Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ae7164a8-f366-4d63-9629-f5b8596a55aa/f9029aaf755a3be2881af7e49da3d975e1692bed.roa
File:                     f9029aaf755a3be2881af7e49da3d975e1692bed.roa (raw, json)
Hash identifier:          +oq+CvGGmqioXkoS/KXo7BJcy7qy8J531b3wIuE5bsM=
Subject key identifier:   71:18:01:0B:D0:92:33:85:97:36:73:09:C3:DC:C0:AE:99:8C:81:6C
Certificate issuer:       /CN=14dd9710595884a6cdc2418a4de21b5c2b40042b
Certificate serial:       0BF34F
Authority key identifier: 82:98:69:10:AA:69:1C:81:21:C9:B9:7D:04:26:26:63:24:2D:09:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14dd9710595884a6cdc2418a4de21b5c2b40042b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ae7164a8-f366-4d63-9629-f5b8596a55aa/f9029aaf755a3be2881af7e49da3d975e1692bed.roa
Signing time:             Wed 24 Mar 2021 14:43:28 +0000
ROA not before:           Wed 24 Mar 2021 14:43:28 +0000
ROA not after:            Tue 24 Mar 2026 14:43:28 +0000
asID:                     23470
IP address blocks:        45.170.249.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 783183 (0xbf34f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14dd9710595884a6cdc2418a4de21b5c2b40042b
        Validity
            Not Before: Mar 24 14:43:28 2021 GMT
            Not After : Mar 24 14:43:28 2026 GMT
        Subject: CN=f9029aaf755a3be2881af7e49da3d975e1692bed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:da:70:b7:9e:51:64:a0:af:9d:27:7e:0f:43:
                    0b:84:7d:f6:82:f3:51:db:00:dd:bd:c9:8d:5c:76:
                    45:25:e2:0d:83:70:0b:9c:97:82:ed:4d:d6:2d:f7:
                    7a:45:41:dc:84:f5:d3:75:ec:7e:af:56:21:14:f3:
                    05:fe:9f:a2:19:d1:5c:c6:1e:0a:52:7d:80:15:51:
                    b0:1f:87:aa:b0:e1:a3:56:c4:20:44:2a:ad:64:f2:
                    95:69:f4:dd:3e:74:59:87:b4:ec:84:0f:d4:51:e3:
                    9b:c6:b8:d8:0f:5d:22:19:c3:cf:9d:1b:72:b9:c9:
                    84:bd:f5:5d:fd:b3:f5:5e:19:a1:f7:8d:96:8e:a6:
                    c4:06:25:68:94:30:4d:61:98:16:9e:c4:73:b3:db:
                    72:32:be:ce:a8:cc:00:42:31:1b:c1:b8:a2:32:58:
                    c6:3c:fc:53:25:3c:1b:9f:d5:d3:5f:0c:4a:b2:52:
                    34:86:35:93:35:c7:42:2b:47:6a:bc:31:71:a8:4e:
                    2f:9f:a0:7f:67:9f:82:a3:1d:d0:90:4a:59:a0:83:
                    10:60:21:f2:d6:c6:99:17:7b:f4:97:0c:52:e7:2b:
                    a7:08:9b:1b:8e:1e:a5:82:5e:d4:5a:32:93:ba:6f:
                    4c:7c:4f:8d:b6:ab:93:75:22:ce:22:d0:1e:66:3f:
                    79:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:18:01:0B:D0:92:33:85:97:36:73:09:C3:DC:C0:AE:99:8C:81:6C
            X509v3 Authority Key Identifier:
                keyid:82:98:69:10:AA:69:1C:81:21:C9:B9:7D:04:26:26:63:24:2D:09:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14dd9710595884a6cdc2418a4de21b5c2b40042b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ae7164a8-f366-4d63-9629-f5b8596a55aa/f9029aaf755a3be2881af7e49da3d975e1692bed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ae7164a8-f366-4d63-9629-f5b8596a55aa/14dd9710595884a6cdc2418a4de21b5c2b40042b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:cf:b3:73:5b:cb:52:67:26:85:4b:99:7c:74:91:61:8c:8e:
         1d:c1:0b:ca:30:65:9f:65:35:85:d4:a1:2e:fa:c3:4c:f3:06:
         94:c5:63:2f:ad:73:c4:4c:57:49:ff:ea:4e:05:21:75:ab:74:
         c4:a1:18:0d:0a:d9:fa:99:0c:16:68:bc:4d:35:9f:e0:7f:bb:
         e0:1c:37:ce:90:3f:84:64:28:61:8f:ab:a3:22:f3:c5:b2:b2:
         6e:59:c3:8e:cc:33:c6:a4:aa:7a:d9:78:b5:0e:2b:d5:c7:e4:
         3f:28:b4:40:7e:a1:9d:6c:91:bd:2f:9b:90:07:1e:18:e6:cc:
         fc:30:fb:43:de:a2:11:ac:ad:d7:53:98:0b:85:17:75:eb:3f:
         04:fc:3a:18:09:76:0e:ab:80:f4:dd:3d:a1:06:68:8d:da:d8:
         d4:25:ae:71:62:15:24:bf:16:40:d1:2a:f8:84:30:86:66:ac:
         ec:e2:b0:84:4d:4b:35:56:45:8b:0b:ea:a8:e1:c2:27:40:7e:
         a2:d7:e6:9d:ed:a6:67:7e:56:29:ff:58:4a:9b:9e:f2:50:ca:
         89:3b:ad:41:ea:cc:e8:82:b5:08:6c:5b:e0:1c:d7:18:57:ab:
         d2:fc:a9:5c:1f:eb:d8:d3:d9:aa:da:ca:bf:6f:37:5a:43:87:
         17:d2:0b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:36 2023 by rpki-client on console-fra.rpki-client.org