Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/feb2a0de-6e84-450a-a714-6874d1defacc/be010516074910279f6b1a0de81e3103f89da722.roa
File:                     be010516074910279f6b1a0de81e3103f89da722.roa (raw, json)
Hash identifier:          NY4gjLi4wwU9OLK0w0dqBQhQVgdKTwiD3ZjOCvzsLRs=
Subject key identifier:   78:A3:4C:2B:D8:74:C5:24:AE:6D:03:23:87:13:40:06:0D:6C:53:3A
Certificate issuer:       /CN=d8f649f7e77235e02854ea1e4e378027ec9afcff
Certificate serial:       02D224
Authority key identifier: 78:24:78:45:C8:FA:37:C4:A2:45:87:32:A4:2B:FF:2E:89:52:64:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8f649f7e77235e02854ea1e4e378027ec9afcff.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/feb2a0de-6e84-450a-a714-6874d1defacc/be010516074910279f6b1a0de81e3103f89da722.roa
Signing time:             Fri 18 Aug 2023 04:25:33 +0000
ROA not before:           Thu 17 Aug 2023 04:25:33 +0000
ROA not after:            Mon 18 Aug 2025 04:25:33 +0000
asID:                     27687
IP address blocks:        45.65.255.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184868 (0x2d224)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8f649f7e77235e02854ea1e4e378027ec9afcff
        Validity
            Not Before: Aug 17 04:25:33 2023 GMT
            Not After : Aug 18 04:25:33 2025 GMT
        Subject: CN=be010516074910279f6b1a0de81e3103f89da722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:68:db:ae:73:b0:f0:4b:ed:4f:d0:34:97:a3:
                    2c:6e:13:d1:8f:da:92:63:b6:f3:10:f6:90:bd:d6:
                    11:1f:d1:94:1d:fd:9c:45:14:65:74:9a:fd:ad:66:
                    e2:9b:65:17:ab:95:da:4a:5d:10:10:fe:5e:6e:6e:
                    51:df:96:29:48:8c:85:ff:ce:1c:a2:8b:28:b4:1f:
                    18:60:29:4a:85:12:9c:80:40:49:09:82:2c:c8:05:
                    4b:e0:87:54:f0:cc:db:d3:32:c8:db:fe:73:50:d1:
                    3f:83:ce:f7:a3:2e:a9:41:d4:ef:0f:47:1e:84:ae:
                    18:70:b0:13:f6:3d:d7:aa:d6:13:bc:7b:b4:ee:db:
                    4c:81:ba:b2:37:c7:1c:70:de:e0:a2:79:66:2b:b5:
                    eb:ef:34:0d:6d:7d:e4:4a:b0:9d:83:75:bb:6e:88:
                    38:8e:25:8c:7f:94:8a:ee:2b:e5:71:f1:f9:8b:ca:
                    36:3c:86:8c:e5:54:33:f7:06:77:dd:93:48:47:5c:
                    ab:5d:1e:4e:6b:81:78:93:95:32:31:91:06:c0:86:
                    82:e0:4b:99:f1:22:f6:1e:b3:84:f0:d7:f4:8f:8c:
                    ad:7d:9a:ac:fa:15:bb:cc:3c:5c:f9:df:ea:26:83:
                    df:88:7a:39:e7:a1:07:24:88:ec:d1:f0:bc:ee:b7:
                    bd:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A3:4C:2B:D8:74:C5:24:AE:6D:03:23:87:13:40:06:0D:6C:53:3A
            X509v3 Authority Key Identifier:
                keyid:78:24:78:45:C8:FA:37:C4:A2:45:87:32:A4:2B:FF:2E:89:52:64:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8f649f7e77235e02854ea1e4e378027ec9afcff.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/feb2a0de-6e84-450a-a714-6874d1defacc/be010516074910279f6b1a0de81e3103f89da722.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/feb2a0de-6e84-450a-a714-6874d1defacc/d8f649f7e77235e02854ea1e4e378027ec9afcff.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:98:d0:37:e7:29:4f:1f:9b:1a:b0:24:b4:73:cd:8c:cd:45:
         3c:dd:6c:cd:ec:9d:9f:f9:2b:4a:94:b7:1a:90:28:40:ad:65:
         07:f0:3f:78:09:23:7a:f5:78:40:dd:36:19:ac:bb:fe:e5:64:
         8d:9b:dc:a8:1f:3a:d2:d3:29:a8:b9:be:b3:28:c0:3f:b9:84:
         4d:dd:ba:bb:9d:41:09:f0:04:c7:33:c2:d7:c5:c4:44:5f:fb:
         69:09:1c:5d:9a:08:2d:cc:68:78:a7:06:7a:02:1b:ae:51:08:
         86:2d:06:b3:df:10:9e:44:b1:c4:84:a1:28:1d:9d:97:47:51:
         05:b1:eb:2b:0c:4e:65:ed:84:a3:cc:45:b5:08:4c:dc:7f:f0:
         56:5a:7e:bd:7d:30:b6:c0:74:ed:b2:38:e1:21:ea:e8:9b:b3:
         a1:01:2b:b4:9a:26:8e:b5:fd:5f:1c:2f:5b:06:8b:89:d7:90:
         43:54:d8:1a:51:25:af:b4:39:a4:23:26:b0:08:1d:25:59:6a:
         40:e5:06:18:f4:8f:13:4c:eb:72:69:3b:19:7d:95:09:58:68:
         47:e0:9a:21:12:db:ff:ed:12:4e:9e:43:95:8b:51:7f:31:eb:
         25:13:3b:69:36:e6:7f:ea:0f:58:58:56:a1:ad:3f:61:a4:4f:
         fc:cc:6b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 18 05:45:55 2023 by rpki-client on console-ams.rpki-client.org