Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d47b7104-4089-4a18-9345-2a7514ab534a/4fd19dddb507a9961e370e481dbcc1dbcc55b8ae.roa
File:                     4fd19dddb507a9961e370e481dbcc1dbcc55b8ae.roa (raw, json)
Hash identifier:          x5cGO9yzHv48ROQI1isRihhsZOqjo3xM+lv0pNXwnrk=
Subject key identifier:   7E:01:4F:A2:FE:86:40:83:3C:5C:3D:AB:D1:1B:F8:33:18:41:2A:DF
Certificate issuer:       /CN=dd0af7b6e3a89703bf69f14c87e734e6e57b2b98
Certificate serial:       0CBD06
Authority key identifier: 04:6A:4C:3C:87:8A:D1:A8:AA:46:E0:62:E3:55:44:96:1D:1A:CA:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd0af7b6e3a89703bf69f14c87e734e6e57b2b98.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d47b7104-4089-4a18-9345-2a7514ab534a/4fd19dddb507a9961e370e481dbcc1dbcc55b8ae.roa
Signing time:             Wed 24 Mar 2021 22:50:34 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     266771
IP address blocks:        45.232.176.0/24 maxlen: 24
                          45.232.177.0/24 maxlen: 24
                          45.232.178.0/24 maxlen: 24
                          45.232.179.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 834822 (0xcbd06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd0af7b6e3a89703bf69f14c87e734e6e57b2b98
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=4fd19dddb507a9961e370e481dbcc1dbcc55b8ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b2:3f:d4:37:47:34:7d:96:7a:a0:c9:0c:ae:
                    83:83:0d:8f:9c:4a:84:11:54:a3:1e:58:ae:db:58:
                    8c:9b:45:51:48:75:ef:05:fc:7d:ed:13:a6:f7:c0:
                    d0:33:6a:34:32:4e:f9:9b:10:4b:3d:ec:18:89:01:
                    46:f8:b7:00:c1:f9:65:9f:4f:5a:90:30:c3:df:54:
                    c1:19:fc:a8:b2:48:da:13:a1:d6:a9:a3:7c:13:20:
                    50:b3:f7:76:8c:8a:98:df:3b:a0:94:85:cd:c0:fa:
                    50:ec:28:ad:5b:ae:31:5b:6b:c8:e6:39:84:f9:01:
                    18:6f:06:c8:79:e4:16:5c:87:7c:50:ae:93:6d:18:
                    31:7e:a8:96:20:79:c1:a6:75:83:1e:71:aa:d6:ec:
                    e4:9c:d1:8b:0f:b2:d4:e9:0a:a9:ef:26:93:a1:84:
                    b9:98:38:90:82:30:a4:3c:dd:ec:76:f7:6e:cc:23:
                    78:8f:3a:6b:d4:c2:2f:50:34:28:42:ea:9c:0f:87:
                    2b:70:d5:37:fb:79:b4:60:2a:b4:a2:96:ed:a7:41:
                    84:26:ed:ea:ed:2a:7f:9d:a5:92:18:93:dd:3f:95:
                    2b:48:bd:6c:9c:3b:ed:39:3e:7d:3b:8a:62:60:b6:
                    51:de:07:0c:6b:2a:87:67:c7:a8:d1:37:70:a3:76:
                    ff:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:01:4F:A2:FE:86:40:83:3C:5C:3D:AB:D1:1B:F8:33:18:41:2A:DF
            X509v3 Authority Key Identifier:
                keyid:04:6A:4C:3C:87:8A:D1:A8:AA:46:E0:62:E3:55:44:96:1D:1A:CA:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd0af7b6e3a89703bf69f14c87e734e6e57b2b98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d47b7104-4089-4a18-9345-2a7514ab534a/4fd19dddb507a9961e370e481dbcc1dbcc55b8ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d47b7104-4089-4a18-9345-2a7514ab534a/dd0af7b6e3a89703bf69f14c87e734e6e57b2b98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:02:62:26:53:c4:1f:fa:17:48:47:c6:96:05:59:54:bf:ea:
         65:4d:1c:c0:cb:7b:1e:a8:71:6b:89:a6:03:bc:23:52:00:1d:
         46:07:4b:96:8a:d7:1c:d9:72:bf:d0:69:86:67:23:e6:3c:60:
         03:1b:e7:ae:c2:38:d8:cd:1a:b7:41:0c:f7:59:7a:bf:7e:24:
         32:16:0d:20:c1:98:d7:bd:68:58:23:f6:ef:92:d7:47:5f:2d:
         5d:da:50:38:0a:31:da:53:b8:ba:d1:d5:5b:00:b5:0e:00:6f:
         47:b3:4c:2f:8d:bf:0e:42:21:97:5c:92:e2:50:ad:1f:37:4d:
         08:68:2a:02:b9:6f:f9:fe:68:0a:10:ea:97:d9:4c:99:5f:40:
         bf:db:d4:8d:56:0b:0f:2f:3e:87:46:05:54:8c:12:28:0a:78:
         31:27:a4:3e:fe:f1:0e:26:bc:03:76:25:eb:78:58:d2:fc:bf:
         f3:6e:b6:d0:b1:b7:94:b7:99:43:e6:e4:eb:42:79:75:c9:c0:
         61:27:f0:b4:3f:e8:72:10:a3:60:44:64:54:63:ef:44:b4:e2:
         ba:bd:64:dd:78:ee:63:ee:5b:35:6a:7f:48:e9:5b:7b:7a:4c:
         61:f2:f9:0b:e1:12:23:24:87:78:25:4d:72:c2:0c:de:a3:d5:
         3f:58:8d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:40 2023 by rpki-client on console-fra.rpki-client.org