Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/f421346542756ec11c9b348d51320c6e51b615e5.roa
File:                     f421346542756ec11c9b348d51320c6e51b615e5.roa (raw, json)
Hash identifier:          v1Qdjl4B+4/JDpyqwy7cONw+LSSvnE+Oe2veiNeXQN0=
Subject key identifier:   02:7E:4A:E6:79:81:B5:44:C4:B8:B8:19:B2:F7:9B:E9:F2:89:D1:8B
Certificate issuer:       /CN=cbe7d2b83c34a0dd403c92689aedd57f0a182b5d
Certificate serial:       1C4716
Authority key identifier: 86:D3:3F:22:62:AB:D4:D9:E6:7D:0C:BC:33:FB:72:F6:1D:CD:CD:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/f421346542756ec11c9b348d51320c6e51b615e5.roa
Signing time:             Tue 31 Jan 2023 17:34:14 +0000
ROA not before:           Mon 30 Jan 2023 17:33:48 +0000
ROA not after:            Fri 31 Jan 2025 17:33:48 +0000
asID:                     266668
IP address blocks:        45.228.190.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1853206 (0x1c4716)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbe7d2b83c34a0dd403c92689aedd57f0a182b5d
        Validity
            Not Before: Jan 30 17:33:48 2023 GMT
            Not After : Jan 31 17:33:48 2025 GMT
        Subject: CN=f421346542756ec11c9b348d51320c6e51b615e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:8a:ee:98:e8:5e:44:bc:37:e8:3a:5f:2a:1b:
                    2a:4e:72:a9:45:d6:8d:4c:06:d1:1f:f9:b3:c0:9b:
                    c8:af:94:d6:10:07:18:29:7c:ef:7c:d1:b8:59:da:
                    71:6d:9c:d5:81:0f:27:ae:71:c0:16:56:f7:1f:73:
                    be:30:d7:a5:61:2d:57:77:67:2f:f0:78:1a:96:5f:
                    42:93:a0:e8:5f:d3:14:4b:27:b1:7c:e4:26:de:03:
                    43:40:0b:f4:47:e3:de:98:d4:92:29:e5:68:21:94:
                    06:f4:5c:97:05:4a:6c:2f:b5:f7:93:1a:2c:c2:2f:
                    a2:f6:51:69:e7:3b:a8:0f:4e:82:cb:e9:09:4e:be:
                    38:7f:e2:d6:59:79:a0:8f:6d:be:1b:cd:f5:91:af:
                    be:a0:18:74:35:d4:d5:42:79:e2:13:77:ae:15:a6:
                    89:b7:70:32:ca:d5:2c:7c:ac:db:e4:cb:04:a5:3f:
                    aa:56:50:41:65:6e:09:e9:c0:43:b8:3f:58:c4:aa:
                    40:f9:85:42:3c:2c:d8:5f:4e:61:1c:1c:d3:3a:2d:
                    e7:fc:ca:11:5c:dc:ed:31:ef:46:ad:0b:a1:04:02:
                    7c:05:13:22:b3:88:75:0d:35:19:43:af:8f:c7:55:
                    30:87:39:a8:6f:8a:67:3b:02:53:38:ea:ba:3d:6f:
                    ff:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:7E:4A:E6:79:81:B5:44:C4:B8:B8:19:B2:F7:9B:E9:F2:89:D1:8B
            X509v3 Authority Key Identifier:
                keyid:86:D3:3F:22:62:AB:D4:D9:E6:7D:0C:BC:33:FB:72:F6:1D:CD:CD:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/f421346542756ec11c9b348d51320c6e51b615e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b1d1a8fd-4ffd-4891-b911-b23c6374f91d/cbe7d2b83c34a0dd403c92689aedd57f0a182b5d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:b5:44:39:e4:b9:ad:41:50:62:70:5e:cb:02:ac:ae:a8:8c:
         ae:09:c6:2f:85:62:25:22:15:01:3f:46:a4:0b:6d:f1:77:f1:
         b3:e4:bf:d5:74:a2:c7:7a:0b:17:4e:82:e6:1d:16:e5:51:13:
         52:c1:ee:88:d1:11:36:32:81:f2:8b:84:0e:36:2c:42:0a:47:
         81:6f:33:11:cf:03:3f:d6:54:83:13:39:39:10:e3:b2:55:19:
         6a:0f:9e:cc:e1:37:43:68:c1:8a:e8:3c:c3:2d:63:6b:49:90:
         61:06:8c:24:23:9f:9a:74:6d:41:a8:cf:b3:75:0a:38:b5:5f:
         4c:ba:ce:d0:c6:e3:60:4c:65:6c:41:f3:83:68:4a:d0:a6:52:
         47:0b:ff:08:b6:3d:fe:63:6f:d3:e4:e1:3a:f1:25:75:28:14:
         93:95:d7:16:47:00:9b:11:dd:dd:ea:08:40:b7:ee:af:89:3d:
         61:22:28:60:da:70:3a:6f:21:c3:2f:21:26:d9:9a:46:9f:33:
         93:aa:fc:af:31:75:2e:05:be:d4:d0:59:1f:07:00:74:6b:4d:
         b8:56:f3:70:17:42:94:43:1e:bf:f4:e0:47:7e:e9:89:63:b5:
         f7:b2:c5:4c:a2:0d:11:43:56:3f:36:dc:53:07:ed:f8:0e:40:
         2c:1a:69:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 19 20:55:49 2023 by rpki-client on console-ams.rpki-client.org