Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e0ed41fd-45ac-4020-bbdf-85d4e0064999/c7a9db57e19e8b3ad3d2aed9200b2ec9226499ab.roa
File:                     c7a9db57e19e8b3ad3d2aed9200b2ec9226499ab.roa (raw, json)
Hash identifier:          XlJa8m640lIH8WnuZpU7VqzWvzjXmS3ry3AmOgfwAQY=
Subject key identifier:   71:2C:80:EA:37:D3:E5:BF:7D:CA:3B:FE:D4:5A:CB:63:74:21:DA:4F
Certificate issuer:       /CN=6adbd36382f8fdc7486124fdd6ad414b2241421a
Certificate serial:       0F77
Authority key identifier: 0C:EF:93:E8:59:71:2C:AE:2C:1A:BC:81:2A:11:35:1F:FF:51:0C:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6adbd36382f8fdc7486124fdd6ad414b2241421a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e0ed41fd-45ac-4020-bbdf-85d4e0064999/c7a9db57e19e8b3ad3d2aed9200b2ec9226499ab.roa
Signing time:             Wed 20 Jul 2022 19:00:32 +0000
ROA not before:           Wed 20 Jul 2022 03:00:00 +0000
ROA not after:            Sat 20 Jul 2024 03:00:00 +0000
asID:                     272141
IP address blocks:        45.171.164.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Sat 09 Mar 2024 13:35:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3959 (0xf77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6adbd36382f8fdc7486124fdd6ad414b2241421a
        Validity
            Not Before: Jul 20 03:00:00 2022 GMT
            Not After : Jul 20 03:00:00 2024 GMT
        Subject: CN=c7a9db57e19e8b3ad3d2aed9200b2ec9226499ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6e:c8:5a:99:2e:f9:a9:ea:f4:fb:d9:b2:3d:
                    23:f8:e2:47:ee:dc:9f:2f:03:37:43:17:16:0e:28:
                    42:4a:ab:a1:27:9c:a4:51:39:c6:96:42:c3:c1:6d:
                    d8:ba:40:c1:be:f5:70:65:8f:1b:d9:71:58:d8:5d:
                    e3:fb:65:f7:f1:3b:51:51:50:38:7e:a8:43:73:c9:
                    e4:fc:96:31:c8:95:f8:db:a6:04:d7:8e:8f:11:23:
                    1b:01:f7:5d:a4:b0:53:b9:9b:ed:8f:78:c6:cc:5d:
                    c7:0e:42:d7:ce:d1:8c:cd:be:b1:a9:84:28:35:f1:
                    ea:06:87:50:49:e6:0e:65:15:d2:f5:7d:e6:97:61:
                    62:c9:9b:ad:c0:5d:ae:64:3b:c8:4e:19:43:76:c8:
                    15:48:13:e3:77:48:05:9b:23:e5:35:3d:fe:db:86:
                    cb:cf:63:0a:a8:12:a8:57:82:c9:20:ef:fd:fb:32:
                    96:d2:12:29:a5:88:d0:44:60:82:66:e8:52:34:6a:
                    e9:31:18:49:ff:a5:02:a5:e4:09:94:85:6b:d0:17:
                    07:0a:e3:9f:93:34:72:fd:ca:c5:87:5f:69:63:2c:
                    ea:46:2f:5c:03:5d:aa:f3:22:31:7a:13:9c:bc:04:
                    f6:58:26:e5:d0:05:0f:f6:28:9e:9e:87:b4:05:2e:
                    7b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:2C:80:EA:37:D3:E5:BF:7D:CA:3B:FE:D4:5A:CB:63:74:21:DA:4F
            X509v3 Authority Key Identifier:
                keyid:0C:EF:93:E8:59:71:2C:AE:2C:1A:BC:81:2A:11:35:1F:FF:51:0C:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6adbd36382f8fdc7486124fdd6ad414b2241421a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e0ed41fd-45ac-4020-bbdf-85d4e0064999/c7a9db57e19e8b3ad3d2aed9200b2ec9226499ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e0ed41fd-45ac-4020-bbdf-85d4e0064999/6adbd36382f8fdc7486124fdd6ad414b2241421a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:5b:0f:74:a1:e8:75:0c:82:86:82:f7:85:9e:0d:1a:6c:8e:
         55:c4:b3:88:d3:aa:5b:7b:1d:ed:6d:8f:69:42:9a:5d:5a:4d:
         b1:b7:cf:24:f7:c5:27:99:53:92:1a:7e:6d:a1:1e:59:05:48:
         46:35:fc:34:bf:5f:60:61:6d:80:24:8a:13:d3:05:7f:aa:fd:
         02:0f:cc:fe:35:2f:3d:34:f1:67:d2:c5:5d:d6:83:70:79:64:
         18:4a:d7:35:cd:c6:2e:cb:c1:82:c9:9e:83:2d:80:49:99:99:
         c8:26:09:f9:0e:e2:43:96:0a:6a:6e:f5:e5:7c:51:40:d1:e6:
         cf:84:87:16:10:01:e0:96:90:72:dd:d3:fd:43:57:35:5e:26:
         98:7e:f5:d8:92:51:64:6c:b4:17:72:11:ec:75:ff:96:25:90:
         b9:66:d5:4e:c9:3a:8f:fe:1d:56:2b:61:5e:80:5d:84:76:38:
         e9:30:d2:f3:2a:2e:b6:e8:39:42:aa:54:bd:0a:a2:2a:97:9e:
         6b:aa:a4:64:50:e5:96:3c:5b:4d:fd:91:db:3b:6a:39:7f:54:
         ca:0d:a1:d1:db:9c:44:a8:3a:e6:b2:31:a3:1e:1b:b6:e6:1d:
         7e:1a:99:49:83:31:57:d3:f3:c7:d5:3b:4a:7b:d2:7a:36:4d:
         d8:9b:db:7a
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICD3cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNmFk
YmQzNjM4MmY4ZmRjNzQ4NjEyNGZkZDZhZDQxNGIyMjQxNDIxYTAeFw0yMjA3MjAw
MzAwMDBaFw0yNDA3MjAwMzAwMDBaMDMxMTAvBgNVBAMTKGM3YTlkYjU3ZTE5ZThi
M2FkM2QyYWVkOTIwMGIyZWM5MjI2NDk5YWIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCPbshamS75qer0+9myPSP44kfu3J8vAzdDFxYOKEJKq6EnnKRR
OcaWQsPBbdi6QMG+9XBljxvZcVjYXeP7ZffxO1FRUDh+qENzyeT8ljHIlfjbpgTX
jo8RIxsB912ksFO5m+2PeMbMXccOQtfO0YzNvrGphCg18eoGh1BJ5g5lFdL1feaX
YWLJm63AXa5kO8hOGUN2yBVIE+N3SAWbI+U1Pf7bhsvPYwqoEqhXgskg7/37MpbS
EimliNBEYIJm6FI0aukxGEn/pQKl5AmUhWvQFwcK45+TNHL9ysWHX2ljLOpGL1wD
XarzIjF6E5y8BPZYJuXQBQ/2KJ6eh7QFLnudAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUcSyA6jfT5b99yjv+1FrLY3Qh2k8wHwYDVR0jBBgwFoAUDO+T6FlxLK4sGryB
KhE1H/9RDAowDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS82YWRiZDM2
MzgyZjhmZGM3NDg2MTI0ZmRkNmFkNDE0YjIyNDE0MjFhLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9lMGVkNDFmZC00NWFjLTQwMjAtYmJkZi04NWQ0ZTAw
NjQ5OTkvYzdhOWRiNTdlMTllOGIzYWQzZDJhZWQ5MjAwYjJlYzkyMjY0OTlhYi5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2UwZWQ0MWZkLTQ1YWMtNDAyMC1iYmRmLTg1ZDRl
MDA2NDk5OS82YWRiZDM2MzgyZjhmZGM3NDg2MTI0ZmRkNmFkNDE0YjIyNDE0MjFh
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQCLaukMA0GCSqGSIb3DQEBCwUAA4IBAQAXWw90oeh1DIKGgveF
ng0abI5VxLOI06pbex3tbY9pQppdWk2xt88k98UnmVOSGn5toR5ZBUhGNfw0v19g
YW2AJIoT0wV/qv0CD8z+NS89NPFn0sVd1oNweWQYStc1zcYuy8GCyZ6DLYBJmZnI
Jgn5DuJDlgpqbvXlfFFA0ebPhIcWEAHglpBy3dP9Q1c1XiaYfvXYklFkbLQXchHs
df+WJZC5ZtVOyTqP/h1WK2FegF2EdjjpMNLzKi626DlCqlS9CqIql55rqqRkUOWW
PFtN/ZHbO2o5f1TKDaHR25xEqDrmsjGjHhu25h1+GplJgzFX0/PH1TtKe9J6Nk3Y
m9t6
-----END CERTIFICATE-----
Generated at Sat Mar 9 17:14:11 2024 by rpki-client on console-ams.rpki-client.org