Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f719ec2f-1f7e-44c3-8629-5688d74e16ea/14b70d090057797d434e6ff56281252c7f12f025.roa
File:                     14b70d090057797d434e6ff56281252c7f12f025.roa (raw, json)
Hash identifier:          0DDx6h8SwcG5ftwxFyFO2Pv9XMveJ71qSeoLPG5VAlc=
Subject key identifier:   B8:FD:CC:4C:A1:7A:07:CC:B6:7C:46:E4:B3:43:38:37:4C:AC:07:EA
Certificate issuer:       /CN=a5925846ddd27521ce64527a50820075bbf1e5b7
Certificate serial:       05AC43
Authority key identifier: 77:E6:D8:1F:38:23:AD:63:AF:9B:02:A5:F4:0C:A6:7C:6B:E2:B1:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5925846ddd27521ce64527a50820075bbf1e5b7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f719ec2f-1f7e-44c3-8629-5688d74e16ea/14b70d090057797d434e6ff56281252c7f12f025.roa
Signing time:             Wed 24 Mar 2021 14:31:17 +0000
ROA not before:           Wed 24 Mar 2021 14:31:16 +0000
ROA not after:            Tue 24 Mar 2026 14:31:16 +0000
asID:                     267798
IP address blocks:        45.181.44.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 371779 (0x5ac43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5925846ddd27521ce64527a50820075bbf1e5b7
        Validity
            Not Before: Mar 24 14:31:16 2021 GMT
            Not After : Mar 24 14:31:16 2026 GMT
        Subject: CN=14b70d090057797d434e6ff56281252c7f12f025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c2:bc:1d:76:93:a5:f8:18:d2:30:57:56:c9:
                    44:8c:df:e2:fb:58:5f:56:5b:94:26:d4:88:99:94:
                    c1:2f:c3:b3:cb:6c:0a:d3:0e:2f:09:17:aa:97:07:
                    31:fd:c1:1a:26:18:57:d3:8d:66:cc:9c:6b:45:7d:
                    dc:1d:7b:c7:00:f6:8d:36:d1:47:76:54:0b:11:f6:
                    7b:ba:c9:91:ad:7e:df:06:89:fb:b6:9c:91:04:14:
                    cf:d8:49:0a:49:04:a4:ca:45:e2:15:9d:a0:d6:5d:
                    0f:b8:2e:2f:49:a6:af:c4:d7:80:61:6e:95:61:d6:
                    fa:1e:79:8a:8f:9e:1f:7f:8c:55:e5:8a:47:0e:6c:
                    47:cd:9e:43:61:af:38:d3:52:c9:11:0d:7e:79:1f:
                    90:0d:af:0b:8a:8b:67:40:8e:18:82:d6:ea:f1:dc:
                    15:e0:11:30:25:d9:3f:40:d7:73:73:19:17:34:fd:
                    a6:07:dc:4b:68:97:92:60:49:08:81:e9:11:98:3d:
                    6a:0d:24:9d:3d:65:c0:33:1c:ca:3b:de:d3:0e:c8:
                    97:5b:85:e2:9f:74:7d:fe:26:52:68:2c:02:0f:0b:
                    31:a8:e2:e7:ec:1b:ee:af:64:0d:7c:b6:2c:49:78:
                    4e:15:80:34:b1:d5:3a:f8:20:0e:68:ae:5f:f3:f4:
                    9b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:FD:CC:4C:A1:7A:07:CC:B6:7C:46:E4:B3:43:38:37:4C:AC:07:EA
            X509v3 Authority Key Identifier:
                keyid:77:E6:D8:1F:38:23:AD:63:AF:9B:02:A5:F4:0C:A6:7C:6B:E2:B1:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5925846ddd27521ce64527a50820075bbf1e5b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f719ec2f-1f7e-44c3-8629-5688d74e16ea/14b70d090057797d434e6ff56281252c7f12f025.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f719ec2f-1f7e-44c3-8629-5688d74e16ea/a5925846ddd27521ce64527a50820075bbf1e5b7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:e1:68:c2:73:b1:a3:54:6c:2d:41:b0:21:9b:67:ea:70:36:
         11:69:f4:0b:26:af:ec:1f:f4:ef:47:62:4c:68:99:da:40:4d:
         11:9d:94:b4:28:c3:4c:6b:07:f9:2d:6d:07:b6:3e:4f:79:27:
         71:74:a0:db:e9:33:1d:72:fc:36:13:f6:e4:00:18:c4:44:87:
         b4:a8:26:79:4d:49:ea:1e:d6:17:fd:78:6c:07:0f:ce:b6:2a:
         25:71:33:bb:0f:de:90:be:3d:57:60:72:59:ab:db:61:0f:ac:
         6b:6b:2b:7b:7c:57:35:7f:a1:43:4f:51:8f:03:6e:8b:7a:15:
         2a:1a:13:40:21:b9:87:f5:23:e9:15:4f:1e:22:f3:f8:e0:ef:
         33:af:c3:db:2f:8d:e5:69:ba:8d:d7:ee:31:47:53:68:b2:2a:
         41:89:64:8e:c6:ef:69:d5:2b:da:49:17:cc:76:fb:8b:e5:d6:
         81:6d:1e:96:3e:1a:7f:ca:14:b7:46:26:b4:ff:b1:5b:a2:2f:
         b5:f5:4b:5e:9d:47:e8:42:dd:b1:35:75:7b:8d:6a:c2:3a:bb:
         e3:8b:7f:20:e7:b7:5b:da:5d:3d:42:cc:63:31:ba:51:08:33:
         b5:ee:9a:51:8e:b3:a6:ea:7a:1a:e9:52:45:0b:8e:b0:ee:db:
         16:87:d0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 19:13:02 2023 by rpki-client on console-fra.rpki-client.org