Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fe1a6a10-a3fc-4632-bc8a-e39d6a917091/1a902513be4fbe177b31dcfb5375232c1899bdde.roa
File:                     1a902513be4fbe177b31dcfb5375232c1899bdde.roa (raw, json)
Hash identifier:          iw0n2xkpQlcpPIOAEUmz9H04jU2xz3YbinDdBO7/joM=
Subject key identifier:   7B:80:36:7D:44:55:74:57:86:19:AF:B0:BF:CA:A4:63:74:07:73:04
Certificate issuer:       /CN=f2eb102562c4e2e7d977541fd8beef700e575efe
Certificate serial:       012E
Authority key identifier: 15:9E:F0:0A:78:1E:6B:BE:14:31:EC:2E:D7:85:F6:79:CE:4E:FF:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f2eb102562c4e2e7d977541fd8beef700e575efe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fe1a6a10-a3fc-4632-bc8a-e39d6a917091/1a902513be4fbe177b31dcfb5375232c1899bdde.roa
Signing time:             Tue 04 Jul 2023 00:38:00 +0000
ROA not before:           Mon 03 Jul 2023 00:38:00 +0000
ROA not after:            Fri 04 Jul 2025 00:38:00 +0000
asID:                     263157
IP address blocks:        45.167.156.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 302 (0x12e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2eb102562c4e2e7d977541fd8beef700e575efe
        Validity
            Not Before: Jul  3 00:38:00 2023 GMT
            Not After : Jul  4 00:38:00 2025 GMT
        Subject: CN=1a902513be4fbe177b31dcfb5375232c1899bdde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e5:e9:0f:7f:51:9b:06:8e:6e:14:75:3b:f5:
                    52:60:59:80:96:7b:c3:06:c8:aa:1c:77:99:6d:1a:
                    77:c8:eb:07:a3:e4:ea:44:89:73:11:97:dd:92:ec:
                    aa:7e:99:d9:89:00:48:be:44:33:94:db:24:ee:64:
                    9a:fc:a0:19:2b:9e:9c:7d:db:70:d7:ce:af:4c:3b:
                    aa:7a:04:c6:2b:39:bd:07:72:be:1a:9d:ee:0e:fd:
                    20:7c:e5:f7:9c:74:49:c5:a4:6d:1f:d1:22:de:15:
                    6b:dd:6e:f4:90:fb:96:a1:2e:f0:33:ff:b2:1a:ca:
                    05:7e:47:74:47:a8:69:a2:0b:9b:fc:ba:fa:ed:02:
                    d5:fe:c2:8f:ea:0e:3c:e3:23:94:a6:67:30:54:09:
                    cf:02:5f:cc:06:08:f7:23:96:c5:11:c1:3f:52:40:
                    7f:00:e1:47:0b:51:af:c6:d0:76:a7:2f:9e:b5:1d:
                    85:80:ca:db:88:21:b0:75:6e:9e:a0:7a:ff:7f:8f:
                    18:ff:03:8f:45:b7:0a:15:05:e8:58:f0:15:33:85:
                    0e:f3:98:4a:9f:39:28:e4:d4:2e:a5:b0:9a:1e:17:
                    f2:2a:e9:9d:76:22:04:a6:d1:6e:99:a6:ef:a0:13:
                    74:81:b6:e1:0b:da:57:7f:78:40:98:29:8e:5d:45:
                    fc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:80:36:7D:44:55:74:57:86:19:AF:B0:BF:CA:A4:63:74:07:73:04
            X509v3 Authority Key Identifier:
                keyid:15:9E:F0:0A:78:1E:6B:BE:14:31:EC:2E:D7:85:F6:79:CE:4E:FF:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f2eb102562c4e2e7d977541fd8beef700e575efe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fe1a6a10-a3fc-4632-bc8a-e39d6a917091/1a902513be4fbe177b31dcfb5375232c1899bdde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fe1a6a10-a3fc-4632-bc8a-e39d6a917091/f2eb102562c4e2e7d977541fd8beef700e575efe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:3a:c2:0d:0a:7f:fa:08:fa:d4:96:4a:a3:7d:d6:47:fd:65:
         8b:8d:38:f1:35:0c:ce:88:dc:80:b0:60:6f:8d:20:a1:b5:9c:
         87:f5:2b:6c:68:6f:ce:cf:b5:3e:b5:c2:5d:93:d3:d9:dc:05:
         69:46:4d:20:fa:35:65:f9:0a:0e:e8:f1:99:9a:eb:57:58:83:
         46:7b:a6:88:37:df:89:c7:af:54:94:c0:bf:13:34:b4:93:ec:
         b0:dd:6a:ca:a4:be:70:17:5a:29:a3:1b:ca:d1:ab:43:ad:9b:
         7a:b4:60:c1:64:1d:d1:c4:ef:9f:25:6e:32:ab:83:c8:6f:d1:
         d8:f1:a7:1b:e7:12:dd:1d:8c:99:07:5b:23:4c:03:c7:fa:03:
         fe:84:72:05:ba:c5:34:0e:9c:82:ed:24:f9:48:46:1f:98:08:
         fd:18:9c:f0:9d:fd:a0:64:0e:30:3b:fc:32:bc:b8:59:a8:53:
         89:09:94:ba:93:74:ff:a5:52:a7:0d:ae:48:fb:54:40:70:61:
         d7:41:c8:d1:46:3f:d0:76:3c:cf:d9:b9:30:5f:0f:5d:7c:ef:
         c8:20:f7:27:5d:be:d0:be:b6:6b:5b:c9:53:cc:41:16:21:60:
         0c:66:e6:6f:8f:48:52:66:00:23:55:e3:31:ec:f4:26:58:21:
         8e:d1:f4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:19 2023 by rpki-client on console.sobornost.net