Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35362e3133342e302f32342d3234203d3e20323632393136.roa
File:                     3230302e35362e3133342e302f32342d3234203d3e20323632393136.roa (raw, json)
Hash identifier:          IvCIU6V+i/3eKF+uSSCvz6hgS9zwUlVSP5VQyOYgl2s=
Subject key identifier:   6C:B3:B7:DA:47:79:77:57:69:EA:C2:C8:84:5F:51:26:97:5E:F4:D3
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       44ABB629FB4121F3396329DBD1A2F6B6D82D5776
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35362e3133342e302f32342d3234203d3e20323632393136.roa
Signing time:             Thu 23 May 2024 04:30:06 +0000
ROA not before:           Thu 23 May 2024 04:25:06 +0000
ROA not after:            Thu 22 May 2025 04:30:06 +0000
asID:                     262916
IP address blocks:        200.56.134.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ab:b6:29:fb:41:21:f3:39:63:29:db:d1:a2:f6:b6:d8:2d:57:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 23 04:25:06 2024 GMT
            Not After : May 22 04:30:06 2025 GMT
        Subject: CN=6CB3B7DA4779775769EAC2C8845F5126975EF4D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6a:17:14:1b:db:65:5a:16:8d:19:7b:6f:95:
                    74:fc:36:49:13:3b:fa:31:cb:13:cf:d1:8c:b4:3d:
                    ba:11:a8:9c:d6:10:50:8c:e3:5f:5a:0e:9f:62:70:
                    a9:e5:93:cf:a6:47:d2:d6:d5:d4:b7:04:27:60:61:
                    79:b5:c2:43:4d:28:51:b5:b1:5b:47:84:e0:e7:18:
                    d6:22:48:41:87:69:94:63:23:8a:94:d0:06:85:65:
                    25:a5:01:0a:81:3b:f8:24:b7:34:cb:1b:b3:88:9e:
                    49:9f:5e:3f:9d:f3:db:be:da:03:00:94:c8:81:28:
                    26:6e:0d:1d:8d:51:16:0e:f7:23:71:eb:d2:79:e9:
                    3d:33:6a:c7:5c:5c:36:4d:ca:c5:a5:63:cb:c1:b2:
                    00:5d:29:73:26:69:c3:f5:a1:f3:05:1c:cc:69:ae:
                    b5:14:14:c6:cc:5a:71:a5:08:c5:b5:76:36:5a:3b:
                    5c:10:02:63:96:74:04:85:fe:ca:bf:85:33:99:3e:
                    3d:70:e0:a7:97:1e:e6:43:43:52:e9:47:dd:65:64:
                    1e:1b:d2:cb:c8:13:b0:6b:fc:ce:2d:7b:8a:81:33:
                    dd:99:0d:9b:bf:b0:b3:59:80:93:0c:10:d6:48:d6:
                    52:89:a0:60:e9:97:16:49:ac:1b:f4:68:22:8f:4a:
                    ea:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B3:B7:DA:47:79:77:57:69:EA:C2:C8:84:5F:51:26:97:5E:F4:D3
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e35362e3133342e302f32342d3234203d3e20323632393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.56.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:3f:7d:89:10:9b:19:39:9c:2b:9a:55:76:d5:64:7d:f9:3a:
         7b:70:01:2d:e6:da:8f:58:ea:3c:fe:29:18:53:84:c7:9b:4e:
         e0:d8:88:ac:cf:84:b1:e9:39:a0:21:fa:3c:b5:06:4b:e8:9b:
         2b:4b:58:cd:0c:56:a0:12:40:74:30:05:61:16:d2:0d:18:20:
         3c:8b:16:ae:4a:8f:63:51:a1:a7:e2:ea:1e:e4:eb:f0:7d:a2:
         51:f4:63:1d:47:a0:87:9b:6d:c3:d0:62:7b:e3:c0:c7:81:e5:
         ae:24:01:1d:6b:27:24:c9:16:23:93:0e:58:f1:75:65:24:90:
         65:41:ed:5b:f5:68:f9:23:1d:73:fb:46:21:2d:ea:6d:ae:04:
         19:29:ee:44:3d:99:67:d4:47:72:e4:e6:c5:79:9d:b6:f6:17:
         61:75:92:8c:8d:b8:c3:ce:cf:10:1a:39:8d:be:70:3f:c9:01:
         61:e7:82:c4:ed:28:0e:46:be:07:01:c5:d5:47:5f:03:2b:1b:
         81:ad:82:24:65:19:f8:58:98:b9:64:16:20:81:49:fd:21:fe:
         18:d0:fa:56:40:63:d6:fb:a0:af:38:35:c0:21:13:57:d0:e5:
         c4:f2:f1:45:a3:dd:85:02:88:09:8a:d5:6d:5a:13:7f:d7:9c:
         55:14:4b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:43 2024 by rpki-client on console-fra.rpki-client.org