Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b97c897c-40b7-4601-8fc3-d811f3c38167/9fadb14534495942fa70f3094e5dc461e84971c6.roa
File:                     9fadb14534495942fa70f3094e5dc461e84971c6.roa (raw, json)
Hash identifier:          OaK24rH+iJoI1vhPr+y8GIqKvmh2tzkKu0FUhN/CNM4=
Subject key identifier:   C8:2B:11:BC:8A:D2:29:F3:24:0B:FC:C6:E0:FD:61:E5:2E:65:72:CF
Certificate issuer:       /CN=a00f13820b977914dc96250807fd66f6707db9ec
Certificate serial:       18D40D
Authority key identifier: 62:B0:C9:CA:56:AE:C9:53:8D:D3:AB:F8:FC:64:F6:DF:35:4E:6E:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a00f13820b977914dc96250807fd66f6707db9ec.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b97c897c-40b7-4601-8fc3-d811f3c38167/9fadb14534495942fa70f3094e5dc461e84971c6.roa
Signing time:             Mon 01 Aug 2022 01:45:46 +0000
ROA not before:           Thu 30 Jun 2022 03:00:00 +0000
ROA not after:            Sun 30 Jun 2024 03:00:00 +0000
asID:                     266742
IP address blocks:        45.230.168.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1627149 (0x18d40d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a00f13820b977914dc96250807fd66f6707db9ec
        Validity
            Not Before: Jun 30 03:00:00 2022 GMT
            Not After : Jun 30 03:00:00 2024 GMT
        Subject: CN=9fadb14534495942fa70f3094e5dc461e84971c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:95:ec:3a:02:e2:53:e9:9f:0e:8d:df:67:01:
                    f0:4f:84:b5:b4:66:6b:20:f5:60:20:fe:a2:6f:e2:
                    e5:e4:64:b8:03:5f:3d:8e:7b:5f:68:34:9f:08:db:
                    8a:06:89:4c:9f:53:ff:48:46:8b:a6:76:d4:d7:77:
                    45:4c:c0:01:b2:e4:1a:f2:6a:04:05:c0:fc:e4:6d:
                    ad:f3:f6:80:d5:3f:c2:fd:d8:1c:a7:76:46:80:51:
                    2e:79:d8:6f:a7:37:48:aa:42:27:8d:0e:1f:98:9d:
                    e4:fc:f5:13:e7:fe:98:42:a1:0e:eb:62:d0:98:9e:
                    67:81:4a:8e:0c:35:d6:5d:e9:79:f0:42:85:f8:0c:
                    8f:38:59:f5:0e:6f:67:d1:e6:50:37:14:c1:ff:8e:
                    2d:54:04:1a:72:c3:f2:48:6a:5c:a2:27:57:36:3d:
                    de:df:3d:9f:a9:76:43:22:76:3e:09:84:b8:ef:b2:
                    4c:a6:99:71:9e:c7:b8:62:16:e3:75:12:2e:b2:fb:
                    82:49:37:c9:fe:39:0d:ba:ef:1a:4b:2a:39:ad:1b:
                    ad:b9:5b:31:fb:a1:73:83:ac:f8:9f:49:d7:96:6c:
                    3e:34:49:41:21:92:0c:35:cd:aa:4c:77:26:39:94:
                    a1:8e:9a:6b:18:95:ee:ec:02:b9:d5:2f:8f:0a:de:
                    4d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:2B:11:BC:8A:D2:29:F3:24:0B:FC:C6:E0:FD:61:E5:2E:65:72:CF
            X509v3 Authority Key Identifier:
                keyid:62:B0:C9:CA:56:AE:C9:53:8D:D3:AB:F8:FC:64:F6:DF:35:4E:6E:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a00f13820b977914dc96250807fd66f6707db9ec.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b97c897c-40b7-4601-8fc3-d811f3c38167/9fadb14534495942fa70f3094e5dc461e84971c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b97c897c-40b7-4601-8fc3-d811f3c38167/a00f13820b977914dc96250807fd66f6707db9ec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:1f:a5:8d:d2:90:57:d7:b9:c6:2f:b0:2b:8a:cd:1b:19:88:
         47:31:a7:7f:aa:09:43:5e:39:2e:e0:c9:9c:32:ce:f5:ca:7d:
         6b:a8:59:8e:1a:f1:2d:db:83:e1:a9:eb:45:bd:f2:95:cc:65:
         9e:e1:6d:db:7d:56:7f:c1:64:b0:cd:fc:18:bd:c8:56:1a:39:
         e6:80:ad:89:ca:bb:bb:7e:c6:e8:e5:6b:c5:40:3f:22:65:18:
         7e:90:62:49:dd:a2:19:6f:f9:95:94:8c:f0:43:66:6b:ca:32:
         26:5d:e9:8a:c2:3e:96:62:dc:0e:af:0a:85:e4:cd:0e:62:b3:
         d9:14:9b:8a:08:2c:c4:58:13:c4:cc:a8:0c:5c:1a:47:ff:19:
         f9:29:a5:c6:64:00:e7:75:2a:e8:75:fe:04:14:19:92:fd:35:
         40:dc:5b:6a:df:f1:37:25:bd:4a:33:e2:75:14:1c:87:b1:1c:
         7f:2e:f3:5a:97:1e:9e:4b:60:ba:e0:e6:a3:0b:aa:df:86:44:
         e5:75:a5:78:6b:b4:78:51:1c:51:66:e4:3f:5e:3c:30:b3:ba:
         ec:6a:29:15:3e:c4:da:6a:56:bd:8e:bc:ad:6e:56:7f:f8:49:
         4a:0e:35:64:3e:35:c6:ab:78:21:0c:24:df:56:37:96:79:72:
         47:99:db:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:52 2023 by rpki-client on console-ams.rpki-client.org