Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e1452bed-26a6-4298-acd3-09e4bbc44542/af1523ec53ed2a1e5afb898499a2d42052d33876.roa
File:                     af1523ec53ed2a1e5afb898499a2d42052d33876.roa (raw, json)
Hash identifier:          LWFqtxXAwuRroFe18frS/o5/eX+StqXD3WmxIvdiv7k=
Subject key identifier:   8E:7C:0B:9E:49:D0:DB:1F:15:BD:AF:DD:41:C4:27:BE:2A:BF:31:CB
Certificate issuer:       /CN=d53e5113cbffa42dda2928ee24c7eff1286a8644
Certificate serial:       0BD1D7
Authority key identifier: 0B:93:4B:5B:20:38:C8:7F:FA:AD:1E:37:5F:84:5F:AB:2E:82:ED:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d53e5113cbffa42dda2928ee24c7eff1286a8644.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e1452bed-26a6-4298-acd3-09e4bbc44542/af1523ec53ed2a1e5afb898499a2d42052d33876.roa
Signing time:             Wed 24 Mar 2021 14:40:30 +0000
ROA not before:           Wed 24 Mar 2021 14:40:30 +0000
ROA not after:            Tue 24 Mar 2026 14:40:30 +0000
asID:                     267849
IP address blocks:        45.175.166.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 774615 (0xbd1d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d53e5113cbffa42dda2928ee24c7eff1286a8644
        Validity
            Not Before: Mar 24 14:40:30 2021 GMT
            Not After : Mar 24 14:40:30 2026 GMT
        Subject: CN=af1523ec53ed2a1e5afb898499a2d42052d33876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bd:3b:1c:6b:ea:8a:f1:be:33:90:6a:36:75:
                    c7:93:88:4a:9a:73:e7:ec:0b:46:8c:29:81:44:fa:
                    e7:fe:6b:21:95:7e:75:8a:1e:fd:e3:b5:da:0c:d5:
                    2c:8c:17:de:b1:dc:0d:f0:24:93:b5:c2:54:97:f3:
                    bc:d6:d1:9c:c1:08:cf:31:70:f3:79:19:ef:19:00:
                    3a:3a:2f:47:e8:28:6d:b8:b8:a6:fe:ca:e0:8d:68:
                    f0:08:47:43:18:c7:c3:dd:b3:6c:f2:c4:19:e3:36:
                    fa:05:43:f3:b8:da:a0:35:3f:84:54:e1:3e:68:0b:
                    aa:85:09:c2:41:ec:16:d1:c7:c0:da:27:10:ca:2c:
                    5b:28:7e:67:d0:60:0d:0d:e7:43:69:7f:8f:9d:5c:
                    d0:38:66:ed:d7:81:07:df:ed:c9:11:41:e1:6e:9d:
                    77:75:78:e0:f2:64:b1:c7:e0:c0:5c:c9:c6:7e:2a:
                    53:f2:a9:cb:03:c2:41:6e:3d:91:0d:87:3f:df:d1:
                    98:bb:64:2a:2e:34:3a:83:e5:60:57:60:26:a4:c3:
                    ca:a5:de:53:57:fe:26:d0:dc:fc:36:bd:03:d7:e9:
                    69:31:d8:e1:28:c7:df:14:2f:c9:da:18:3b:0e:a2:
                    c2:eb:38:55:14:1c:2b:5d:2b:15:a3:0b:8f:5b:a9:
                    d5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:7C:0B:9E:49:D0:DB:1F:15:BD:AF:DD:41:C4:27:BE:2A:BF:31:CB
            X509v3 Authority Key Identifier:
                keyid:0B:93:4B:5B:20:38:C8:7F:FA:AD:1E:37:5F:84:5F:AB:2E:82:ED:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d53e5113cbffa42dda2928ee24c7eff1286a8644.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e1452bed-26a6-4298-acd3-09e4bbc44542/af1523ec53ed2a1e5afb898499a2d42052d33876.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e1452bed-26a6-4298-acd3-09e4bbc44542/d53e5113cbffa42dda2928ee24c7eff1286a8644.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:70:f9:28:d2:03:79:5b:5b:a3:c8:fd:d9:05:ef:1e:5b:e5:
         cd:50:52:f4:af:89:a4:22:e9:aa:2e:de:b1:1d:c9:26:38:26:
         0e:86:8d:3f:91:92:a8:5a:d5:77:3d:7b:a2:48:8e:c9:19:a0:
         a7:79:c3:eb:c6:ae:26:b4:3d:56:54:2b:21:9a:38:c4:bc:2c:
         8c:13:30:5c:64:b2:e6:4a:bb:3c:2e:03:e3:04:74:19:b3:74:
         44:fb:64:fe:79:4c:d9:e0:d0:ce:41:6c:59:45:0e:38:3d:a7:
         56:fa:b7:12:65:de:e5:76:30:c4:78:b9:bf:a5:94:21:a4:c8:
         8a:08:5e:07:8f:ee:8b:7d:a4:53:9e:57:a3:85:c0:25:2b:29:
         f8:b5:85:31:57:3c:60:82:6a:5e:08:6d:01:4f:08:e7:b6:3d:
         18:d0:ac:41:89:f9:94:52:74:df:43:93:b7:4f:99:cd:47:cd:
         2e:1c:7b:cf:6d:66:2f:fd:ea:61:14:1f:be:7c:b9:f8:b2:58:
         5f:37:ae:51:52:e2:b2:b8:20:47:dd:58:77:7f:d6:45:b3:d7:
         8d:c5:5e:11:52:20:56:a8:f3:98:92:bd:ca:8a:52:c5:86:cd:
         94:aa:20:6d:10:f7:a5:6e:60:b8:51:a8:65:00:73:6f:69:77:
         34:bc:82:2f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDC9HXMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ1
M2U1MTEzY2JmZmE0MmRkYTI5MjhlZTI0YzdlZmYxMjg2YTg2NDQwHhcNMjEwMzI0
MTQ0MDMwWhcNMjYwMzI0MTQ0MDMwWjAzMTEwLwYDVQQDEyhhZjE1MjNlYzUzZWQy
YTFlNWFmYjg5ODQ5OWEyZDQyMDUyZDMzODc2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApL07HGvqivG+M5BqNnXHk4hKmnPn7AtGjCmBRPrn/mshlX51
ih7947XaDNUsjBfesdwN8CSTtcJUl/O81tGcwQjPMXDzeRnvGQA6Oi9H6ChtuLim
/srgjWjwCEdDGMfD3bNs8sQZ4zb6BUPzuNqgNT+EVOE+aAuqhQnCQewW0cfA2icQ
yixbKH5n0GANDedDaX+PnVzQOGbt14EH3+3JEUHhbp13dXjg8mSxx+DAXMnGfipT
8qnLA8JBbj2RDYc/39GYu2QqLjQ6g+VgV2AmpMPKpd5TV/4m0Nz8Nr0D1+lpMdjh
KMffFC/J2hg7DqLC6zhVFBwrXSsVowuPW6nVMwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFI58C55J0NsfFb2v3UHEJ74qvzHLMB8GA1UdIwQYMBaAFAuTS1sgOMh/+q0e
N1+EX6sugu1dMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDUzZTUx
MTNjYmZmYTQyZGRhMjkyOGVlMjRjN2VmZjEyODZhODY0NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTE0NTJiZWQtMjZhNi00Mjk4LWFjZDMtMDllNGJi
YzQ0NTQyL2FmMTUyM2VjNTNlZDJhMWU1YWZiODk4NDk5YTJkNDIwNTJkMzM4NzYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lMTQ1MmJlZC0yNmE2LTQyOTgtYWNkMy0wOWU0
YmJjNDQ1NDIvZDUzZTUxMTNjYmZmYTQyZGRhMjkyOGVlMjRjN2VmZjEyODZhODY0
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC2vpjANBgkqhkiG9w0BAQsFAAOCAQEAJ3D5KNIDeVtbo8j9
2QXvHlvlzVBS9K+JpCLpqi7esR3JJjgmDoaNP5GSqFrVdz17okiOyRmgp3nD68au
JrQ9VlQrIZo4xLwsjBMwXGSy5kq7PC4D4wR0GbN0RPtk/nlM2eDQzkFsWUUOOD2n
Vvq3EmXe5XYwxHi5v6WUIaTIigheB4/ui32kU55Xo4XAJSsp+LWFMVc8YIJqXght
AU8I57Y9GNCsQYn5lFJ030OTt0+ZzUfNLhx7z21mL/3qYRQfvny5+LJYXzeuUVLi
srggR91Yd3/WRbPXjcVeEVIgVqjzmJK9yopSxYbNlKogbRD3pW5guFGoZQBzb2l3
NLyCLw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:42 2023 by rpki-client on console-fra.rpki-client.org