2:94:c9:a2:2c:1a:
                    b6:55:45:69:d3:ef:32:52:8c:82:8e:26:73:02:c2:
                    04:7e:53:71:61:0a:c2:a8:c9:86:5c:a7:fa:d1:96:
                    f9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:88:0F:6F:68:0F:44:E9:23:4F:15:54:25:5B:48:42:C1:35:B8:F5
            X509v3 Authority Key Identifier:
                keyid:95:FF:B9:81:4C:78:CA:AC:C7:C8:D5:F6:29:18:E4:F2:86:00:59:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5c8adf6f7bb40c78965ae212032e0e1788ce533.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ad7975b2-0c2a-4092-a543-f7b0a8abb63a/9ec6e4440975408bc87add243a9c4bafc802e7d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ad7975b2-0c2a-4092-a543-f7b0a8abb63a/a5c8adf6f7bb40c78965ae212032e0e1788ce533.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.12.0/22
                IPv6:
                  2803:d1a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:db:b2:7c:ed:8d:0f:ac:34:aa:b0:4b:56:9e:40:9f:7c:93:
         4d:bf:73:3c:d9:88:4d:b5:0c:5d:56:34:f1:a3:40:77:3c:c5:
         a8:99:ac:49:ed:d8:42:26:b1:02:16:9b:2b:b4:54:dd:62:6d:
         c9:28:a2:f1:ce:3e:56:44:5a:62:af:e8:75:ee:46:c6:2e:0d:
         9b:39:b9:4a:46:2e:8e:ba:e7:61:be:ec:51:b1:d8:53:d1:23:
         f4:81:ba:b8:28:3a:04:fe:f8:1f:f7:8c:00:be:52:fd:e9:4e:
         71:a2:c9:91:95:be:ae:c2:15:75:6f:13:37:ab:22:c6:2b:3f:
         81:7b:7f:ee:c4:47:cd:24:56:db:cf:92:fb:11:fa:00:08:9f:
         b5:c3:90:6b:6e:0a:91:66:96:11:36:fb:b8:84:35:2f:28:06:
         a6:c2:dd:0a:b8:e3:f0:0e:0f:3e:ae:67:e6:81:ac:02:c2:5e:
         3c:60:51:45:8f:f9:c7:ba:00:8f:7e:82:25:23:c9:2d:f9:83:
         6d:af:c9:c9:bd:08:45:73:fb:37:35:2c:d7:28:a2:66:50:ea:
         ea:7f:76:08:cd:65:d3:88:ec:33:24:0a:22:74:2b:24:03:b2:
         d0:62:7a:05:d8:0a:86:b8:7a:4b:e9:82:87:ce:c0:7c:26:5b:
         44:ac:7e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:36 2023 by rpki-client on console-fra.rpki-client.org