Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ec0ceac2-05b6-4d03-8efa-bbd8d5910d8e/71ec01754fb3d912a754824f92e4b44a4dc5c5e2.roa
File:                     71ec01754fb3d912a754824f92e4b44a4dc5c5e2.roa (raw, json)
Hash identifier:          JuaXuZSuQkcCpJFEMpbd4pUTN/00zuSZNxLwfSwVQls=
Subject key identifier:   A5:7F:17:4A:B3:DC:D6:9A:C4:12:A6:91:9B:E7:CC:54:38:29:55:24
Certificate issuer:       /CN=9d25be9947afcb39fce110f05b5d8afd69a92382
Certificate serial:       10C940
Authority key identifier: A2:8C:63:A4:23:78:37:5E:F2:5F:67:8D:D4:3E:72:09:76:AA:1F:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d25be9947afcb39fce110f05b5d8afd69a92382.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ec0ceac2-05b6-4d03-8efa-bbd8d5910d8e/71ec01754fb3d912a754824f92e4b44a4dc5c5e2.roa
Signing time:             Tue 03 Aug 2021 14:49:12 +0000
ROA not before:           Tue 03 Aug 2021 03:00:00 +0000
ROA not after:            Thu 03 Aug 2023 03:00:00 +0000
asID:                     264836
IP address blocks:        45.224.118.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1100096 (0x10c940)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d25be9947afcb39fce110f05b5d8afd69a92382
        Validity
            Not Before: Aug  3 03:00:00 2021 GMT
            Not After : Aug  3 03:00:00 2023 GMT
        Subject: CN=71ec01754fb3d912a754824f92e4b44a4dc5c5e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:26:f3:37:17:4f:b3:f3:46:92:a2:d0:23:c5:
                    cb:02:ca:b4:51:08:37:1d:52:c6:bc:fc:4d:da:ed:
                    95:3a:1b:9b:0c:80:e1:16:e3:44:b3:cb:c0:5d:fd:
                    6b:71:26:8c:8f:7c:3e:ef:2f:c1:a6:93:53:18:15:
                    90:bc:31:ba:bf:94:4f:9f:69:9e:3c:85:b7:d3:a9:
                    ed:52:37:3e:f2:4a:bf:8f:94:69:f1:1c:a8:26:0c:
                    9a:3d:dc:d3:29:ad:d1:73:28:4d:fd:dd:e5:3b:75:
                    41:2c:4a:40:16:32:87:e1:8a:a5:98:39:ae:9e:58:
                    61:e1:47:8b:85:4e:e1:1a:48:af:9d:21:34:bc:67:
                    8a:40:27:2e:0e:7c:ef:8c:72:24:de:46:4c:53:20:
                    f7:f9:0a:82:05:16:2d:d0:e6:28:d1:3b:d3:9c:f9:
                    a6:55:2d:b9:58:cc:0a:1f:5c:4d:03:58:68:59:5a:
                    b3:f0:26:ec:91:b9:49:b7:fd:f1:b9:87:35:3d:f6:
                    64:54:15:aa:73:de:f1:4f:9c:84:08:e8:71:cc:5f:
                    b3:bb:2e:4d:de:41:6a:f0:0a:af:ef:48:8e:6a:06:
                    4d:e2:1e:bb:06:2e:c0:9f:e3:76:36:5e:38:44:07:
                    7f:b7:1d:48:7c:a0:4e:1c:f3:16:ae:6d:9b:3c:5c:
                    52:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7F:17:4A:B3:DC:D6:9A:C4:12:A6:91:9B:E7:CC:54:38:29:55:24
            X509v3 Authority Key Identifier:
                keyid:A2:8C:63:A4:23:78:37:5E:F2:5F:67:8D:D4:3E:72:09:76:AA:1F:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d25be9947afcb39fce110f05b5d8afd69a92382.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ec0ceac2-05b6-4d03-8efa-bbd8d5910d8e/71ec01754fb3d912a754824f92e4b44a4dc5c5e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ec0ceac2-05b6-4d03-8efa-bbd8d5910d8e/9d25be9947afcb39fce110f05b5d8afd69a92382.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:ea:dd:7f:ab:dc:92:74:88:d2:ac:b1:dd:3c:b2:aa:dc:ab:
         1c:f0:13:20:08:7d:a0:b6:64:36:ce:28:e3:68:a7:de:9e:bf:
         13:93:78:88:16:a8:86:78:32:c8:b6:fd:d2:c7:f3:c7:20:06:
         be:d5:94:18:fe:46:61:6f:f0:34:43:6d:4e:03:97:4b:9b:8a:
         7b:ef:21:44:81:25:2e:b6:81:70:42:5f:57:3a:b4:7e:d0:53:
         7d:45:cb:1d:f4:22:c1:97:42:c3:df:0f:41:cf:e3:e3:40:7f:
         ce:b7:a0:42:d4:80:1d:8e:c9:13:03:66:51:37:83:d4:6d:0a:
         9d:d6:85:91:fa:de:0d:98:07:f6:0b:d5:28:a8:77:ed:00:74:
         95:a0:12:c3:aa:12:5d:db:ca:d2:c0:71:e5:a6:bd:46:b8:73:
         cc:d6:8e:0b:ba:fb:6a:ba:77:b7:79:64:ae:07:3f:c5:b5:5d:
         35:87:a0:94:17:b6:2b:8e:b5:58:05:80:c9:ac:2d:73:e0:f8:
         55:5c:19:51:fb:99:ef:59:fb:35:e7:1f:da:24:c0:7a:b1:70:
         44:32:15:ee:08:35:b1:c0:22:e6:ae:43:52:b0:cf:09:29:ba:
         09:e7:fd:fc:9e:96:75:11:ef:16:97:31:da:b2:c9:67:6e:a9:
         e7:d9:30:54
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEMlAMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDlk
MjViZTk5NDdhZmNiMzlmY2UxMTBmMDViNWQ4YWZkNjlhOTIzODIwHhcNMjEwODAz
MDMwMDAwWhcNMjMwODAzMDMwMDAwWjAzMTEwLwYDVQQDEyg3MWVjMDE3NTRmYjNk
OTEyYTc1NDgyNGY5MmU0YjQ0YTRkYzVjNWUyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhSbzNxdPs/NGkqLQI8XLAsq0UQg3HVLGvPxN2u2VOhubDIDh
FuNEs8vAXf1rcSaMj3w+7y/BppNTGBWQvDG6v5RPn2mePIW306ntUjc+8kq/j5Rp
8RyoJgyaPdzTKa3RcyhN/d3lO3VBLEpAFjKH4YqlmDmunlhh4UeLhU7hGkivnSE0
vGeKQCcuDnzvjHIk3kZMUyD3+QqCBRYt0OYo0TvTnPmmVS25WMwKH1xNA1hoWVqz
8CbskblJt/3xuYc1PfZkVBWqc97xT5yECOhxzF+zuy5N3kFq8Aqv70iOagZN4h67
Bi7An+N2Nl44RAd/tx1IfKBOHPMWrm2bPFxSKQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFKV/F0qz3NaaxBKmkZvnzFQ4KVUkMB8GA1UdIwQYMBaAFKKMY6QjeDde8l9n
jdQ+cgl2qh/6MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWQyNWJl
OTk0N2FmY2IzOWZjZTExMGYwNWI1ZDhhZmQ2OWE5MjM4Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWMwY2VhYzItMDViNi00ZDAzLThlZmEtYmJkOGQ1
OTEwZDhlLzcxZWMwMTc1NGZiM2Q5MTJhNzU0ODI0ZjkyZTRiNDRhNGRjNWM1ZTIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lYzBjZWFjMi0wNWI2LTRkMDMtOGVmYS1iYmQ4
ZDU5MTBkOGUvOWQyNWJlOTk0N2FmY2IzOWZjZTExMGYwNWI1ZDhhZmQ2OWE5MjM4
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC3gdjANBgkqhkiG9w0BAQsFAAOCAQEAB+rdf6vcknSI0qyx
3TyyqtyrHPATIAh9oLZkNs4o42in3p6/E5N4iBaohngyyLb90sfzxyAGvtWUGP5G
YW/wNENtTgOXS5uKe+8hRIElLraBcEJfVzq0ftBTfUXLHfQiwZdCw98PQc/j40B/
zregQtSAHY7JEwNmUTeD1G0KndaFkfreDZgH9gvVKKh37QB0laASw6oSXdvK0sBx
5aa9RrhzzNaOC7r7arp3t3lkrgc/xbVdNYeglBe2K461WAWAyawtc+D4VVwZUfuZ
71n7Necf2iTAerFwRDIV7gg1scAi5q5DUrDPCSm6Cef9/J6WdRHvFpcx2rLJZ26p
59kwVA==
-----END CERTIFICATE-----
Generated at Wed Aug 2 09:01:12 2023 by rpki-client on console-fra.rpki-client.org