Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/df5ce020-a0af-4e15-8905-3ed4e73670a1/019d557e4bfbbe273fb9196924afbd137873247b.roa
File:                     019d557e4bfbbe273fb9196924afbd137873247b.roa (raw, json)
Hash identifier:          jvFu/+4yex8OKDGbmGhODRQKhPz5xJ4SJiJ5Zwx4YoQ=
Subject key identifier:   0C:57:33:18:B3:22:31:8F:22:F2:B2:16:B6:CE:87:6C:8E:02:96:4F
Certificate issuer:       /CN=dce0c8e8f0ae7604b42eaed64a0f996cf82a4b41
Certificate serial:       E970
Authority key identifier: D9:6D:D2:B7:71:67:C2:1F:92:DE:02:EE:86:61:3D:1D:C7:99:1B:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dce0c8e8f0ae7604b42eaed64a0f996cf82a4b41.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/df5ce020-a0af-4e15-8905-3ed4e73670a1/019d557e4bfbbe273fb9196924afbd137873247b.roa
Signing time:             Mon 01 Nov 2021 21:47:41 +0000
ROA not before:           Mon 01 Nov 2021 03:00:00 +0000
ROA not after:            Sun 01 Nov 2026 03:00:00 +0000
asID:                     267689
IP address blocks:        45.163.21.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59760 (0xe970)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dce0c8e8f0ae7604b42eaed64a0f996cf82a4b41
        Validity
            Not Before: Nov  1 03:00:00 2021 GMT
            Not After : Nov  1 03:00:00 2026 GMT
        Subject: CN=019d557e4bfbbe273fb9196924afbd137873247b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ee:c0:60:a9:62:72:42:03:52:8a:3d:ad:1b:
                    e1:2d:10:64:78:b0:e8:5d:31:dc:b7:d9:a3:72:ff:
                    63:b6:23:9e:b5:c7:4b:ad:8b:bc:e5:95:ac:62:97:
                    83:d7:64:d5:5d:3f:79:ef:f7:82:5e:83:44:ad:61:
                    22:fe:77:0c:81:02:08:1a:1d:38:a0:4b:87:3b:f5:
                    af:e3:f7:7e:4a:73:79:a4:a2:5a:43:90:d7:cb:c1:
                    55:ae:50:51:89:e6:f0:3c:39:ca:aa:b1:d8:cb:2a:
                    67:45:30:fb:8c:86:c1:2d:42:55:c9:03:0a:59:e7:
                    29:75:53:21:97:62:6b:43:62:da:7d:63:d8:c2:8b:
                    c7:59:c7:ab:d0:2d:0c:4c:39:54:8d:c7:c2:60:b8:
                    e4:ac:d4:c6:e6:74:4b:42:cc:85:cc:c5:43:fc:22:
                    15:3d:5d:d4:e2:0b:31:66:e3:4f:b5:8a:60:4f:6d:
                    5b:16:d9:c8:d1:62:08:fd:e7:d5:7e:2e:ed:cf:69:
                    3b:f5:f8:e4:fa:09:65:3f:87:0c:20:91:b6:38:82:
                    56:70:79:66:98:8a:3a:36:34:2b:1b:f3:93:a0:90:
                    31:73:6f:f9:af:9e:1a:5d:4d:5e:09:af:03:d7:88:
                    ae:55:cc:5c:c8:c1:70:09:72:40:32:ea:7b:06:f3:
                    92:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:57:33:18:B3:22:31:8F:22:F2:B2:16:B6:CE:87:6C:8E:02:96:4F
            X509v3 Authority Key Identifier:
                keyid:D9:6D:D2:B7:71:67:C2:1F:92:DE:02:EE:86:61:3D:1D:C7:99:1B:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dce0c8e8f0ae7604b42eaed64a0f996cf82a4b41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/df5ce020-a0af-4e15-8905-3ed4e73670a1/019d557e4bfbbe273fb9196924afbd137873247b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/df5ce020-a0af-4e15-8905-3ed4e73670a1/dce0c8e8f0ae7604b42eaed64a0f996cf82a4b41.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:c4:6f:97:34:41:84:dc:88:d2:4e:a3:e5:43:d8:d8:40:c4:
         1d:30:e9:4b:3d:49:dc:83:af:c4:57:6b:06:7e:50:d3:03:2a:
         e7:5a:c8:2f:16:d0:8b:b8:56:a8:0d:b7:1d:f1:92:46:2e:e5:
         ee:97:21:0e:d8:8c:60:d9:86:62:b1:6b:7b:dc:1d:23:aa:a1:
         dd:00:8f:a1:92:93:d8:af:73:2b:b5:45:76:e5:f2:5b:64:71:
         29:64:68:fb:76:49:83:65:5e:65:b7:27:21:6b:38:4c:c4:ef:
         9a:d5:43:1b:ca:57:1f:60:14:a4:0d:db:de:0c:f4:31:db:f3:
         ff:73:b2:f8:79:6e:d1:ca:46:48:9e:f8:75:f7:15:c6:6b:01:
         a4:cb:96:19:a6:ca:11:1b:07:77:97:6b:06:d9:18:b1:a1:9d:
         92:30:8b:0b:17:47:5e:6b:fe:35:f5:ad:9d:2b:1e:bd:bf:08:
         36:79:a7:8a:21:66:2e:68:cb:0e:e7:67:2d:ae:cd:47:df:ea:
         9a:f5:2c:43:2f:68:87:10:f1:3c:56:af:d5:11:3c:45:6b:dd:
         4f:b0:c7:3a:9d:e9:99:a6:95:d6:c5:f7:1e:e0:93:82:95:f6:
         30:67:c6:7e:3d:68:88:34:45:83:21:ca:5f:ab:d6:49:e2:96:
         00:95:9b:a3
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAOlwMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRj
ZTBjOGU4ZjBhZTc2MDRiNDJlYWVkNjRhMGY5OTZjZjgyYTRiNDEwHhcNMjExMTAx
MDMwMDAwWhcNMjYxMTAxMDMwMDAwWjAzMTEwLwYDVQQDEygwMTlkNTU3ZTRiZmJi
ZTI3M2ZiOTE5NjkyNGFmYmQxMzc4NzMyNDdiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAh+7AYKlickIDUoo9rRvhLRBkeLDoXTHct9mjcv9jtiOetcdL
rYu85ZWsYpeD12TVXT957/eCXoNErWEi/ncMgQIIGh04oEuHO/Wv4/d+SnN5pKJa
Q5DXy8FVrlBRiebwPDnKqrHYyypnRTD7jIbBLUJVyQMKWecpdVMhl2JrQ2LafWPY
wovHWcer0C0MTDlUjcfCYLjkrNTG5nRLQsyFzMVD/CIVPV3U4gsxZuNPtYpgT21b
FtnI0WII/efVfi7tz2k79fjk+gllP4cMIJG2OIJWcHlmmIo6NjQrG/OToJAxc2/5
r54aXU1eCa8D14iuVcxcyMFwCXJAMup7BvOSsQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAxXMxizIjGPIvKyFrbOh2yOApZPMB8GA1UdIwQYMBaAFNlt0rdxZ8Ifkt4C
7oZhPR3HmRvpMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGNlMGM4
ZThmMGFlNzYwNGI0MmVhZWQ2NGEwZjk5NmNmODJhNGI0MS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZGY1Y2UwMjAtYTBhZi00ZTE1LTg5MDUtM2VkNGU3
MzY3MGExLzAxOWQ1NTdlNGJmYmJlMjczZmI5MTk2OTI0YWZiZDEzNzg3MzI0N2Iu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kZjVjZTAyMC1hMGFmLTRlMTUtODkwNS0zZWQ0
ZTczNjcwYTEvZGNlMGM4ZThmMGFlNzYwNGI0MmVhZWQ2NGEwZjk5NmNmODJhNGI0
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC2jFTANBgkqhkiG9w0BAQsFAAOCAQEALcRvlzRBhNyI0k6j
5UPY2EDEHTDpSz1J3IOvxFdrBn5Q0wMq51rILxbQi7hWqA23HfGSRi7l7pchDtiM
YNmGYrFre9wdI6qh3QCPoZKT2K9zK7VFduXyW2RxKWRo+3ZJg2VeZbcnIWs4TMTv
mtVDG8pXH2AUpA3b3gz0Mdvz/3Oy+Hlu0cpGSJ74dfcVxmsBpMuWGabKERsHd5dr
BtkYsaGdkjCLCxdHXmv+NfWtnSsevb8INnmniiFmLmjLDudnLa7NR9/qmvUsQy9o
hxDxPFav1RE8RWvdT7DHOp3pmaaV1sX3HuCTgpX2MGfGfj1oiDRFgyHKX6vWSeKW
AJWbow==
-----END CERTIFICATE-----
Generated at Mon Sep 18 16:45:25 2023 by rpki-client on console-fra.rpki-client.org