Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12f58487-cc36-4ca1-9049-c3c4d3084236/f4b59706f0550160aee007959aef8f42e3c6a0de.roa
File:                     f4b59706f0550160aee007959aef8f42e3c6a0de.roa (raw, json)
Hash identifier:          A0rjcUPO+ZeuTcUbTI6+g8aBvI447bNGUzk506T08ho=
Subject key identifier:   B2:96:80:F5:B8:28:AF:A7:CE:B5:CE:A0:26:53:E4:C5:B2:1A:42:46
Certificate issuer:       /CN=6d7ab193c3956396fcf4ef625d8554fe4c41a09c
Certificate serial:       061DEF
Authority key identifier: FE:B1:57:4E:C6:AA:C3:66:27:9A:36:B1:1E:AD:D9:5E:11:8A:3B:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6d7ab193c3956396fcf4ef625d8554fe4c41a09c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/12f58487-cc36-4ca1-9049-c3c4d3084236/f4b59706f0550160aee007959aef8f42e3c6a0de.roa
Signing time:             Fri 05 Apr 2024 19:49:30 +0000
ROA not before:           Fri 05 Apr 2024 19:49:29 +0000
ROA not after:            Sun 05 Apr 2026 19:49:29 +0000
asID:                     52468
IP address blocks:        45.226.112.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 05 Apr 2024 21:56:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400879 (0x61def)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d7ab193c3956396fcf4ef625d8554fe4c41a09c
        Validity
            Not Before: Apr  5 19:49:29 2024 GMT
            Not After : Apr  5 19:49:29 2026 GMT
        Subject: CN=f4b59706f0550160aee007959aef8f42e3c6a0de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:46:62:54:db:a3:64:f1:fc:e5:85:bb:6c:e2:
                    c7:26:a0:e3:e2:58:9f:4a:75:01:70:50:5a:0c:d1:
                    7f:53:81:00:88:59:d1:b8:6c:72:ca:6f:3a:ec:a4:
                    38:88:c3:2b:e9:36:1d:eb:5f:d0:2c:85:6f:24:21:
                    59:10:6d:a0:54:3e:19:ec:c0:66:ef:a5:9f:e5:ca:
                    ab:ab:4c:4b:68:5f:97:c4:47:20:aa:17:78:68:73:
                    a3:f7:8d:1a:5b:2e:02:41:57:ca:97:5c:eb:f1:ac:
                    b4:a2:2c:04:33:de:77:cf:f1:d6:05:ac:00:32:71:
                    e6:8e:50:fb:23:6b:70:27:d3:a5:49:e2:ec:40:e4:
                    7e:91:20:61:90:12:8f:2e:4a:42:e7:0c:92:67:74:
                    76:76:88:0c:d7:5e:f4:f7:35:db:31:d7:1f:3f:4d:
                    36:42:3b:bd:63:b1:4b:f8:d9:ae:43:89:39:3f:48:
                    6f:9d:74:9d:f0:fb:9a:8d:ed:7d:86:ad:20:76:27:
                    87:92:50:76:64:c5:8f:b6:cc:d3:65:2a:a3:d5:10:
                    7b:f8:6d:2d:38:a1:96:bf:80:53:a7:8e:3b:4c:06:
                    3e:3e:db:f9:6b:a0:c5:3c:cc:e0:3f:4f:4e:84:23:
                    15:a0:ba:b1:a4:a3:bc:c7:76:76:5a:78:7c:4b:76:
                    5c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:96:80:F5:B8:28:AF:A7:CE:B5:CE:A0:26:53:E4:C5:B2:1A:42:46
            X509v3 Authority Key Identifier:
                keyid:FE:B1:57:4E:C6:AA:C3:66:27:9A:36:B1:1E:AD:D9:5E:11:8A:3B:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6d7ab193c3956396fcf4ef625d8554fe4c41a09c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12f58487-cc36-4ca1-9049-c3c4d3084236/f4b59706f0550160aee007959aef8f42e3c6a0de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/12f58487-cc36-4ca1-9049-c3c4d3084236/6d7ab193c3956396fcf4ef625d8554fe4c41a09c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:e1:96:72:5b:d4:9c:fd:33:df:18:ab:a7:03:27:fe:26:c2:
         17:de:de:6d:b5:52:b7:52:36:21:51:ff:6d:df:a2:83:96:0e:
         d4:97:a2:d2:fc:e9:00:3f:ab:32:f8:18:92:0b:07:cc:d5:26:
         aa:7c:c1:97:b6:16:79:ff:06:33:17:6b:dc:69:e5:e5:ca:65:
         31:2b:1a:df:41:c4:00:2e:73:24:6f:33:f3:f0:a2:0e:46:6c:
         0a:31:c5:0b:50:84:71:ea:cf:3c:ee:81:11:4f:95:1f:82:13:
         64:d6:30:6e:44:43:47:76:a8:21:0a:f6:9a:85:2b:94:f5:5a:
         82:d8:bf:61:68:fa:ee:fe:19:1c:e7:6e:1f:e2:e1:01:eb:15:
         6d:19:d8:d2:60:f3:76:13:0b:15:6a:29:90:f8:94:37:0c:e3:
         5a:68:18:30:0f:32:7c:2f:59:d8:6a:f7:bf:23:e7:5f:89:de:
         67:ed:a0:de:b1:63:99:67:77:e6:6a:24:71:ad:e6:19:3c:c9:
         40:ed:83:d6:db:d7:31:91:ad:17:ae:18:34:48:4d:81:2f:f5:
         7a:04:8d:12:cb:51:59:73:25:f5:5b:d7:95:6a:a9:07:d6:b9:
         2f:56:e7:a9:47:b8:25:21:b0:45:6c:73:db:8e:02:9b:e3:10:
         56:eb:9c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 6 06:04:25 2024 by rpki-client on console.sobornost.net