Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/e1f663c4d7502360b74f9ada62c7683bfc2c49fa.roa
File:                     e1f663c4d7502360b74f9ada62c7683bfc2c49fa.roa (raw, json)
Hash identifier:          pZzKyJV7zSUJsF2G5B1KcybftypoBsQIYrFGvKZnPYA=
Subject key identifier:   4E:C8:CB:6E:D1:FB:1A:23:78:3D:EA:4C:24:12:D5:0A:3C:80:70:95
Certificate issuer:       /CN=cbe7d2b83c34a0dd403c92689aedd57f0a182b5d
Certificate serial:       1C41FD
Authority key identifier: 86:D3:3F:22:62:AB:D4:D9:E6:7D:0C:BC:33:FB:72:F6:1D:CD:CD:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/e1f663c4d7502360b74f9ada62c7683bfc2c49fa.roa
Signing time:             Tue 31 Jan 2023 17:33:47 +0000
ROA not before:           Mon 30 Jan 2023 17:33:12 +0000
ROA not after:            Fri 31 Jan 2025 17:33:12 +0000
asID:                     266668
IP address blocks:        45.228.189.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1851901 (0x1c41fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbe7d2b83c34a0dd403c92689aedd57f0a182b5d
        Validity
            Not Before: Jan 30 17:33:12 2023 GMT
            Not After : Jan 31 17:33:12 2025 GMT
        Subject: CN=e1f663c4d7502360b74f9ada62c7683bfc2c49fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1b:68:5f:15:b1:d2:2e:a1:f9:fe:9b:b9:e9:
                    65:17:2e:f0:c1:65:d3:75:f4:5c:86:5a:43:5d:97:
                    10:3d:eb:fc:0e:53:45:a7:f0:ed:99:ad:cf:52:0a:
                    fb:57:e9:3b:0a:b3:6c:99:2b:ab:c8:55:55:aa:cc:
                    1a:d8:f3:09:6c:12:9d:88:68:14:fa:ca:63:69:10:
                    53:82:bc:b2:c1:d7:fe:20:09:31:6a:77:fc:63:e8:
                    1a:16:e6:90:e7:d5:fc:91:b3:10:ce:e9:e7:5b:0a:
                    b5:8f:40:b5:46:35:60:ab:0f:25:4e:f2:12:49:63:
                    63:f7:4c:76:a5:88:f3:0b:dd:20:ca:c9:6b:a1:d1:
                    23:4a:80:88:37:70:f1:38:fe:5d:ce:83:e1:3c:93:
                    f8:79:f1:df:a2:70:19:fa:95:56:43:ab:99:64:c6:
                    99:4a:08:22:45:0d:64:30:ee:29:de:72:d4:67:ba:
                    ec:ee:fc:64:d0:0b:a5:0a:36:b3:51:ca:a8:d5:54:
                    2b:39:36:e7:4c:b4:95:eb:11:5c:57:5b:1b:f0:89:
                    bb:0b:2a:df:70:ba:89:fc:11:36:87:88:35:b3:ee:
                    be:2c:88:e3:cc:d8:3a:cc:c9:b6:85:34:ae:e1:3c:
                    06:77:d4:88:da:6e:06:82:22:6f:ee:ff:67:cf:01:
                    07:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C8:CB:6E:D1:FB:1A:23:78:3D:EA:4C:24:12:D5:0A:3C:80:70:95
            X509v3 Authority Key Identifier:
                keyid:86:D3:3F:22:62:AB:D4:D9:E6:7D:0C:BC:33:FB:72:F6:1D:CD:CD:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/e1f663c4d7502360b74f9ada62c7683bfc2c49fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:55:2f:49:03:87:f8:7b:c5:36:29:ae:85:e8:22:37:b0:cc:
         0f:9d:04:7e:4b:28:3e:d0:31:a2:31:9a:02:03:56:b6:ef:6d:
         84:1a:e2:9d:c9:72:01:7c:36:34:a4:58:94:56:fc:64:13:a7:
         1d:03:41:51:f7:bd:ec:e3:1b:bf:af:92:ae:9f:51:c1:52:0f:
         e1:c8:a3:a0:ba:3c:86:8d:4a:73:cb:b5:80:48:01:9a:f3:6f:
         8c:23:d6:7c:50:c8:2f:3d:01:b8:4f:b3:bd:8b:2e:f0:f0:dc:
         51:2b:18:18:98:c9:bd:f7:4b:25:7f:1b:a6:fb:a5:3e:30:1f:
         fd:16:a4:0a:b4:d5:76:6b:d0:d6:04:2b:22:07:be:74:e5:3b:
         24:dd:7d:30:c1:34:76:f4:ff:c2:d4:c3:77:57:41:32:0e:ba:
         d7:7a:8a:de:45:de:e8:51:a8:45:89:db:57:d0:90:d7:a1:29:
         e3:0c:54:01:02:a4:d5:6d:bc:9c:51:66:b0:17:b5:6e:a1:2a:
         92:85:9a:cf:13:f8:48:68:1b:53:c8:66:59:a0:11:fd:30:55:
         1f:ff:8c:c4:92:44:bb:7c:51:f6:e8:7f:46:6d:90:1f:b3:90:
         7c:c2:41:77:3d:36:37:34:3f:54:20:58:06:f8:97:07:b4:d4:
         38:17:5d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 19 20:55:48 2023 by rpki-client on console-ams.rpki-client.org