Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e2285186-1a7e-4650-989e-75c9c67f0b01/aacd7061fe2cdf806d7b16a12d957f253bdac22c.roa
File:                     aacd7061fe2cdf806d7b16a12d957f253bdac22c.roa (raw, json)
Hash identifier:          boSuP0wF8Kpt/dHmbe/Cat5ZYC18s6la81E0rBszAzs=
Subject key identifier:   56:CE:28:89:1E:09:86:81:05:EE:30:A3:2C:6B:7C:3E:7F:EF:B3:53
Certificate issuer:       /CN=fd73397c8b35c9d5277acc116720117fd7bd3019
Certificate serial:       11303C
Authority key identifier: 42:D7:DB:F5:52:44:E1:80:47:26:DE:07:0F:65:8E:F6:A6:AA:D4:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd73397c8b35c9d5277acc116720117fd7bd3019.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e2285186-1a7e-4650-989e-75c9c67f0b01/aacd7061fe2cdf806d7b16a12d957f253bdac22c.roa
Signing time:             Tue 21 Sep 2021 23:03:54 +0000
ROA not before:           Tue 21 Sep 2021 03:00:00 +0000
ROA not after:            Thu 21 Sep 2023 03:00:00 +0000
asID:                     265826
IP address blocks:        45.70.228.0/22 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1126460 (0x11303c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd73397c8b35c9d5277acc116720117fd7bd3019
        Validity
            Not Before: Sep 21 03:00:00 2021 GMT
            Not After : Sep 21 03:00:00 2023 GMT
        Subject: CN=aacd7061fe2cdf806d7b16a12d957f253bdac22c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:35:13:c1:e6:81:55:62:a9:98:b2:a1:0d:d9:
                    52:e9:d4:5a:c7:a7:e9:38:65:fa:a8:d2:d2:b5:7f:
                    af:54:0f:62:d4:63:7b:72:43:e6:d3:33:a2:f4:08:
                    c9:b3:3e:80:05:3d:cc:02:af:ae:3d:84:e6:a5:7d:
                    84:9a:ad:c3:42:96:57:bb:31:ec:57:28:71:51:91:
                    3a:e6:4a:f4:35:8d:e1:12:6a:dd:17:8b:a4:53:02:
                    27:25:67:5d:4e:91:e8:50:34:fd:d1:06:ed:b5:fe:
                    fa:49:cb:bf:3f:38:ce:c2:d9:16:3a:7e:18:38:2c:
                    80:01:48:2c:dd:d3:c4:07:eb:65:cd:49:1b:73:04:
                    a7:39:83:f9:ab:5c:c9:32:0c:db:22:dd:db:57:e7:
                    db:71:2e:79:b6:4a:3c:ed:b7:79:e3:61:8e:df:56:
                    72:b7:b3:70:ed:04:88:c6:bb:aa:d4:50:d6:a5:c6:
                    2e:09:00:2a:14:ca:83:df:36:eb:c4:52:07:4d:c1:
                    3c:d4:2f:67:95:9e:0c:9c:c6:6c:a1:1d:e6:7f:d0:
                    6e:20:a1:26:41:c1:55:97:ff:7f:7f:91:f8:37:76:
                    a0:c7:a2:25:6f:7b:08:63:9d:95:36:df:bc:63:2c:
                    dd:b8:53:91:a3:49:cb:03:04:3a:06:8b:7a:f0:fd:
                    ee:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:CE:28:89:1E:09:86:81:05:EE:30:A3:2C:6B:7C:3E:7F:EF:B3:53
            X509v3 Authority Key Identifier:
                keyid:42:D7:DB:F5:52:44:E1:80:47:26:DE:07:0F:65:8E:F6:A6:AA:D4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd73397c8b35c9d5277acc116720117fd7bd3019.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e2285186-1a7e-4650-989e-75c9c67f0b01/aacd7061fe2cdf806d7b16a12d957f253bdac22c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e2285186-1a7e-4650-989e-75c9c67f0b01/fd73397c8b35c9d5277acc116720117fd7bd3019.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:aa:f5:7a:ee:3c:10:2e:71:b9:8b:5d:75:b7:91:e6:ac:b9:
         f6:f9:6e:c3:3f:0d:59:5e:aa:ff:67:d7:16:69:26:cf:23:d3:
         39:a8:8c:88:2a:cc:70:d5:ed:b1:28:16:63:17:21:0e:c6:bb:
         a9:0a:c9:4f:17:70:80:2b:ed:e0:fb:0e:4a:f9:c2:40:20:6f:
         22:90:2d:1c:cb:c7:50:78:82:37:59:d2:44:57:ef:1d:3d:69:
         06:47:0b:03:f2:26:0c:69:8c:4d:0c:72:bf:fd:64:c4:ec:34:
         9b:75:f0:8a:a7:75:c4:f7:fe:2d:69:45:99:5b:ca:1c:04:72:
         1e:68:f4:30:7f:1b:7b:06:fa:09:68:d1:88:32:a8:4a:0f:38:
         50:92:ef:3c:11:dc:e0:bf:c3:1c:4e:95:de:db:3f:be:39:f7:
         97:02:db:c1:b4:f1:a4:e6:42:73:7b:d4:f4:b5:da:c1:d7:fa:
         fe:17:2b:46:2c:77:8e:20:57:dc:4f:05:4f:3f:09:1e:18:50:
         e4:f0:11:85:5a:64:c7:2a:a1:ae:18:a3:b4:f2:af:db:fb:8d:
         65:c8:76:60:21:6c:dc:19:48:59:50:c2:8a:af:fa:ef:ce:83:
         57:72:81:db:d3:63:38:ee:11:ee:7f:cb:ca:dd:8a:81:55:c9:
         22:7c:3b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 20 08:54:10 2023 by rpki-client on console-fra.rpki-client.org