Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bc44c7a2-fa2b-4ae9-942d-86a3aecc57fd/572f7be511e2e17d3ccf05c4f10834c076d08998.roa
File:                     572f7be511e2e17d3ccf05c4f10834c076d08998.roa (raw, json)
Hash identifier:          ADQKrmXbQ3i4KMQwXd+c4MhPGSY4eXNMUSfW+6PsQIs=
Subject key identifier:   20:65:53:F3:2E:1B:49:C9:B9:5C:26:9A:0C:F6:46:91:8F:DE:D3:69
Certificate issuer:       /CN=717bd4c365c04f4dd5d39ac6532c267af688e267
Certificate serial:       0DDD9E
Authority key identifier: 37:12:84:2F:ED:19:32:5C:55:6E:AE:4D:0E:7C:19:89:6D:FC:1F:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/717bd4c365c04f4dd5d39ac6532c267af688e267.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bc44c7a2-fa2b-4ae9-942d-86a3aecc57fd/572f7be511e2e17d3ccf05c4f10834c076d08998.roa
Signing time:             Wed 24 Mar 2021 14:29:53 +0000
ROA not before:           Wed 24 Mar 2021 14:29:52 +0000
ROA not after:            Tue 24 Mar 2026 14:29:52 +0000
asID:                     265819
IP address blocks:        45.6.8.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 908702 (0xddd9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=717bd4c365c04f4dd5d39ac6532c267af688e267
        Validity
            Not Before: Mar 24 14:29:52 2021 GMT
            Not After : Mar 24 14:29:52 2026 GMT
        Subject: CN=572f7be511e2e17d3ccf05c4f10834c076d08998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:25:36:c5:fd:7f:e8:a6:fa:2b:ad:e9:29:2b:
                    91:8e:c2:8d:df:79:19:c4:c0:41:04:9d:f3:62:a8:
                    62:7d:39:76:82:e3:05:0f:29:19:97:c0:c3:68:e9:
                    c2:d1:c9:41:65:96:6f:f9:08:39:e0:85:ac:7a:43:
                    7c:39:97:b6:1c:a8:e4:0f:03:8a:64:33:42:35:13:
                    9d:cb:86:86:3b:80:3d:96:c6:66:e2:49:d5:ec:70:
                    16:bf:d1:7f:f1:a2:ea:84:c2:34:db:65:c7:26:d2:
                    7e:f4:d7:ea:eb:86:a9:05:55:84:4d:bb:16:b9:03:
                    d1:49:12:fd:6b:4c:4b:b8:70:76:02:92:41:2a:41:
                    8b:80:7b:c0:61:c4:79:6f:a5:5b:41:58:c7:65:3d:
                    e0:f7:8a:e0:03:0e:9c:7c:4b:7c:03:e2:3d:8d:7f:
                    4e:13:1c:4c:9d:d4:35:3f:be:9a:e9:80:8a:e5:d2:
                    8c:6e:81:2d:e7:5a:cd:bf:34:f6:5e:30:fd:e1:d4:
                    7c:30:01:12:f0:95:ed:72:4d:1a:57:f0:53:59:d9:
                    05:c8:20:00:6e:89:26:74:2a:3a:be:25:31:2f:4c:
                    a5:ba:b7:6e:06:76:8a:fd:36:b0:a3:51:79:ab:b2:
                    28:e6:69:a0:7f:0f:74:14:1b:b9:06:01:50:c3:d1:
                    3e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:65:53:F3:2E:1B:49:C9:B9:5C:26:9A:0C:F6:46:91:8F:DE:D3:69
            X509v3 Authority Key Identifier:
                keyid:37:12:84:2F:ED:19:32:5C:55:6E:AE:4D:0E:7C:19:89:6D:FC:1F:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/717bd4c365c04f4dd5d39ac6532c267af688e267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bc44c7a2-fa2b-4ae9-942d-86a3aecc57fd/572f7be511e2e17d3ccf05c4f10834c076d08998.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bc44c7a2-fa2b-4ae9-942d-86a3aecc57fd/717bd4c365c04f4dd5d39ac6532c267af688e267.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:bc:be:9b:50:32:ff:8a:d1:f2:cc:8d:27:27:1e:4a:8d:61:
         08:9f:3d:0f:e4:c0:fe:33:96:d6:7c:ac:ac:b0:26:01:bc:47:
         47:d3:23:18:70:6d:b4:27:30:7a:2f:db:61:33:67:d0:1c:6d:
         41:d2:76:f8:0b:99:71:50:82:3c:74:53:84:64:e2:af:a5:dd:
         ac:5b:a6:2c:d4:ae:f4:c5:8c:75:57:28:63:4a:41:a1:a1:9e:
         de:b9:65:ce:a5:d7:19:3b:b0:d4:36:2a:96:72:39:c9:72:bb:
         fb:8b:d6:0c:f1:bf:cb:cc:a1:d7:16:8a:dc:3f:12:21:43:c9:
         9d:ea:3c:8b:41:89:50:b8:9b:b9:30:ef:c5:e1:ab:f1:0f:50:
         b4:33:52:a9:94:fd:fe:67:2f:04:07:63:4c:57:75:85:39:19:
         54:d1:b5:e7:d2:4a:63:d0:ae:62:56:27:a1:13:7f:dc:d3:1f:
         57:80:77:0b:9d:c0:bb:8f:6a:ef:5d:aa:1c:da:1e:c7:37:fe:
         24:ed:6b:89:52:2b:9a:5e:c3:20:e8:5a:48:37:85:ab:ee:2d:
         78:97:cf:38:1d:10:7d:0d:64:65:58:77:40:68:0d:d9:ae:58:
         04:44:ef:a1:c9:b2:64:b4:86:db:56:c0:3e:2e:eb:4b:49:f1:
         ef:5d:75:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 4 14:00:19 2023 by rpki-client on console-fra.rpki-client.org