Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e3617b10-3c45-4925-bbdf-6372eaa49bb4/6fbf5c1fbf0503d5ae97efdca310263c5740f7cf.roa
File:                     6fbf5c1fbf0503d5ae97efdca310263c5740f7cf.roa (raw, json)
Hash identifier:          206JFKNgQ19oYuGN2qkMlvelOVOjezesp7rHcnWP13I=
Subject key identifier:   B8:12:D1:C5:D8:CC:83:92:1A:7D:64:74:D4:10:4F:4F:1B:9A:FF:A3
Certificate issuer:       /CN=bf01c8b5c661e4a83900b9cf88863f17432603dd
Certificate serial:       0D6D18
Authority key identifier: F2:9E:A1:22:8F:3A:E6:32:66:6D:60:45:B3:0D:F9:6D:C4:B7:01:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf01c8b5c661e4a83900b9cf88863f17432603dd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e3617b10-3c45-4925-bbdf-6372eaa49bb4/6fbf5c1fbf0503d5ae97efdca310263c5740f7cf.roa
Signing time:             Wed 19 Apr 2023 15:19:13 +0000
ROA not before:           Tue 18 Apr 2023 15:19:12 +0000
ROA not after:            Sat 19 Apr 2025 15:19:12 +0000
asID:                     263725
IP address blocks:        45.182.21.0/24 maxlen: 24
                          45.182.22.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 879896 (0xd6d18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf01c8b5c661e4a83900b9cf88863f17432603dd
        Validity
            Not Before: Apr 18 15:19:12 2023 GMT
            Not After : Apr 19 15:19:12 2025 GMT
        Subject: CN=6fbf5c1fbf0503d5ae97efdca310263c5740f7cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:21:6d:f1:39:cb:d5:ff:0d:cc:77:58:7e:5a:
                    37:5c:94:8c:54:76:f6:b2:20:1b:c9:3b:87:cd:3e:
                    ec:6c:b9:d0:cb:ee:33:6e:7b:9e:c8:d6:2d:49:c8:
                    cd:a1:be:16:4b:a1:08:10:b1:0c:d8:08:d5:49:bd:
                    57:75:2e:56:5e:03:ec:be:c0:3e:20:18:65:a8:f4:
                    7d:e8:28:cc:84:fc:63:9c:df:9b:ca:79:a3:96:2f:
                    1c:c6:a6:83:5a:06:16:88:56:cf:a9:9e:21:06:98:
                    14:03:45:fc:c6:68:d9:39:9c:e7:3c:45:dc:e9:d7:
                    46:1f:90:f2:1b:dd:29:13:c9:1b:2d:c3:fb:e0:4b:
                    86:d9:40:db:3a:7d:6b:52:d0:ed:1f:be:a6:b8:00:
                    a1:8a:9c:95:e8:30:c8:23:cf:f8:a8:a1:b3:3f:01:
                    9e:e7:cf:4b:dd:24:a6:27:fa:fa:2c:66:2e:68:55:
                    0d:7f:c5:4e:12:9d:79:1c:a2:48:f5:4f:50:3c:75:
                    b5:70:de:bd:a3:25:be:fc:c1:ba:19:e3:ef:6c:04:
                    67:22:fd:b8:9d:e2:89:07:f1:19:f3:b2:ef:25:88:
                    ec:cd:5d:cd:61:62:79:c0:9b:5a:bd:61:c3:05:97:
                    96:cf:89:39:42:42:65:fe:e6:51:7a:f8:58:f8:a3:
                    71:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:12:D1:C5:D8:CC:83:92:1A:7D:64:74:D4:10:4F:4F:1B:9A:FF:A3
            X509v3 Authority Key Identifier:
                keyid:F2:9E:A1:22:8F:3A:E6:32:66:6D:60:45:B3:0D:F9:6D:C4:B7:01:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf01c8b5c661e4a83900b9cf88863f17432603dd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e3617b10-3c45-4925-bbdf-6372eaa49bb4/6fbf5c1fbf0503d5ae97efdca310263c5740f7cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e3617b10-3c45-4925-bbdf-6372eaa49bb4/bf01c8b5c661e4a83900b9cf88863f17432603dd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.21.0-45.182.23.255

    Signature Algorithm: sha256WithRSAEncryption
         4d:1a:d9:d9:56:39:fa:9f:ff:d4:58:0d:09:fa:e0:58:36:46:
         00:07:d7:80:a9:af:d5:ba:a3:05:d9:16:31:be:2d:9d:d9:ba:
         bf:92:fd:6d:85:76:17:3b:ec:06:c1:4c:38:7e:28:07:0d:79:
         1e:cc:df:c7:cb:9b:16:f3:d7:e1:d2:3d:bc:9c:e0:cf:82:8a:
         20:07:2e:ed:6e:35:88:04:bc:a4:c8:83:db:91:d9:66:ef:60:
         b7:0c:eb:1b:d5:99:9a:f3:4f:fa:d5:c5:c4:71:41:5f:7d:ec:
         0a:0e:78:38:97:1b:fe:19:2d:47:85:60:42:9a:13:49:e4:ce:
         0b:9d:be:0d:34:21:07:ed:e9:d9:1c:1d:6a:d4:56:59:6f:e6:
         05:11:05:30:9d:63:9a:6f:96:9d:d5:8e:1c:c9:af:f8:0b:88:
         6b:f2:63:b9:f1:64:5e:42:96:b6:ff:79:41:a5:31:aa:2e:cd:
         67:ae:3e:89:76:be:8f:98:01:82:32:22:4c:37:85:fa:e1:40:
         62:62:a1:9b:9f:46:2a:33:d9:cf:12:28:0c:e6:b8:37:ba:a8:
         a9:ef:6f:11:68:60:a0:5d:f4:3a:63:8e:e1:db:a6:a7:23:9c:
         ab:0b:cc:88:09:92:87:30:63:b7:a2:57:52:dd:0d:a5:ec:a8:
         78:05:11:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:42 2023 by rpki-client on console-fra.rpki-client.org