Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b97c897c-40b7-4601-8fc3-d811f3c38167/9b5f9c7958da0c1408042d402e538490753ec05c.roa
File:                     9b5f9c7958da0c1408042d402e538490753ec05c.roa (raw, json)
Hash identifier:          bSsLBY+GnQJVLPAxJaOzgGnd4KmydpdA5lr82PTvZY8=
Subject key identifier:   EA:67:38:7C:C6:C5:12:9D:DE:55:19:02:D7:56:B4:92:66:A6:FA:98
Certificate issuer:       /CN=a00f13820b977914dc96250807fd66f6707db9ec
Certificate serial:       177122
Authority key identifier: 62:B0:C9:CA:56:AE:C9:53:8D:D3:AB:F8:FC:64:F6:DF:35:4E:6E:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a00f13820b977914dc96250807fd66f6707db9ec.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b97c897c-40b7-4601-8fc3-d811f3c38167/9b5f9c7958da0c1408042d402e538490753ec05c.roa
Signing time:             Wed 15 Jun 2022 04:10:21 +0000
ROA not before:           Thu 02 Jun 2022 03:00:00 +0000
ROA not after:            Sun 02 Jun 2024 03:00:00 +0000
asID:                     266742
IP address blocks:        45.230.168.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1536290 (0x177122)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a00f13820b977914dc96250807fd66f6707db9ec
        Validity
            Not Before: Jun  2 03:00:00 2022 GMT
            Not After : Jun  2 03:00:00 2024 GMT
        Subject: CN=9b5f9c7958da0c1408042d402e538490753ec05c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1c:a4:17:7e:88:b8:2a:7e:24:5b:5f:7d:65:
                    5d:26:27:f4:c9:b8:16:fb:d5:d6:8d:fc:f8:32:ba:
                    eb:a4:c8:40:2c:97:fa:50:03:9a:cf:b2:1f:cf:82:
                    41:16:59:f9:93:bc:9a:7b:fc:8a:4a:d0:6e:51:0b:
                    7b:90:25:8d:06:13:25:4f:17:59:5d:a6:a2:67:c2:
                    d5:ec:07:e2:53:b9:aa:4e:e0:eb:00:be:55:ab:18:
                    61:1d:58:c7:9f:c6:f0:bb:03:2c:0d:ae:5a:73:26:
                    11:b4:33:13:49:b8:06:4d:68:ff:28:7e:56:ec:71:
                    6f:3f:aa:b7:5a:d3:e8:a7:79:8d:fe:01:cd:7d:1a:
                    c1:33:ee:a6:5b:7e:da:11:ad:32:0f:5d:6e:8f:c8:
                    29:20:69:c0:71:9d:6b:ac:f6:88:1d:1b:a3:52:6d:
                    72:53:62:9d:c4:d8:ca:42:d5:1a:84:44:32:72:04:
                    cf:da:ca:0e:f1:21:bd:0d:f0:7c:ee:d6:20:9b:7e:
                    d2:47:46:e3:e3:a1:f8:9a:b5:60:b9:9c:a6:ad:c9:
                    7f:86:b2:1f:6e:1b:72:ae:18:64:bb:f5:7b:5a:af:
                    7e:0c:b0:29:99:69:d1:3f:c6:db:e6:3a:4d:c6:f5:
                    8f:91:b8:8e:f0:1f:05:97:15:7e:70:ae:4d:42:5f:
                    7e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:67:38:7C:C6:C5:12:9D:DE:55:19:02:D7:56:B4:92:66:A6:FA:98
            X509v3 Authority Key Identifier:
                keyid:62:B0:C9:CA:56:AE:C9:53:8D:D3:AB:F8:FC:64:F6:DF:35:4E:6E:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a00f13820b977914dc96250807fd66f6707db9ec.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b97c897c-40b7-4601-8fc3-d811f3c38167/9b5f9c7958da0c1408042d402e538490753ec05c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b97c897c-40b7-4601-8fc3-d811f3c38167/a00f13820b977914dc96250807fd66f6707db9ec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:de:f0:01:b1:63:f7:04:90:0b:36:21:ce:c6:fd:63:d5:ad:
         9d:0d:88:1b:dc:ee:6c:63:44:8c:c4:d5:79:ec:e1:9f:90:3b:
         67:01:02:9e:47:f7:df:75:4d:65:e3:dc:bc:86:1a:1a:4d:2a:
         b2:27:9d:77:84:bb:c0:e7:67:6b:2c:33:cd:be:2b:7b:ee:88:
         fd:30:f5:72:6f:ca:b9:45:f7:62:e5:a4:0c:7f:93:dd:e9:d8:
         f0:a7:05:38:d8:07:63:1c:31:d6:7c:c6:50:6e:f3:fa:4d:c8:
         0b:c6:0b:07:80:fa:84:b0:7f:a9:69:26:00:74:c8:8a:60:08:
         49:63:44:00:cc:d9:3a:93:96:54:8b:73:a5:f5:30:87:a0:12:
         90:52:57:f5:6f:c5:6c:72:6b:87:cc:ea:27:af:e0:3c:fe:2e:
         aa:ac:4e:a1:1d:a9:70:8f:82:f6:01:e6:92:07:60:be:f0:22:
         6d:b1:17:fc:44:d9:27:44:05:1c:f4:c3:c1:f8:e8:de:b5:3e:
         43:d3:39:0e:8e:57:79:e5:c4:0d:c0:47:ac:ac:59:59:c6:8f:
         d9:bb:fd:bd:38:90:36:14:2c:52:33:19:ca:d0:1c:ac:91:f1:
         c1:82:ab:8f:cb:46:7c:fd:9f:60:6b:82:3d:b1:f0:b7:44:e0:
         50:0f:18:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:37 2023 by rpki-client on console-fra.rpki-client.org