Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230312e3135392e3230342e302f32332d3233203d3e203133393939.roa
File:                     3230312e3135392e3230342e302f32332d3233203d3e203133393939.roa (raw, json)
Hash identifier:          vQfnBlPzG7oerZ/M/t5SY6ZRfjd7vthZc9wgh/Sp6VQ=
Subject key identifier:   D4:AE:34:8A:7A:82:DD:E5:44:B0:85:35:F5:89:F8:48:8E:0F:71:E4
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       3F65D3067643B61FA3E7919BCACF6738FC0D16BE
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230312e3135392e3230342e302f32332d3233203d3e203133393939.roa
Signing time:             Tue 05 Mar 2024 17:50:54 +0000
ROA not before:           Tue 05 Mar 2024 17:45:54 +0000
ROA not after:            Tue 04 Mar 2025 17:50:54 +0000
asID:                     13999
IP address blocks:        201.159.204.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:65:d3:06:76:43:b6:1f:a3:e7:91:9b:ca:cf:67:38:fc:0d:16:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: Mar  5 17:45:54 2024 GMT
            Not After : Mar  4 17:50:54 2025 GMT
        Subject: CN=D4AE348A7A82DDE544B08535F589F8488E0F71E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b5:aa:eb:72:1e:0c:05:d9:f2:fe:a6:70:66:
                    2f:40:9a:91:c3:83:e9:4a:d2:96:75:5a:f4:6c:ff:
                    6f:31:c0:a4:8d:94:89:25:1d:08:d9:0f:a7:22:18:
                    54:79:1e:2a:03:54:89:f2:9f:dc:b1:c0:f2:aa:3b:
                    de:54:e3:d8:5c:c6:e7:31:67:05:38:3f:c8:8a:b1:
                    41:60:09:32:e8:d5:d9:03:e7:4a:46:0e:e5:4a:fd:
                    79:3f:83:9b:77:51:35:dc:da:73:ef:b5:66:c9:f7:
                    86:09:5c:da:63:76:da:c1:20:0a:99:bd:46:e5:bf:
                    28:a2:a5:49:88:f4:38:1d:2c:6b:9c:15:b1:3c:f4:
                    bd:80:b6:a2:95:43:15:84:51:c7:a4:e7:8f:6d:ba:
                    50:60:c7:62:53:74:63:59:da:9b:d1:4c:ee:2d:8f:
                    3d:c1:b9:66:85:61:14:48:44:1b:ef:c6:b0:5e:a9:
                    87:5c:9f:31:bd:7c:49:e0:56:91:8e:c3:fe:68:a5:
                    1b:a0:dc:84:ef:47:84:30:25:eb:d2:52:98:c5:b3:
                    0d:88:67:06:01:2f:06:f3:36:34:ff:62:ec:66:e2:
                    e5:05:b6:08:96:51:73:19:90:5e:81:86:f3:ea:f0:
                    32:6f:fd:90:b5:7b:a4:10:e2:34:ca:de:a7:b8:ec:
                    b9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:AE:34:8A:7A:82:DD:E5:44:B0:85:35:F5:89:F8:48:8E:0F:71:E4
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230312e3135392e3230342e302f32332d3233203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:33:5a:74:6e:38:9a:b6:f1:38:df:b5:9b:65:9d:a6:f2:9b:
         d9:43:f7:aa:16:81:5d:bf:ee:78:5e:89:df:9e:92:86:a2:3d:
         78:22:85:4a:93:bd:9a:66:80:bb:0d:29:8e:db:14:15:19:8f:
         af:00:be:c2:e4:39:6a:5e:40:48:37:42:6e:05:ef:8d:8e:72:
         69:ad:74:51:e2:62:74:e5:09:d5:9e:cf:5c:80:f9:73:25:86:
         6c:65:6f:d3:2d:63:8c:c8:9b:ea:29:88:aa:30:ac:39:8e:4d:
         69:0e:3a:95:a8:2c:65:e2:95:a4:16:2e:2b:64:86:cd:70:c2:
         d5:6a:33:c6:d3:dd:c3:cb:c0:8d:d3:9e:82:cf:e2:7b:07:74:
         d3:c0:fc:df:37:82:48:b8:5a:86:f7:54:0e:c3:25:f6:a2:a6:
         30:f1:15:24:ae:76:22:47:bc:a9:06:b4:1b:fa:e2:0a:9c:67:
         d7:69:81:a0:af:fa:17:ee:31:9c:ab:ea:bb:24:32:68:c5:26:
         55:5b:51:c1:d4:48:a8:78:97:67:df:70:b9:95:93:44:d5:75:
         bc:a3:30:3d:0f:04:75:6d:72:71:2f:e6:86:c2:b3:25:91:1e:
         dc:88:81:c3:89:64:0a:c6:43:0e:46:6b:c3:d1:ec:d1:d8:1f:
         83:00:22:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:43 2024 by rpki-client on console-ams.rpki-client.org