Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/feef9e8f-705c-4481-871a-46a975913737/054df85fff3b46dede828ada52f7cb488310c14f.roa
File:                     054df85fff3b46dede828ada52f7cb488310c14f.roa (raw, json)
Hash identifier:          nzDD5Ff/ymhtPhQr0n5u2ZF+GLBL3X7/HxVcjWPliSQ=
Subject key identifier:   0A:7C:9C:F8:CC:3C:BB:B6:3D:9D:E2:34:CD:39:B4:B3:A5:66:AD:D3
Certificate issuer:       /CN=3065f6a5a133325f3e525bfe0703a202498f6a21
Certificate serial:       11853D
Authority key identifier: 4E:69:B9:74:58:23:F1:B9:D6:1F:0A:FB:8D:CB:8B:86:88:70:BA:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3065f6a5a133325f3e525bfe0703a202498f6a21.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/feef9e8f-705c-4481-871a-46a975913737/054df85fff3b46dede828ada52f7cb488310c14f.roa
Signing time:             Fri 14 Apr 2023 08:30:13 +0000
ROA not before:           Thu 13 Apr 2023 08:30:13 +0000
ROA not after:            Sat 12 Apr 2025 08:30:13 +0000
asID:                     267857
IP address blocks:        45.7.133.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1148221 (0x11853d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3065f6a5a133325f3e525bfe0703a202498f6a21
        Validity
            Not Before: Apr 13 08:30:13 2023 GMT
            Not After : Apr 12 08:30:13 2025 GMT
        Subject: CN=054df85fff3b46dede828ada52f7cb488310c14f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c5:37:b8:fd:73:de:02:54:50:97:26:b2:85:
                    99:23:2c:a3:8b:fd:ac:40:5e:c6:28:48:c7:99:6d:
                    44:81:dc:cf:bb:ff:5e:c7:52:11:dd:56:54:9b:e5:
                    e4:a4:db:52:00:38:af:28:a9:4e:b7:0f:b2:a8:2d:
                    bf:71:7d:b8:8f:9c:8e:6e:d5:8e:a8:e5:78:a8:4a:
                    12:21:ea:5a:e8:f1:c6:8d:f5:66:17:f5:96:7b:7b:
                    b6:9c:85:94:19:aa:20:6c:d5:b1:7e:5c:23:9e:ca:
                    56:a0:fe:00:b7:98:0b:9a:74:8e:85:c7:00:de:be:
                    6c:6c:a0:d2:62:af:23:e0:04:99:52:24:13:47:30:
                    64:34:f2:b0:93:88:59:32:02:15:35:3a:83:21:ee:
                    bd:fa:ea:69:d2:11:60:d8:8c:ec:dc:94:74:44:34:
                    14:b4:37:c7:d8:9b:9e:c7:fb:68:5d:84:fe:3b:6a:
                    f9:c6:42:c7:8d:0b:6c:32:2e:fb:ac:07:2b:8a:a7:
                    f9:48:ef:94:8f:91:26:c1:ba:ec:cf:8e:c6:01:4b:
                    81:70:34:07:7d:1d:a5:1c:97:b9:73:40:f3:23:27:
                    06:11:e3:04:91:d3:e5:b0:e6:f8:aa:bd:41:3f:d4:
                    c0:bb:61:fa:a8:81:b4:60:b2:cc:ed:e2:2b:ce:4f:
                    72:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:7C:9C:F8:CC:3C:BB:B6:3D:9D:E2:34:CD:39:B4:B3:A5:66:AD:D3
            X509v3 Authority Key Identifier:
                keyid:4E:69:B9:74:58:23:F1:B9:D6:1F:0A:FB:8D:CB:8B:86:88:70:BA:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3065f6a5a133325f3e525bfe0703a202498f6a21.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/feef9e8f-705c-4481-871a-46a975913737/054df85fff3b46dede828ada52f7cb488310c14f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/feef9e8f-705c-4481-871a-46a975913737/3065f6a5a133325f3e525bfe0703a202498f6a21.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:af:0c:a1:f4:21:33:4a:ff:80:1b:a6:dc:03:49:84:67:91:
         05:f8:36:df:63:8d:b3:35:a6:9d:0e:0b:f3:f0:ad:33:5d:2e:
         07:5f:78:f8:4a:af:6a:45:84:62:29:b2:a2:0e:ef:9e:19:55:
         a6:51:32:ce:cc:26:6c:5e:fe:f3:99:cc:ab:c8:fa:c5:7b:84:
         f5:a5:dd:c7:89:37:60:43:69:06:6b:44:49:ef:96:00:fe:4c:
         96:76:69:a0:00:01:fd:be:0b:1b:16:04:41:19:76:69:75:be:
         c7:23:b4:ac:c5:a9:24:17:d3:01:48:66:a9:d2:58:3f:8c:8f:
         5f:db:f5:e4:11:2e:65:92:87:31:1c:a9:d4:f8:76:68:a1:fb:
         cb:96:49:57:08:f6:59:fe:70:b7:d1:82:c5:f1:e8:60:a5:74:
         5f:bb:2f:5a:ab:48:00:c7:28:5e:5a:28:67:22:ca:b5:48:ab:
         dd:41:c2:2d:90:72:6e:b1:61:f8:c7:5b:69:9e:a7:06:98:7f:
         77:64:9f:76:f6:34:f6:f6:e7:93:83:f1:b2:10:66:b4:89:b8:
         40:9f:7e:2b:7f:eb:fb:41:8d:99:5a:37:fe:1e:c6:d4:f5:00:
         c1:57:0d:56:50:63:65:d9:fa:e1:44:b1:5d:5d:71:5d:d3:ac:
         99:4a:22:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 27 00:00:18 2023 by rpki-client on console-ams.rpki-client.org