Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e571b174-cc90-4dbc-8519-355b841d74db/e5d32212ee6cc2993c25cdde289224bdb5cc8a53.roa
File:                     e5d32212ee6cc2993c25cdde289224bdb5cc8a53.roa (raw, json)
Hash identifier:          FWumJt0xMdBhnsxKpZYi5izUllCvM5WOYed9NXLM48Y=
Subject key identifier:   9A:31:3B:6E:78:DC:E4:F5:29:92:92:DA:1A:45:E3:7C:A9:19:DE:D6
Certificate issuer:       /CN=581e0c9d08ecb217623b5290ee851242221cdc85
Certificate serial:       0D99D3
Authority key identifier: 80:04:EA:0A:FB:6A:C0:26:B6:FE:AC:80:48:FD:11:65:E8:63:F9:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/581e0c9d08ecb217623b5290ee851242221cdc85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e571b174-cc90-4dbc-8519-355b841d74db/e5d32212ee6cc2993c25cdde289224bdb5cc8a53.roa
Signing time:             Wed 24 Mar 2021 14:39:16 +0000
ROA not before:           Wed 24 Mar 2021 14:39:16 +0000
ROA not after:            Tue 24 Mar 2026 14:39:16 +0000
asID:                     264668
IP address blocks:        45.71.200.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 891347 (0xd99d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=581e0c9d08ecb217623b5290ee851242221cdc85
        Validity
            Not Before: Mar 24 14:39:16 2021 GMT
            Not After : Mar 24 14:39:16 2026 GMT
        Subject: CN=e5d32212ee6cc2993c25cdde289224bdb5cc8a53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f5:6c:77:7f:42:f2:f0:af:8b:fb:f3:2c:b6:
                    5d:ac:4f:45:24:38:fd:94:c2:f2:4b:65:12:01:f4:
                    5e:85:1c:40:6c:06:3e:cd:f1:3a:ed:6d:ac:a8:e7:
                    a9:81:9c:28:2a:28:ce:c9:30:d0:79:2e:c7:3a:de:
                    eb:57:e3:7c:94:af:46:e6:25:0d:39:30:31:0c:40:
                    61:bd:59:38:a2:02:ce:a1:32:3c:59:69:6d:f7:63:
                    87:4c:24:2d:1d:52:49:7f:5b:e5:21:6c:b9:96:e8:
                    f4:b1:25:8a:53:53:13:dc:89:84:58:f6:ff:75:92:
                    3f:ad:63:77:ea:11:34:64:59:4f:26:6e:e2:7a:00:
                    10:03:ea:43:38:06:13:5b:60:e0:fb:27:86:a4:26:
                    00:04:67:64:65:a8:b4:39:2f:77:e4:76:8e:97:06:
                    f9:b7:14:25:bd:c9:b4:44:3a:01:b5:57:1e:ef:8d:
                    de:10:bd:9c:49:1d:d6:bc:60:64:aa:e5:8d:37:2c:
                    72:60:1a:7e:62:08:4a:b3:70:5c:f6:11:27:6d:58:
                    a0:c5:bb:46:a6:f9:54:31:0c:5b:87:2a:22:1a:60:
                    f1:ca:a8:75:a2:96:c5:38:c3:9d:5e:be:df:2e:08:
                    ed:96:80:25:0a:ea:6b:4d:ec:e4:fc:bc:9c:68:a3:
                    e9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:31:3B:6E:78:DC:E4:F5:29:92:92:DA:1A:45:E3:7C:A9:19:DE:D6
            X509v3 Authority Key Identifier:
                keyid:80:04:EA:0A:FB:6A:C0:26:B6:FE:AC:80:48:FD:11:65:E8:63:F9:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/581e0c9d08ecb217623b5290ee851242221cdc85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e571b174-cc90-4dbc-8519-355b841d74db/e5d32212ee6cc2993c25cdde289224bdb5cc8a53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e571b174-cc90-4dbc-8519-355b841d74db/581e0c9d08ecb217623b5290ee851242221cdc85.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:0c:76:6e:78:80:b2:e0:e3:ae:ac:c5:c4:b0:49:57:5d:76:
         6b:9e:37:63:b4:99:c5:9d:fc:f0:1f:d6:ad:49:1e:7c:05:f0:
         cb:ee:23:c1:25:a9:60:eb:af:63:5e:09:fd:04:8a:35:cf:91:
         f6:70:9c:c9:bf:df:20:c3:85:4a:dc:bb:04:37:2b:85:d4:2a:
         3e:c3:bd:46:9e:5d:f1:c6:2b:2f:18:f3:3d:4b:6b:4a:c6:6f:
         7c:6b:70:ce:ba:37:21:a8:a1:63:8b:10:7f:8e:a3:66:3a:7b:
         fb:23:38:15:9f:56:7b:da:96:33:a4:a4:02:84:ec:b8:30:e5:
         2d:b7:f5:29:11:0c:cb:44:d7:76:86:16:1f:17:11:fa:58:a2:
         9f:f7:cb:02:8a:e9:b3:a4:46:2f:73:8b:b0:8c:ce:fa:bd:dc:
         8c:a0:9d:f9:9b:e9:6a:80:02:1f:69:d2:8c:fa:04:52:d1:3c:
         85:31:ea:dd:71:a1:7c:8c:b8:91:5f:eb:1c:3e:d2:c9:20:11:
         9e:fd:76:a9:6a:7d:28:48:fb:82:61:6d:5d:d0:2d:19:92:ea:
         35:26:6e:02:5f:22:2a:41:97:f9:5c:7b:81:1e:33:23:25:fe:
         22:91:8a:53:2f:07:9d:34:b8:c7:13:39:bf:64:53:d4:b6:2a:
         16:35:bd:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 17 20:59:40 2023 by rpki-client on console-fra.rpki-client.org