Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d78a35fb-1e0f-4747-9169-b276193dbb59/d7d54dc6df720cd12ef5c3f86efc64c1c5b0a8ae.roa
File:                     d7d54dc6df720cd12ef5c3f86efc64c1c5b0a8ae.roa (raw, json)
Hash identifier:          OrrrH0xmWytZyzHeOeqWj1HGmfUqDToDtwz4ape9xQ8=
Subject key identifier:   08:8C:F9:D0:8B:49:E2:30:FE:05:53:5D:CD:7E:CF:F6:7D:EA:FA:23
Certificate issuer:       /CN=5cf8ea952842bcf0937dda38dd1208e1ee0e5462
Certificate serial:       0BE430
Authority key identifier: 50:7D:62:82:12:BB:02:A0:9E:1F:A3:CB:24:60:BF:B2:C2:24:9B:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5cf8ea952842bcf0937dda38dd1208e1ee0e5462.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d78a35fb-1e0f-4747-9169-b276193dbb59/d7d54dc6df720cd12ef5c3f86efc64c1c5b0a8ae.roa
Signing time:             Wed 24 Mar 2021 14:32:59 +0000
ROA not before:           Wed 24 Mar 2021 14:32:59 +0000
ROA not after:            Tue 24 Mar 2026 14:32:59 +0000
asID:                     267685
IP address blocks:        45.163.18.0/23 maxlen: 25
                          160.20.225.0/24 maxlen: 26
                          2803:3ea0::/32 maxlen: 34

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 779312 (0xbe430)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cf8ea952842bcf0937dda38dd1208e1ee0e5462
        Validity
            Not Before: Mar 24 14:32:59 2021 GMT
            Not After : Mar 24 14:32:59 2026 GMT
        Subject: CN=d7d54dc6df720cd12ef5c3f86efc64c1c5b0a8ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:37:a1:10:07:11:91:9b:76:94:16:36:91:09:
                    0a:7e:64:01:13:48:76:05:1e:0e:cf:73:da:6d:ca:
                    16:5e:a2:df:4a:28:56:f4:6b:cb:c9:2d:3d:fb:19:
                    9b:ca:10:30:77:53:4c:0d:0b:73:91:18:66:3f:0f:
                    d4:07:02:76:dc:0a:47:66:4a:52:9e:82:ec:ea:ef:
                    52:96:d6:84:98:89:d0:35:8b:7c:3c:05:d9:fa:a0:
                    b7:31:c3:16:97:40:40:ec:73:b7:9f:73:74:65:c2:
                    43:68:be:b7:7c:29:cf:f8:72:2b:7d:cb:08:d6:18:
                    fc:24:27:d7:f3:07:7c:97:4b:59:c5:01:7a:0b:4c:
                    0d:f3:c8:64:a3:8a:54:0a:64:c6:3d:b9:c2:e1:34:
                    a2:ed:46:39:c6:3e:c0:88:2d:cc:f4:88:d4:81:9a:
                    ca:72:92:1f:7a:82:34:08:fa:47:be:f2:d3:c8:54:
                    6f:82:9e:e1:b7:c3:11:57:f5:6f:1f:f6:35:8f:4b:
                    c4:a7:55:52:a0:e2:bc:2e:f1:e0:93:30:7e:3a:d0:
                    ba:1c:50:c6:30:ab:61:1f:2e:57:6c:c0:46:98:6c:
                    72:40:6a:9c:ad:6f:b6:89:24:11:be:fe:39:17:80:
                    13:0e:4f:4c:3f:8a:8d:82:79:53:d1:e5:5e:61:ce:
                    b1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:8C:F9:D0:8B:49:E2:30:FE:05:53:5D:CD:7E:CF:F6:7D:EA:FA:23
            X509v3 Authority Key Identifier:
                keyid:50:7D:62:82:12:BB:02:A0:9E:1F:A3:CB:24:60:BF:B2:C2:24:9B:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5cf8ea952842bcf0937dda38dd1208e1ee0e5462.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d78a35fb-1e0f-4747-9169-b276193dbb59/d7d54dc6df720cd12ef5c3f86efc64c1c5b0a8ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d78a35fb-1e0f-4747-9169-b276193dbb59/5cf8ea952842bcf0937dda38dd1208e1ee0e5462.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.18.0/23
                  160.20.225.0/24
                IPv6:
                  2803:3ea0::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:60:eb:6b:7c:72:4f:84:6b:10:a9:a8:a1:b8:05:62:6f:4b:
         82:ef:8a:a0:ba:d9:ec:bf:0f:81:23:fa:5a:92:4d:92:b1:5c:
         b2:a0:bc:85:4d:7b:20:f3:cf:4c:55:72:a9:33:da:4a:fb:f2:
         44:d9:5e:9e:4e:9b:4f:b8:8a:13:8e:cb:20:36:85:05:17:53:
         9f:c0:56:3a:93:c1:a5:18:ab:3c:13:e3:56:e7:2f:31:b5:00:
         09:62:cb:97:43:21:7f:2a:fb:e7:24:8c:af:33:83:09:b5:19:
         47:9a:af:90:1e:a6:7a:d7:fc:8d:01:13:67:a0:53:28:3e:74:
         ef:4b:d6:57:98:1a:99:ab:05:99:c6:2b:d0:ee:b6:eb:b1:b9:
         76:c7:25:d5:50:73:de:f2:11:ce:87:0c:55:14:89:81:58:3f:
         b5:c8:b6:f7:76:e2:00:72:e7:0a:c2:2e:87:a9:35:d3:c4:61:
         aa:51:2c:d3:f6:48:19:61:6e:fb:9c:14:05:6c:ea:ff:04:4a:
         1c:40:7b:94:65:c0:56:86:e1:d8:a0:e7:83:75:4f:3f:72:b5:
         d8:66:93:a6:9d:96:e5:71:31:98:78:62:a4:68:cc:c0:73:66:
         6c:02:01:25:ad:59:c1:e5:a2:13:a7:b9:e7:bd:ac:8e:e7:45:
         ab:b0:15:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:40 2023 by rpki-client on console-fra.rpki-client.org