Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2bbb4bba-9e09-435c-b8b6-e72cba0f507d/4a5c80efcf0a2878880e58959c47d09234ab8671.roa
File:                     4a5c80efcf0a2878880e58959c47d09234ab8671.roa (raw, json)
Hash identifier:          VYom4jDit+Jgxxo4gFjoFMwph9aenrmjwY9itT443oU=
Subject key identifier:   77:EA:C5:C8:97:A5:52:AF:95:D1:8D:7D:AF:0F:19:AB:DE:C4:A7:41
Certificate issuer:       /CN=55c0fb0d5531f91dd06c19ed8fa00f2687176d55
Certificate serial:       1F9FCE
Authority key identifier: BA:80:9B:F0:B1:12:1D:91:3D:20:0B:4F:F8:8B:7C:71:84:C6:58:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/55c0fb0d5531f91dd06c19ed8fa00f2687176d55.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2bbb4bba-9e09-435c-b8b6-e72cba0f507d/4a5c80efcf0a2878880e58959c47d09234ab8671.roa
Signing time:             Mon 08 May 2023 14:59:04 +0000
ROA not before:           Sun 07 May 2023 14:59:04 +0000
ROA not after:            Thu 08 May 2025 14:59:04 +0000
asID:                     266728
IP address blocks:        45.229.87.0/24 maxlen: 24
                          2803:5320::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2072526 (0x1f9fce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c0fb0d5531f91dd06c19ed8fa00f2687176d55
        Validity
            Not Before: May  7 14:59:04 2023 GMT
            Not After : May  8 14:59:04 2025 GMT
        Subject: CN=4a5c80efcf0a2878880e58959c47d09234ab8671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:31:00:9e:26:74:f2:e8:0a:79:67:9e:fa:e2:
                    64:72:49:41:7b:a7:5f:fd:90:4b:a6:e8:4b:b6:b0:
                    25:c0:cd:fe:f8:40:ae:43:42:84:00:b5:84:17:e9:
                    0b:e9:cf:bb:d5:df:45:d8:c0:58:22:94:3f:c6:bc:
                    ba:ab:76:bf:f8:6c:1b:91:f7:c2:56:8b:5e:8b:c7:
                    38:d9:22:83:bc:9c:f3:f4:83:4e:35:9f:e7:f3:bd:
                    42:1f:ae:f1:ad:06:fc:cf:71:96:47:67:fb:0a:d8:
                    6b:b3:9b:37:36:41:df:bd:3e:8e:15:b6:8f:2d:b6:
                    9c:06:e8:20:93:bc:1d:a5:a6:e8:7b:d8:19:4e:7c:
                    97:bd:b0:ff:07:b1:b5:b7:73:c1:a3:7e:62:1a:b7:
                    a8:3c:1c:0b:cb:af:16:da:b9:e8:cc:1f:9b:f2:36:
                    93:2d:11:be:e4:13:5b:32:45:6a:04:cb:e6:bf:47:
                    76:a2:9c:04:89:99:6c:0d:a1:13:39:6e:49:3f:dd:
                    ae:bd:60:1e:aa:3b:73:14:05:69:9a:07:fe:df:e5:
                    0e:f4:2a:2c:2e:f8:f7:08:11:e5:9a:6d:2a:c0:02:
                    46:f8:e7:f0:d9:00:42:5a:e2:b2:31:3b:b6:a8:d1:
                    78:ae:b4:2b:3a:f8:d7:1c:46:5f:1d:f2:d3:ed:41:
                    3e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:EA:C5:C8:97:A5:52:AF:95:D1:8D:7D:AF:0F:19:AB:DE:C4:A7:41
            X509v3 Authority Key Identifier:
                keyid:BA:80:9B:F0:B1:12:1D:91:3D:20:0B:4F:F8:8B:7C:71:84:C6:58:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/55c0fb0d5531f91dd06c19ed8fa00f2687176d55.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2bbb4bba-9e09-435c-b8b6-e72cba0f507d/4a5c80efcf0a2878880e58959c47d09234ab8671.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2bbb4bba-9e09-435c-b8b6-e72cba0f507d/55c0fb0d5531f91dd06c19ed8fa00f2687176d55.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.87.0/24
                IPv6:
                  2803:5320::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:e1:c4:3e:6b:62:22:cc:eb:62:40:1b:e7:19:b7:e9:ed:21:
         45:9e:7c:6a:66:5d:f3:79:3f:8e:ce:9e:72:91:f7:36:c7:d0:
         2b:6e:8e:eb:3a:3e:bc:df:84:45:fd:76:5b:ae:be:78:1b:33:
         a2:44:67:8b:b8:97:e8:c0:ec:77:ce:05:41:08:52:46:ef:30:
         cc:49:52:e8:75:e2:d0:47:aa:2c:e6:2b:b4:90:e3:a7:08:24:
         92:df:e5:27:06:1d:ca:c6:05:ce:3c:53:1f:58:c5:3b:67:24:
         10:31:48:f6:d4:0c:47:c0:6f:7c:6c:8e:df:51:8d:53:a3:15:
         79:10:a0:cd:48:97:40:37:e2:4b:12:cd:94:53:84:73:ce:b3:
         e5:58:7e:39:8c:ae:73:0a:06:00:11:a7:3c:7e:0d:7b:5a:98:
         1e:b3:02:4f:d3:24:d7:2b:fe:41:a2:0b:19:39:ed:00:22:b0:
         20:c7:6a:b4:c4:94:8e:7a:bf:6f:70:f9:1e:1a:22:d0:89:4c:
         61:6f:51:d9:f1:ac:73:e9:d3:2d:99:dd:8e:41:df:ac:26:8d:
         1d:30:70:3a:78:38:39:71:01:3a:98:f2:b5:07:5a:ef:84:1c:
         07:f1:b4:e6:47:1b:9d:99:0a:a2:78:e0:21:fa:da:04:33:7c:
         14:8b:9c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:18 2023 by rpki-client on console.sobornost.net