Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/df5ce020-a0af-4e15-8905-3ed4e73670a1/cd7d7d6b5822bb7c426e338172bb71bfd398a30b.roa
File:                     cd7d7d6b5822bb7c426e338172bb71bfd398a30b.roa (raw, json)
Hash identifier:          fShSxQruoJicCflLalIJZIEJC0N4n3b+Y0nHd6FLnKQ=
Subject key identifier:   68:F6:4B:DC:39:97:BE:30:DF:80:0B:9E:ED:D9:DF:4C:0C:5C:4E:E7
Certificate issuer:       /CN=dce0c8e8f0ae7604b42eaed64a0f996cf82a4b41
Certificate serial:       F90A
Authority key identifier: D9:6D:D2:B7:71:67:C2:1F:92:DE:02:EE:86:61:3D:1D:C7:99:1B:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dce0c8e8f0ae7604b42eaed64a0f996cf82a4b41.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/df5ce020-a0af-4e15-8905-3ed4e73670a1/cd7d7d6b5822bb7c426e338172bb71bfd398a30b.roa
Signing time:             Mon 01 Nov 2021 21:48:41 +0000
ROA not before:           Mon 01 Nov 2021 03:00:00 +0000
ROA not after:            Sun 01 Nov 2026 03:00:00 +0000
asID:                     267689
IP address blocks:        45.163.23.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63754 (0xf90a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dce0c8e8f0ae7604b42eaed64a0f996cf82a4b41
        Validity
            Not Before: Nov  1 03:00:00 2021 GMT
            Not After : Nov  1 03:00:00 2026 GMT
        Subject: CN=cd7d7d6b5822bb7c426e338172bb71bfd398a30b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0d:2e:b9:89:af:ed:b5:20:09:8e:6b:ea:67:
                    9e:1b:c3:d4:95:5b:08:62:a7:0a:55:2f:cc:f9:ba:
                    19:af:26:ba:2b:67:f0:a1:4c:2d:73:85:85:7b:10:
                    aa:07:c3:e7:e3:d4:d1:64:41:e9:38:8c:34:63:d1:
                    13:8c:95:2a:75:7d:77:44:ad:70:0a:99:ae:f4:a9:
                    03:01:af:54:f1:8b:a9:0a:ad:8e:0c:83:a8:bd:35:
                    93:a6:84:ca:3d:89:31:48:8d:2b:ca:3d:79:fd:9a:
                    40:4d:b6:c4:5c:84:d8:97:02:44:d8:36:f4:2a:f0:
                    d1:35:70:bf:7a:59:85:43:41:4e:1f:56:fe:59:83:
                    1e:8a:99:0e:25:ed:99:7f:e9:e3:48:d6:35:cc:df:
                    e3:db:43:91:51:f9:50:97:9d:6e:49:8f:13:14:f5:
                    13:86:21:37:4a:4e:68:2e:cb:13:ab:54:d9:30:d2:
                    01:de:14:dc:1f:dd:6c:26:9c:76:61:52:45:73:4a:
                    91:a9:d4:6d:63:f0:7e:1e:0c:ff:b1:68:fd:23:99:
                    4e:6a:d1:df:07:49:d9:8e:65:ec:8a:b5:d7:c7:0f:
                    03:60:60:c0:83:65:b8:6a:12:c3:49:d0:c5:2a:34:
                    04:c3:60:20:b0:f1:77:3f:c5:bf:ed:28:05:70:c5:
                    22:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F6:4B:DC:39:97:BE:30:DF:80:0B:9E:ED:D9:DF:4C:0C:5C:4E:E7
            X509v3 Authority Key Identifier:
                keyid:D9:6D:D2:B7:71:67:C2:1F:92:DE:02:EE:86:61:3D:1D:C7:99:1B:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dce0c8e8f0ae7604b42eaed64a0f996cf82a4b41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/df5ce020-a0af-4e15-8905-3ed4e73670a1/cd7d7d6b5822bb7c426e338172bb71bfd398a30b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/df5ce020-a0af-4e15-8905-3ed4e73670a1/dce0c8e8f0ae7604b42eaed64a0f996cf82a4b41.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:e2:75:e4:59:bf:f0:a8:f0:9a:8c:47:70:43:b1:ff:bd:be:
         9a:d8:83:86:a2:5a:4d:8b:2b:f4:ec:69:f9:14:06:69:5d:9e:
         e2:94:3c:d1:09:30:70:6b:91:f2:3d:21:a5:61:9d:34:6f:23:
         4e:b3:64:a8:77:6e:1b:3c:10:60:ca:c8:27:8e:b4:e2:ca:20:
         86:95:c3:20:54:a5:f4:10:4c:12:ce:b1:81:56:ef:ea:84:44:
         77:ec:8a:48:d2:2c:d7:e6:90:7b:45:ae:5b:a8:ef:6a:d0:27:
         6b:04:0a:18:cd:0c:00:97:6f:19:d0:82:8e:f0:2b:be:f4:ec:
         27:b2:b0:32:8c:8c:93:12:ae:9f:09:42:54:ef:91:d6:2d:b5:
         87:ad:20:1d:8d:35:1a:72:d3:36:7a:83:99:b1:b4:a1:ce:41:
         45:2f:cc:bd:88:6e:d6:a6:35:91:1e:b1:9b:00:92:9a:9a:3d:
         45:05:c2:bc:3c:93:55:9f:ee:90:7d:53:10:9d:d5:bb:3f:b2:
         80:a4:8b:0b:c5:34:52:8c:e1:31:79:86:e8:ed:45:25:a9:c0:
         0d:e7:9a:20:31:a4:af:0a:c6:36:0e:cf:6f:09:45:e3:e0:db:
         c4:be:f8:90:e0:d6:d4:aa:e2:fd:27:c8:05:f7:98:7b:a2:49:
         ba:a0:5a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 18 16:45:25 2023 by rpki-client on console-fra.rpki-client.org