Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ee5acfc9-e56e-464d-8621-b53e63ad0c5e/aa9f332d4fdfa28530d501d8629e4c7279192157.roa
File:                     aa9f332d4fdfa28530d501d8629e4c7279192157.roa (raw, json)
Hash identifier:          v8LW+y7qEvhGqU2YmiaiPZvu2iylLl9/WjoqPpstFOA=
Subject key identifier:   40:F9:C9:E5:FE:2A:3D:02:D2:70:AC:3A:60:F0:79:E6:5D:45:5F:01
Certificate issuer:       /CN=e6713d1a769f8d56ff7a6a1f360adfa08db3e3ba
Certificate serial:       05C7
Authority key identifier: F3:DC:12:CD:8D:C8:69:8E:B0:89:77:42:7B:6C:08:56:F3:A5:27:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e6713d1a769f8d56ff7a6a1f360adfa08db3e3ba.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ee5acfc9-e56e-464d-8621-b53e63ad0c5e/aa9f332d4fdfa28530d501d8629e4c7279192157.roa
Signing time:             Tue 02 Aug 2022 21:37:40 +0000
ROA not before:           Tue 02 Aug 2022 03:00:00 +0000
ROA not after:            Fri 02 Aug 2024 03:00:00 +0000
asID:                     272806
IP address blocks:        45.68.24.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1479 (0x5c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6713d1a769f8d56ff7a6a1f360adfa08db3e3ba
        Validity
            Not Before: Aug  2 03:00:00 2022 GMT
            Not After : Aug  2 03:00:00 2024 GMT
        Subject: CN=aa9f332d4fdfa28530d501d8629e4c7279192157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:aa:49:23:35:4a:b3:cf:a2:5b:8d:31:06:94:
                    ee:43:ba:17:d0:ea:0c:09:02:d7:16:c7:b2:ec:96:
                    95:aa:2e:a6:18:ff:e8:af:86:b3:40:57:ff:75:45:
                    ff:85:ac:da:9f:a2:5a:83:17:fe:0b:3e:41:2e:20:
                    2d:58:70:c4:7d:66:7d:69:84:00:c2:e4:58:cf:ca:
                    1a:27:69:c1:90:ef:fb:05:6c:59:c4:51:cc:a5:ce:
                    e2:85:7e:20:e6:47:70:c9:9e:42:f7:ef:99:ae:09:
                    39:f6:f5:cf:a3:a1:57:fa:0f:c4:e2:53:d3:10:ac:
                    43:fe:29:e9:5c:d0:57:24:87:34:88:d7:0e:39:96:
                    d8:92:42:66:7d:f5:fd:e3:96:4e:43:f6:f6:42:0e:
                    ba:71:a8:c5:dc:0d:2b:07:80:d1:1e:64:16:03:27:
                    d3:9a:b6:b7:7b:69:0a:14:f4:78:98:ee:0a:8e:5e:
                    31:17:f3:74:33:f0:60:ae:98:ac:25:2a:50:25:60:
                    40:cf:a1:46:12:07:5e:fe:b8:eb:ed:a5:a2:79:04:
                    22:b9:af:ec:73:36:49:97:48:80:37:15:2a:36:e3:
                    57:d2:22:71:fc:8b:fa:37:ae:de:f8:15:ac:5e:1f:
                    6f:75:d0:40:fe:04:77:8f:fa:9a:50:37:87:60:a4:
                    8f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F9:C9:E5:FE:2A:3D:02:D2:70:AC:3A:60:F0:79:E6:5D:45:5F:01
            X509v3 Authority Key Identifier:
                keyid:F3:DC:12:CD:8D:C8:69:8E:B0:89:77:42:7B:6C:08:56:F3:A5:27:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e6713d1a769f8d56ff7a6a1f360adfa08db3e3ba.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ee5acfc9-e56e-464d-8621-b53e63ad0c5e/aa9f332d4fdfa28530d501d8629e4c7279192157.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ee5acfc9-e56e-464d-8621-b53e63ad0c5e/e6713d1a769f8d56ff7a6a1f360adfa08db3e3ba.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:c5:28:fe:81:dd:1e:5f:37:9d:cc:0b:dd:d2:84:97:18:59:
         fa:9c:df:26:ab:ff:a4:0b:f4:36:fa:e4:36:58:af:8c:7b:64:
         9c:01:a6:f3:d9:41:73:ab:6b:45:73:40:33:02:26:ad:07:43:
         9e:22:44:ef:f9:35:61:0c:61:fb:07:e7:4b:d0:11:50:75:85:
         16:71:cd:fd:be:67:ee:e2:45:3f:e9:8f:0e:e5:52:e5:8f:b1:
         e5:c6:79:bc:bd:f8:b1:00:be:74:4b:3a:c5:25:00:00:72:76:
         4d:a2:8d:7a:8b:2d:e4:53:44:0f:e5:28:ac:1f:ca:c2:f8:cb:
         c2:b6:86:72:ac:dd:8e:4e:d0:04:2b:ab:64:c5:18:67:e7:29:
         45:a3:5e:0c:a5:f4:52:8a:5f:8f:59:c4:a4:be:18:99:8c:5c:
         c8:f3:1c:e1:7a:97:f1:29:30:5d:89:81:30:4b:14:89:5b:8f:
         29:80:81:f4:b8:fb:0e:2b:e0:b6:49:b2:3a:d9:65:de:7b:8d:
         2c:f3:e9:cb:56:65:53:a7:18:c5:5a:79:8c:bb:87:4f:14:47:
         7a:e8:73:1a:cc:ba:23:b9:92:70:59:4f:47:fc:b8:84:b8:06:
         34:cc:aa:1f:0b:31:9b:43:31:25:42:aa:a8:5a:1c:9a:99:89:
         d4:29:f7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:43 2023 by rpki-client on console-fra.rpki-client.org