Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/1a66536bb9ad500aadc47e1bbf8907e61c95b468.roa
File:                     1a66536bb9ad500aadc47e1bbf8907e61c95b468.roa (raw, json)
Hash identifier:          V2lEGfSCC7DP9qF0AZT/5bZHV7/lgIkpApmv3Bt+Ygc=
Subject key identifier:   D7:AF:75:D7:E8:B3:B8:86:EC:1C:41:DC:FD:F5:94:4D:8E:40:83:18
Certificate issuer:       /CN=37a0740e0b462b36fd227b220aff33538b932a72
Certificate serial:       1F5970
Authority key identifier: CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/1a66536bb9ad500aadc47e1bbf8907e61c95b468.roa
Signing time:             Mon 17 Apr 2023 18:29:56 +0000
ROA not before:           Sun 16 Apr 2023 18:29:55 +0000
ROA not after:            Thu 17 Apr 2025 18:29:55 +0000
asID:                     262166
IP address blocks:        168.234.1.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2054512 (0x1f5970)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a0740e0b462b36fd227b220aff33538b932a72
        Validity
            Not Before: Apr 16 18:29:55 2023 GMT
            Not After : Apr 17 18:29:55 2025 GMT
        Subject: CN=1a66536bb9ad500aadc47e1bbf8907e61c95b468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:11:e6:65:df:f4:bd:04:99:0d:9a:c5:9e:5d:
                    b8:79:ba:c3:5b:fa:22:19:34:da:f9:c7:9b:3f:64:
                    81:ad:48:a7:27:1e:ac:67:43:18:f5:57:3d:e7:42:
                    cd:11:f9:cc:a0:66:07:99:73:e5:6e:d0:74:b5:f7:
                    3f:7d:24:07:7d:b1:ae:4f:73:70:fc:f9:3b:97:6e:
                    58:2c:51:d2:59:1d:20:7f:ac:e8:a4:bb:a1:c0:55:
                    d4:38:0b:11:b1:c7:92:b9:65:1c:1a:41:87:4c:e5:
                    b4:ca:5e:38:23:67:d1:df:d6:eb:42:fb:89:c8:be:
                    5b:de:ab:f6:9a:cc:02:1f:ca:11:ca:80:f1:79:45:
                    f0:8b:b6:b4:eb:12:db:07:a1:30:cf:85:42:bf:2a:
                    24:fa:78:6c:20:51:5c:c0:52:3b:f7:c0:f6:97:a0:
                    16:75:a7:4c:55:b9:64:0d:dc:26:5a:6c:35:4a:63:
                    9d:20:ce:d5:a6:c9:d7:f7:5c:d3:c2:ed:4a:d1:d0:
                    25:63:90:0a:76:87:bb:62:fa:d3:ef:da:c1:2e:83:
                    86:25:3c:3d:c8:e4:19:da:21:49:58:4f:16:6f:0e:
                    9a:ec:5d:a4:e8:20:24:b1:d7:ab:df:a3:d4:03:ad:
                    35:66:c4:2c:aa:a9:d0:2d:e1:c8:24:ec:09:6c:87:
                    17:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:AF:75:D7:E8:B3:B8:86:EC:1C:41:DC:FD:F5:94:4D:8E:40:83:18
            X509v3 Authority Key Identifier:
                keyid:CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/1a66536bb9ad500aadc47e1bbf8907e61c95b468.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/37a0740e0b462b36fd227b220aff33538b932a72.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:10:89:af:11:f9:5f:f0:b6:5b:26:4d:7d:bc:2c:83:1a:60:
         f8:ea:ea:14:0d:ad:4f:de:49:10:59:0d:1e:01:b0:38:be:52:
         c6:10:4e:32:03:e2:97:3e:82:83:ef:e7:ba:52:34:3f:c0:3b:
         07:cf:4c:b3:61:fd:9b:5b:50:2c:ec:16:c1:52:03:c5:41:ea:
         fa:e5:4f:54:4b:37:42:09:a9:95:f6:7a:24:eb:dc:15:f6:12:
         a1:4a:43:f7:71:92:b3:6a:2b:49:f7:03:8e:39:c2:d8:15:8f:
         87:a9:93:61:35:cf:84:6d:23:d1:a7:a1:70:d7:cb:2b:16:c0:
         f1:3c:ab:13:b7:8c:62:9b:dd:1f:34:e8:4e:2c:b7:86:75:ec:
         f7:30:ef:06:ff:d1:13:1b:c8:38:d5:8e:c4:33:1c:e6:cc:f7:
         b3:ca:bd:d6:7b:79:6c:b6:e9:ab:82:d2:7f:aa:72:ce:84:e2:
         6a:93:12:ed:02:5e:2b:fe:8e:1d:eb:78:4d:40:89:1a:e9:0b:
         a6:cb:ff:c8:b6:bc:f9:81:81:20:84:44:81:62:4a:3b:79:cc:
         54:75:0e:82:39:db:ab:3f:0d:09:bf:be:a6:8f:23:89:5d:97:
         19:f1:b0:3a:4e:11:92:1d:67:02:79:12:10:fa:23:1f:a4:c9:
         1a:c0:6c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:44 2023 by rpki-client on console-fra.rpki-client.org