Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/34352e3232372e3235332e302f32342d3234203d3e203439343533.roa
File:                     34352e3232372e3235332e302f32342d3234203d3e203439343533.roa (raw, json)
Hash identifier:          p8BTdRNFKil6wWjiiig+clr0IQ2fErd8VUIIhBNP1AI=
Subject key identifier:   5E:BD:61:79:AB:9C:E6:D4:69:F3:46:1A:84:70:32:DC:F3:40:6D:47
Certificate issuer:       /CN=0A2E8494F1EE6E9343EF823748A436EA77B86231
Certificate serial:       7E1201A8FD765EB1C543507C940D291BCA625631
Authority key identifier: 0A:2E:84:94:F1:EE:6E:93:43:EF:82:37:48:A4:36:EA:77:B8:62:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A2E8494F1EE6E9343EF823748A436EA77B86231.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/34352e3232372e3235332e302f32342d3234203d3e203439343533.roa
Signing time:             Tue 04 Feb 2025 18:50:47 +0000
ROA not before:           Tue 04 Feb 2025 18:45:47 +0000
ROA not after:            Tue 03 Feb 2026 18:50:47 +0000
asID:                     49453
IP address blocks:        45.227.253.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 18 Feb 2025 16:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:12:01:a8:fd:76:5e:b1:c5:43:50:7c:94:0d:29:1b:ca:62:56:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2E8494F1EE6E9343EF823748A436EA77B86231
        Validity
            Not Before: Feb  4 18:45:47 2025 GMT
            Not After : Feb  3 18:50:47 2026 GMT
        Subject: CN=5EBD6179AB9CE6D469F3461A847032DCF3406D47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a7:c7:b8:17:35:6d:e4:8e:f4:34:67:02:37:
                    8a:46:77:28:63:4e:8b:7c:4a:4e:94:e0:43:09:dd:
                    26:c0:e4:c1:89:8a:e5:eb:5c:80:37:1e:68:f7:fa:
                    2f:bb:df:b6:7b:46:3b:8b:7a:fe:68:80:11:24:c8:
                    37:04:bb:4b:5f:50:af:2e:a4:a0:37:e0:df:72:94:
                    80:ae:68:21:1c:1f:e2:19:70:6b:82:e3:47:db:1e:
                    ca:b8:83:b0:3a:f0:3e:b4:e8:cf:fd:d5:47:94:74:
                    99:2f:61:ce:a7:7c:be:8e:8f:f4:61:62:64:07:84:
                    7f:88:65:54:82:d1:6e:b6:99:8b:49:c3:a4:1f:c5:
                    0a:c6:93:f6:e9:e3:84:94:ee:73:a3:31:df:8e:62:
                    b9:64:6d:16:86:61:fd:04:20:f4:4a:7a:ea:e3:4b:
                    bf:30:b7:26:be:b7:f7:ce:79:a4:2a:b8:51:f7:d9:
                    23:ad:64:cd:47:a5:e4:4a:ca:4a:18:01:c7:3c:25:
                    fc:d7:08:b5:2f:78:1b:ca:f7:b1:d4:b1:da:f2:7b:
                    a8:ce:28:52:8f:df:25:19:25:2d:10:a0:7e:76:78:
                    2a:de:3a:f2:04:e7:ad:1d:28:17:e1:65:3b:3b:07:
                    88:f1:4c:91:c9:5f:82:0f:9b:62:2a:47:c8:a8:7e:
                    7c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:BD:61:79:AB:9C:E6:D4:69:F3:46:1A:84:70:32:DC:F3:40:6D:47
            X509v3 Authority Key Identifier:
                keyid:0A:2E:84:94:F1:EE:6E:93:43:EF:82:37:48:A4:36:EA:77:B8:62:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/0A2E8494F1EE6E9343EF823748A436EA77B86231.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A2E8494F1EE6E9343EF823748A436EA77B86231.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/34352e3232372e3235332e302f32342d3234203d3e203439343533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:59:92:f1:c0:6d:5c:c1:42:4c:e4:f5:67:e2:ee:65:a5:86:
         09:18:58:51:db:0b:fa:54:be:40:e9:8f:2a:ef:c5:08:50:cc:
         bd:f5:16:40:3c:df:a2:06:7d:f4:5a:35:2e:49:5a:8f:df:cd:
         7a:89:4a:33:4c:95:91:24:65:16:b9:3f:e5:02:33:06:8b:9f:
         87:21:b0:58:5e:64:0d:a0:c6:ab:cd:5e:d3:fb:50:6a:84:ca:
         02:68:09:89:c6:2d:3a:66:c0:7a:ed:1f:64:7e:0b:ad:ff:2e:
         a0:76:71:71:b2:4a:3b:2a:79:4c:cb:4b:1c:4d:4f:df:c9:ea:
         f0:b6:b6:6b:4c:90:b6:aa:ea:12:2b:2d:b3:e5:de:6b:a3:0b:
         6f:45:9b:9f:9f:e7:59:6a:3d:c1:43:69:74:5c:45:d4:b7:ad:
         19:14:f9:84:1c:68:bc:51:ed:7a:33:94:8a:ac:b1:42:b7:a2:
         7e:bd:94:37:72:d4:2b:67:27:32:3a:56:bf:99:ce:0c:f0:70:
         7f:c7:b5:f2:c5:38:c0:52:f5:0d:ac:5d:cc:ca:64:8b:dc:5a:
         e0:80:43:da:22:7e:6e:b0:ad:a2:10:2e:b4:dd:20:fe:26:35:
         92:f6:f1:6d:9e:f4:c4:ed:a3:15:5b:5a:2e:0d:a4:df:d2:35:
         9e:f8:6f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:41:46 2025 by rpki-client