Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f224f274-c1f3-485f-b9f4-313cfd310dda/1260ffe72bbb083798951b0c90e4d59c5f368db3.roa
File:                     1260ffe72bbb083798951b0c90e4d59c5f368db3.roa (raw, json)
Hash identifier:          FBs+k8af1JZMjsC6O+KNUddq0pY/vZyJNurAsxwTZYw=
Subject key identifier:   F0:C9:39:25:95:86:F3:AF:BB:05:55:B2:C6:9D:96:CE:04:D2:B0:C3
Certificate issuer:       /CN=ec6822a6bcab43d61ec7ceff1bb6b19a80120000
Certificate serial:       08B3
Authority key identifier: B2:B4:33:91:56:7C:65:ED:4E:07:52:35:8F:24:14:01:CF:8E:08:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec6822a6bcab43d61ec7ceff1bb6b19a80120000.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f224f274-c1f3-485f-b9f4-313cfd310dda/1260ffe72bbb083798951b0c90e4d59c5f368db3.roa
Signing time:             Tue 16 Nov 2021 18:28:36 +0000
ROA not before:           Tue 16 Nov 2021 02:00:00 +0000
ROA not after:            Thu 16 Nov 2023 02:00:00 +0000
asID:                     13959
IP address blocks:        45.7.44.0/22 maxlen: 24
                          2806:2e6::/32 maxlen: 34

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2227 (0x8b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec6822a6bcab43d61ec7ceff1bb6b19a80120000
        Validity
            Not Before: Nov 16 02:00:00 2021 GMT
            Not After : Nov 16 02:00:00 2023 GMT
        Subject: CN=1260ffe72bbb083798951b0c90e4d59c5f368db3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:08:ef:ac:34:32:d3:27:fa:ce:92:a5:b2:ab:
                    03:9b:ca:e3:c3:67:25:da:e7:15:48:03:fb:30:3e:
                    e8:e4:90:d8:d1:29:34:25:92:bf:bd:bb:ef:68:e5:
                    2b:14:b7:4b:50:ec:cf:ca:d4:d3:cd:6c:58:6b:7d:
                    05:cc:9d:fc:44:58:e4:40:eb:55:43:ec:f1:aa:73:
                    46:6c:f6:00:27:7c:7f:5a:4f:3e:c6:93:d4:71:79:
                    07:32:20:03:1f:d9:72:45:89:7e:cf:05:19:1b:96:
                    d2:08:a1:68:10:b8:2c:c6:f9:29:9a:1c:44:5c:69:
                    cc:de:cb:eb:c7:cc:c3:98:3f:89:39:1f:e1:f8:45:
                    5a:24:6b:94:af:7d:51:73:c8:d8:48:39:54:73:58:
                    bc:a5:7b:a2:1b:61:51:80:ff:18:9b:8a:6f:2d:0d:
                    70:1e:29:d9:05:38:83:81:3c:5a:b7:bb:0d:9a:0f:
                    71:65:55:cb:b6:ee:51:c3:1f:49:d5:f3:27:61:39:
                    02:61:5d:36:11:d9:1f:fa:10:4d:48:be:da:93:86:
                    1d:a7:45:46:00:80:51:80:85:5e:6f:d7:77:6f:41:
                    51:9d:55:e2:59:c4:07:34:58:1b:25:5f:65:a4:f3:
                    e0:39:26:20:7f:34:b0:23:23:6b:eb:31:1c:76:15:
                    ec:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C9:39:25:95:86:F3:AF:BB:05:55:B2:C6:9D:96:CE:04:D2:B0:C3
            X509v3 Authority Key Identifier:
                keyid:B2:B4:33:91:56:7C:65:ED:4E:07:52:35:8F:24:14:01:CF:8E:08:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec6822a6bcab43d61ec7ceff1bb6b19a80120000.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f224f274-c1f3-485f-b9f4-313cfd310dda/1260ffe72bbb083798951b0c90e4d59c5f368db3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f224f274-c1f3-485f-b9f4-313cfd310dda/ec6822a6bcab43d61ec7ceff1bb6b19a80120000.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.44.0/22
                IPv6:
                  2806:2e6::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:72:6c:c0:e2:12:91:69:0d:ba:72:ff:d2:7c:b9:a0:07:44:
         cf:f0:9d:39:da:35:0a:3a:21:cc:42:da:2d:ce:fc:da:76:5e:
         b4:4c:dc:8b:3e:bc:35:c4:07:86:49:4d:86:67:f8:21:15:b2:
         98:81:66:c6:4b:09:6c:78:96:94:62:0a:ac:ea:c5:96:e4:8c:
         2e:97:b8:7d:db:2a:df:da:fc:55:1a:d2:12:71:3b:26:96:d2:
         b1:7e:cc:58:ba:46:18:74:75:a5:69:b4:e5:fe:2a:18:12:57:
         fa:10:94:1f:15:3e:71:4f:23:ce:e7:1b:24:52:65:f5:01:17:
         1b:37:61:96:b0:fc:1b:c9:06:14:7b:aa:7e:a2:01:5a:49:4e:
         b1:aa:bb:bd:69:76:e0:c9:82:ea:fc:a0:b3:83:71:64:a8:13:
         9f:94:98:d1:f9:2c:07:fd:b7:57:0c:8e:f4:62:1b:4d:4c:8c:
         b7:65:ec:ec:c7:d1:e7:b5:64:15:7e:d2:a4:47:06:6c:03:2e:
         32:19:0d:0d:59:6b:74:4d:06:2f:a9:1d:d3:c0:38:d1:d1:e6:
         fd:b3:96:e3:f5:73:52:9b:65:b6:49:5f:ff:3f:b5:88:34:9c:
         cb:a3:9a:7c:b4:40:93:3c:ae:b3:a6:15:1d:93:6c:17:56:e6:
         67:7b:16:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 15 08:22:59 2023 by rpki-client on console-ams.rpki-client.org