Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/528b40d4-fe76-457b-ac58-dbbe7d62ac20/ca4d45cda98d149559a20a70d243ab08717f3dd0.roa
File:                     ca4d45cda98d149559a20a70d243ab08717f3dd0.roa (raw, json)
Hash identifier:          NDTDTRDFc7966obKt5ftViW5+O3I90g6ZquchUnZYwk=
Subject key identifier:   24:F4:BA:C8:2F:2C:09:3C:25:F3:2C:77:70:0E:50:4F:81:EE:C8:63
Certificate issuer:       /CN=14e2d3d1f7d31e7bbd5ba278ab59c144bc2f97b5
Certificate serial:       1B1965
Authority key identifier: 53:1C:51:AE:25:9D:A0:1F:BC:F6:89:DE:D5:B7:C2:9A:63:34:16:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14e2d3d1f7d31e7bbd5ba278ab59c144bc2f97b5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/528b40d4-fe76-457b-ac58-dbbe7d62ac20/ca4d45cda98d149559a20a70d243ab08717f3dd0.roa
Signing time:             Tue 11 Jul 2023 19:00:30 +0000
ROA not before:           Mon 10 Jul 2023 19:00:29 +0000
ROA not after:            Fri 11 Jul 2025 19:00:29 +0000
asID:                     28111
IP address blocks:        177.74.202.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1775973 (0x1b1965)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14e2d3d1f7d31e7bbd5ba278ab59c144bc2f97b5
        Validity
            Not Before: Jul 10 19:00:29 2023 GMT
            Not After : Jul 11 19:00:29 2025 GMT
        Subject: CN=ca4d45cda98d149559a20a70d243ab08717f3dd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2a:54:d3:f2:fa:4f:bf:c9:84:b9:a7:dc:4c:
                    c3:c8:c5:77:6d:a2:5f:b7:68:8c:11:70:4a:35:d9:
                    48:f7:2e:49:94:ee:73:b9:31:32:6b:3e:1c:b0:2d:
                    0a:ff:cb:b9:05:2a:95:8b:ca:9e:a6:96:3b:53:f3:
                    1c:0a:b3:69:89:81:55:5d:8f:c7:80:58:3b:0c:63:
                    81:b0:52:ea:31:5e:1a:dd:89:ce:f5:c8:c8:27:97:
                    de:96:30:d8:18:6c:e3:79:49:1c:9a:c7:73:f4:7b:
                    a4:dd:ec:0a:bf:39:bc:7b:fa:64:78:44:93:05:9f:
                    97:ee:7b:b1:4b:0e:ef:26:09:20:8d:6e:52:5a:11:
                    32:fb:4c:8c:2f:6b:31:0b:1b:9b:23:26:06:7e:30:
                    57:af:a8:1e:a3:d7:91:18:42:81:91:5e:1c:fb:bd:
                    8f:d6:71:92:06:b1:27:8c:b6:1f:b2:ad:34:e7:a7:
                    ab:5c:07:09:72:62:9e:1c:be:1b:04:4a:dc:9b:4b:
                    f1:9a:45:fc:1a:20:83:65:66:9f:dc:d0:4f:81:59:
                    d7:b1:75:dd:b7:46:99:22:22:be:f3:06:76:09:d9:
                    2d:ec:af:b4:9b:fb:24:d2:c6:80:c1:a0:20:09:23:
                    8f:35:ab:41:9a:6d:e0:ae:36:c3:79:c4:da:b3:d4:
                    3e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F4:BA:C8:2F:2C:09:3C:25:F3:2C:77:70:0E:50:4F:81:EE:C8:63
            X509v3 Authority Key Identifier:
                keyid:53:1C:51:AE:25:9D:A0:1F:BC:F6:89:DE:D5:B7:C2:9A:63:34:16:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14e2d3d1f7d31e7bbd5ba278ab59c144bc2f97b5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/528b40d4-fe76-457b-ac58-dbbe7d62ac20/ca4d45cda98d149559a20a70d243ab08717f3dd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/528b40d4-fe76-457b-ac58-dbbe7d62ac20/14e2d3d1f7d31e7bbd5ba278ab59c144bc2f97b5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:70:d4:e4:dc:2a:f9:2c:b0:d6:a8:b8:25:f9:c6:67:0e:1e:
         59:a8:65:7c:15:c9:67:c1:12:ca:9f:4f:9d:2b:90:71:80:4b:
         d4:4b:38:17:bb:b4:31:ba:52:bd:2e:90:55:81:3c:f1:54:fc:
         64:9b:45:69:01:28:96:7c:1b:d9:1a:ee:71:ff:64:7a:27:72:
         db:d8:c8:fd:27:12:fb:8e:e6:fc:dd:db:cb:0f:b6:ea:c3:03:
         ba:d6:ce:aa:c7:8a:0d:41:a1:c4:8d:ee:73:b6:e7:1a:cf:25:
         72:a5:42:6d:b6:57:64:7d:18:e7:ea:e2:72:90:a1:dc:d6:93:
         a9:73:40:ab:30:94:8e:b5:22:67:f1:ff:1d:4f:25:43:37:13:
         2c:96:9b:8a:89:2a:2c:f7:7e:7f:3d:18:c3:39:0f:b3:ba:30:
         95:23:96:2f:51:24:24:e3:62:ca:92:aa:4e:7a:03:e6:ac:e4:
         8b:5a:db:81:6e:5c:76:94:4c:23:1e:f7:9d:e6:35:63:2a:ac:
         c3:85:05:9a:33:3a:ab:e2:7e:5b:45:63:a9:39:72:e1:be:0e:
         9d:72:5e:ec:29:91:fc:26:e7:dc:25:01:60:c5:38:33:e7:a2:
         2a:72:a8:c6:9f:61:ef:49:e2:f5:08:33:7b:5e:23:63:49:da:
         3d:58:ed:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:25 2023 by rpki-client on console.sobornost.net