Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3234322e302f32342d3234203d3e203133393939.roa
File:                     3230302e39322e3234322e302f32342d3234203d3e203133393939.roa (raw, json)
Hash identifier:          1KHRKolj80oufTXjPxGJqEnKI35gh8Xf9X7kGSDvYiA=
Subject key identifier:   D2:D7:90:C2:02:14:42:EC:07:D1:5F:28:F6:48:16:F0:77:6E:8C:35
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       3641B3E6823B1F5D2DC4EC06A6E27153CE373D83
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3234322e302f32342d3234203d3e203133393939.roa
Signing time:             Thu 23 May 2024 04:30:17 +0000
ROA not before:           Thu 23 May 2024 04:25:17 +0000
ROA not after:            Thu 22 May 2025 04:30:17 +0000
asID:                     13999
IP address blocks:        200.92.242.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:41:b3:e6:82:3b:1f:5d:2d:c4:ec:06:a6:e2:71:53:ce:37:3d:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 23 04:25:17 2024 GMT
            Not After : May 22 04:30:17 2025 GMT
        Subject: CN=D2D790C2021442EC07D15F28F64816F0776E8C35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e8:eb:69:90:26:d7:bc:f3:b2:64:7d:d7:8b:
                    ce:d4:89:fc:7a:34:f7:e1:52:fb:8d:6c:a4:7b:d5:
                    1b:5b:59:2f:32:46:43:3e:da:0a:3f:00:57:62:63:
                    8d:b9:e6:09:85:52:b8:57:c8:18:b9:63:2f:66:37:
                    ad:01:c0:59:52:13:1b:df:83:c4:5a:d0:18:e5:cf:
                    06:3f:35:be:cd:f5:1e:10:d8:ae:d2:79:32:9a:5d:
                    0b:c2:70:5b:99:6f:fd:ca:75:be:43:00:5b:b2:7b:
                    6e:45:fc:70:69:ea:e4:76:2d:57:9a:ed:b7:ba:e6:
                    d8:49:c7:86:ae:e2:b7:b2:cd:96:66:b7:7c:5c:56:
                    33:3e:2a:70:60:5f:bf:cd:75:cb:85:b9:d4:c3:01:
                    c6:74:d2:fa:4c:fb:7e:1b:ad:09:d0:a8:22:33:58:
                    3e:1a:61:ed:4f:70:70:86:36:0a:34:c5:42:73:a5:
                    44:37:3f:85:1a:48:67:8d:f0:07:b3:98:1d:d4:a7:
                    6c:10:44:b1:de:23:87:6a:9b:87:ed:27:3b:3b:39:
                    3f:f4:cf:7f:41:78:0d:a7:78:78:33:b9:63:95:35:
                    16:dd:3f:c1:ef:51:bc:19:55:c4:c6:c6:17:e0:71:
                    6b:6a:fe:f1:15:0f:42:67:5f:a4:97:34:76:b3:ae:
                    32:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D7:90:C2:02:14:42:EC:07:D1:5F:28:F6:48:16:F0:77:6E:8C:35
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3234322e302f32342d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.92.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:16:3a:98:34:14:1b:d6:1e:f5:f8:3b:05:3c:b1:0e:02:5c:
         a7:18:d1:f7:1d:8e:70:f7:8a:a8:55:03:c1:7a:11:27:23:66:
         8c:c0:7c:14:0c:c1:41:e3:50:fe:5b:9b:ba:fd:f2:93:3c:b4:
         ec:d5:ae:e0:42:d1:b2:56:d4:4b:7d:df:c1:f1:24:f1:63:cf:
         e3:99:19:b2:4e:de:3c:1b:c2:6b:68:50:51:2b:96:89:c6:30:
         32:94:1b:99:64:9e:e3:7b:ab:a7:c6:d0:dc:9b:fd:ef:52:a6:
         23:19:08:36:12:df:09:d6:fa:26:dd:c5:b0:a3:b3:92:07:46:
         16:e4:a0:9a:ef:bb:3f:8e:33:cd:3a:73:7f:e1:02:ba:c1:60:
         60:32:c7:46:6b:03:24:90:a9:17:29:85:54:0f:4f:23:14:12:
         42:69:5a:95:4b:7b:dc:1b:cc:e0:69:fc:62:48:79:ea:d9:69:
         a9:87:15:59:a2:d4:b4:87:26:35:65:91:9a:48:46:c9:8c:81:
         bf:02:c9:3d:95:1f:84:3c:87:4f:7d:81:01:99:6e:ec:a9:b2:
         10:62:34:84:44:c8:ff:e8:dc:a8:ed:f7:86:49:fb:35:cf:7a:
         0e:90:50:07:47:3f:df:2d:55:72:32:74:7d:6b:aa:93:50:5b:
         6d:ba:be:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:43 2024 by rpki-client on console-ams.rpki-client.org