Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b15ccc0f-e6e7-4ddb-8974-13c2fae405ea/13b7cc18503f93bea3a03cb680d625748b86534e.roa
File:                     13b7cc18503f93bea3a03cb680d625748b86534e.roa (raw, json)
Hash identifier:          8Ei928UX8y7uuPbDg1G3F4KUUrG4Q89AMvDbP3a5ukM=
Subject key identifier:   8E:A9:AE:4A:5C:9E:BB:18:DD:1D:3B:E8:37:BF:6E:D9:C8:74:C9:C1
Certificate issuer:       /CN=f996736b1fa10fc86d7dcd8f0972181fe443fb10
Certificate serial:       2197D8
Authority key identifier: 75:57:10:2A:06:F8:53:89:F2:A4:FB:49:FB:0D:BB:55:9D:77:29:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f996736b1fa10fc86d7dcd8f0972181fe443fb10.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b15ccc0f-e6e7-4ddb-8974-13c2fae405ea/13b7cc18503f93bea3a03cb680d625748b86534e.roa
Signing time:             Wed 05 Jul 2023 01:49:02 +0000
ROA not before:           Tue 04 Jul 2023 01:49:02 +0000
ROA not after:            Sat 05 Jul 2025 01:49:02 +0000
asID:                     52468
IP address blocks:        45.224.150.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2201560 (0x2197d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f996736b1fa10fc86d7dcd8f0972181fe443fb10
        Validity
            Not Before: Jul  4 01:49:02 2023 GMT
            Not After : Jul  5 01:49:02 2025 GMT
        Subject: CN=13b7cc18503f93bea3a03cb680d625748b86534e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:87:51:b0:fa:a0:82:b3:be:04:ad:9e:ef:1d:
                    75:de:ec:d8:1b:3d:15:67:72:5e:b0:ab:06:30:4c:
                    51:3c:72:b6:23:2f:27:0b:28:c3:e3:cd:07:e4:6e:
                    9f:e3:25:3a:95:14:24:10:57:7c:89:14:b6:b6:86:
                    51:8a:72:76:1d:94:53:22:4d:f0:1d:3b:18:50:97:
                    65:d7:e4:6d:31:44:16:0d:79:df:ad:80:4e:73:0a:
                    c5:68:82:62:bf:61:d2:92:12:0c:21:fa:59:ce:c9:
                    a2:47:b6:99:dd:81:99:04:8b:65:a4:4e:89:73:f4:
                    ed:4e:29:be:a3:68:bf:c1:e8:01:d4:69:55:89:14:
                    63:9d:a6:25:3f:5d:39:90:42:6f:2d:aa:24:63:cf:
                    4c:b4:44:38:93:f6:aa:e6:80:51:90:91:08:ae:c9:
                    39:19:5f:32:3a:05:af:72:46:d0:95:b5:cc:52:d0:
                    84:9a:ec:71:36:99:05:c8:2f:67:8f:4c:7a:19:d1:
                    42:4f:b6:91:b4:63:24:c4:db:c6:7f:21:4c:0e:8b:
                    c9:b7:f9:a4:3a:e7:74:a8:5e:2b:a3:52:f3:63:4c:
                    e5:25:fb:b9:b4:49:a8:f7:20:4c:ca:68:5e:10:c6:
                    8a:da:47:eb:f1:bf:8f:e8:d7:91:30:28:e9:13:32:
                    a9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A9:AE:4A:5C:9E:BB:18:DD:1D:3B:E8:37:BF:6E:D9:C8:74:C9:C1
            X509v3 Authority Key Identifier:
                keyid:75:57:10:2A:06:F8:53:89:F2:A4:FB:49:FB:0D:BB:55:9D:77:29:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f996736b1fa10fc86d7dcd8f0972181fe443fb10.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b15ccc0f-e6e7-4ddb-8974-13c2fae405ea/13b7cc18503f93bea3a03cb680d625748b86534e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b15ccc0f-e6e7-4ddb-8974-13c2fae405ea/f996736b1fa10fc86d7dcd8f0972181fe443fb10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:8e:b6:4c:35:ae:ef:d7:e1:4d:98:c4:5b:21:68:ae:db:59:
         c0:82:87:b7:a9:d6:73:fe:1a:e8:22:d4:84:c3:9f:21:3a:8a:
         09:5c:ab:ec:99:4e:6b:0e:18:f7:cc:ca:8a:cd:50:e0:05:c4:
         96:4b:84:7f:7e:9e:23:ca:99:93:1e:be:db:39:cf:5f:ac:3d:
         9d:d0:82:18:a0:c3:26:e2:14:22:15:29:21:48:1f:dd:a0:b1:
         af:e6:9f:14:5b:21:a9:a1:d9:48:2b:43:4a:98:15:c1:ff:a5:
         fe:c2:e2:37:c9:1d:77:a0:ee:0d:64:38:11:6f:0e:2f:5d:fa:
         78:b3:3d:b0:31:fd:8e:6d:19:53:a1:8a:bc:61:03:eb:e2:04:
         a3:7f:17:ea:7e:f9:a8:7b:63:38:f7:2d:a8:9e:87:cd:3e:36:
         cf:90:0c:ba:d7:58:ac:9c:5f:da:f8:c2:12:7e:b0:0f:c3:27:
         c0:5a:13:9a:40:7b:d0:15:c4:e1:7e:be:fb:b7:b7:a4:a1:ed:
         5a:5b:38:f1:59:ad:3f:31:50:e5:89:cc:af:57:43:99:4c:4b:
         a3:1c:51:0b:4b:f4:57:83:f2:2c:bf:84:9b:50:33:27:14:92:
         b2:6b:1b:6e:51:bb:8d:2f:bd:3a:bb:a4:9a:d0:70:f1:e8:8d:
         a5:4b:31:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 17 20:26:36 2023 by rpki-client on console-ams.rpki-client.org