Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e2d960eb-09cf-44a8-8a44-b0e9b0c804cc/89ffa15f7343502a8a7b47250d202071cfc699b4.roa
File:                     89ffa15f7343502a8a7b47250d202071cfc699b4.roa (raw, json)
Hash identifier:          m+UN/9fGVsEfPnmJUG+QAagzAX5McHDsA7e8IrF7lwk=
Subject key identifier:   BC:AF:CA:0C:A1:E7:4D:4A:EE:86:5D:6D:7D:5F:AE:89:FB:5B:78:8F
Certificate issuer:       /CN=ec3a7f16dd83d86bd50b1bede5e7fd95dbf3eb8b
Certificate serial:       0754AE
Authority key identifier: 6E:2B:40:C7:67:8A:D0:60:92:18:60:CF:8B:3E:5A:3E:D2:DD:35:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec3a7f16dd83d86bd50b1bede5e7fd95dbf3eb8b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e2d960eb-09cf-44a8-8a44-b0e9b0c804cc/89ffa15f7343502a8a7b47250d202071cfc699b4.roa
Signing time:             Wed 24 Mar 2021 14:29:05 +0000
ROA not before:           Wed 24 Mar 2021 14:29:05 +0000
ROA not after:            Tue 24 Mar 2026 14:29:05 +0000
asID:                     266703
IP address blocks:        45.230.80.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 480430 (0x754ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3a7f16dd83d86bd50b1bede5e7fd95dbf3eb8b
        Validity
            Not Before: Mar 24 14:29:05 2021 GMT
            Not After : Mar 24 14:29:05 2026 GMT
        Subject: CN=89ffa15f7343502a8a7b47250d202071cfc699b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:04:e4:67:c5:6a:16:61:3e:d0:84:65:c9:65:
                    68:f6:7b:b1:75:8a:c3:89:06:4d:4b:db:ed:5e:ff:
                    5f:9b:cc:4c:55:ac:1f:2d:c7:0d:19:0f:12:be:d0:
                    c9:a8:55:03:51:5c:02:10:dc:c1:9e:81:22:32:a1:
                    b5:80:bb:62:df:e6:76:b5:a2:5c:f3:a7:01:85:92:
                    75:3e:50:3e:39:04:fc:28:3a:43:40:ab:9c:57:3b:
                    b6:11:5e:2c:c4:84:76:82:35:2a:74:43:f2:e9:9a:
                    fa:2d:a3:d8:0e:79:33:01:81:04:9e:44:bb:3f:f4:
                    1d:a1:34:ab:5b:f1:8c:b1:49:e9:ab:e0:48:7b:87:
                    bc:a9:c1:a7:9e:66:ae:a5:09:7a:87:51:36:6b:9e:
                    6e:82:30:1f:dd:96:cd:20:bd:c7:95:26:ed:e3:c4:
                    ea:61:27:15:7f:f6:a2:24:54:d4:7a:65:ba:28:dd:
                    03:82:9c:fd:b1:3a:0c:c9:a8:ec:d4:3e:ab:08:81:
                    56:df:1c:c2:ab:56:c7:7c:41:14:b1:2a:46:d3:aa:
                    b2:5a:75:ae:8c:76:c4:2b:07:ff:2f:f1:45:3f:31:
                    ec:04:47:05:c1:8c:e1:f0:61:c1:32:06:72:d3:4d:
                    a9:27:3b:50:6c:53:f1:5c:b4:f4:53:7f:d8:f2:5b:
                    46:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:AF:CA:0C:A1:E7:4D:4A:EE:86:5D:6D:7D:5F:AE:89:FB:5B:78:8F
            X509v3 Authority Key Identifier:
                keyid:6E:2B:40:C7:67:8A:D0:60:92:18:60:CF:8B:3E:5A:3E:D2:DD:35:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec3a7f16dd83d86bd50b1bede5e7fd95dbf3eb8b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e2d960eb-09cf-44a8-8a44-b0e9b0c804cc/89ffa15f7343502a8a7b47250d202071cfc699b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e2d960eb-09cf-44a8-8a44-b0e9b0c804cc/ec3a7f16dd83d86bd50b1bede5e7fd95dbf3eb8b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:1a:c4:ce:7e:53:e9:2f:e1:d7:d3:a5:36:14:09:3d:dd:b8:
         88:89:88:77:b6:46:5e:b9:c8:e9:70:9a:bc:65:49:70:db:2f:
         da:6e:54:58:44:ac:10:e8:b2:fd:95:b9:50:4a:ec:e3:5b:89:
         10:f5:b8:63:46:96:2e:0a:4a:e1:35:7f:ff:96:85:cd:25:ca:
         e0:2c:28:3f:58:2d:c4:a1:5f:5a:01:05:20:4f:95:8a:31:ce:
         8d:01:5f:de:a1:24:c2:c7:84:e9:f1:86:7d:f0:a0:e6:8c:ee:
         a5:ae:f1:43:68:3d:f3:aa:20:4e:cc:54:e8:5b:f5:e2:38:24:
         f6:d3:0e:da:09:6e:e6:a5:f6:b4:fc:24:7a:1c:39:9a:4f:d5:
         12:68:48:a7:0f:82:37:9b:34:72:07:34:b9:98:2b:35:22:0d:
         84:8f:ea:02:de:79:e0:c6:f1:88:d9:d2:89:d1:28:51:e4:2f:
         b6:3e:a4:23:8d:4c:ca:05:01:ea:11:e6:43:6b:d5:a7:23:41:
         3b:04:6b:b7:31:a0:47:d9:04:66:58:c5:a3:54:19:9e:7f:b9:
         8e:91:a2:bc:07:9b:fc:1d:e2:1f:2d:1f:4b:12:a7:5d:8c:5a:
         88:2e:b2:00:38:0e:77:3b:84:e6:53:ff:66:1f:be:f4:2c:27:
         6e:45:2e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 12 15:29:37 2023 by rpki-client on console-fra.rpki-client.org