Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05985ED27A8125BBA401250FB751C7B25EE08D4144467D815B7FEB6D544BC162/0/3137392e36332e3233322e302f32322d3232203d3e20323635363432.roa
File:                     3137392e36332e3233322e302f32322d3232203d3e20323635363432.roa (raw, json)
Hash identifier:          ywKgswY3ORx3V5r0DwkqxsGn5OLKhmBob53eOhFmICg=
Subject key identifier:   57:CD:8E:84:67:13:01:6A:11:6A:69:CE:E8:45:17:F7:6E:AC:05:41
Certificate issuer:       /CN=F180E837FD7EADABAAE544FD4C3108402270D287
Certificate serial:       543352D074ED50F785E111AD7F6A1F27F9EB9C8A
Authority key identifier: F1:80:E8:37:FD:7E:AD:AB:AA:E5:44:FD:4C:31:08:40:22:70:D2:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F180E837FD7EADABAAE544FD4C3108402270D287.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05985ED27A8125BBA401250FB751C7B25EE08D4144467D815B7FEB6D544BC162/0/3137392e36332e3233322e302f32322d3232203d3e20323635363432.roa
Signing time:             Tue 11 Jun 2024 00:35:00 +0000
ROA not before:           Tue 11 Jun 2024 00:30:00 +0000
ROA not after:            Tue 10 Jun 2025 00:35:00 +0000
asID:                     265642
IP address blocks:        179.63.232.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 11 Jun 2024 03:15:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:33:52:d0:74:ed:50:f7:85:e1:11:ad:7f:6a:1f:27:f9:eb:9c:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F180E837FD7EADABAAE544FD4C3108402270D287
        Validity
            Not Before: Jun 11 00:30:00 2024 GMT
            Not After : Jun 10 00:35:00 2025 GMT
        Subject: CN=57CD8E846713016A116A69CEE84517F76EAC0541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:16:98:ee:9c:d4:a8:0b:8e:59:d4:05:5d:ec:
                    ee:6d:ef:e6:f4:a5:86:5e:f2:b1:9c:7b:73:49:2c:
                    2c:21:10:1d:a9:79:ab:10:2f:aa:4a:0c:4d:50:2a:
                    07:92:0f:e3:6a:a4:35:2e:df:af:27:92:e7:8f:b3:
                    22:7d:fe:de:c5:56:d4:a4:e1:53:a1:df:55:b6:f2:
                    34:95:fc:b3:9e:35:f6:7f:ed:28:e8:cd:cc:57:30:
                    ff:e4:ca:1a:8e:8f:71:ae:21:31:53:a8:59:9e:0f:
                    2a:80:5d:a6:aa:9e:0e:c8:03:69:ae:2b:cf:ea:71:
                    02:8c:8b:66:47:77:18:a7:3a:0a:17:33:3b:bb:20:
                    5a:78:02:53:77:e9:e4:36:cc:92:cd:39:bd:63:25:
                    b4:3f:c3:4d:14:5d:92:7b:d7:e8:00:49:70:3d:76:
                    35:79:37:7c:47:5a:16:5f:9f:2f:8f:8a:2d:22:bd:
                    0c:ac:b9:49:5d:e9:fb:16:94:ca:23:52:c0:be:38:
                    c0:cb:0f:2a:b2:8f:86:d8:e7:42:27:02:6f:9c:69:
                    79:ed:b3:b0:10:d7:0d:d9:c8:8a:64:df:eb:76:e0:
                    2d:3f:8b:b6:8f:52:06:4b:4a:c4:c4:4c:de:90:4b:
                    46:6a:b0:9a:82:7e:d9:a3:96:03:56:9b:2f:1e:5f:
                    72:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:CD:8E:84:67:13:01:6A:11:6A:69:CE:E8:45:17:F7:6E:AC:05:41
            X509v3 Authority Key Identifier:
                keyid:F1:80:E8:37:FD:7E:AD:AB:AA:E5:44:FD:4C:31:08:40:22:70:D2:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05985ED27A8125BBA401250FB751C7B25EE08D4144467D815B7FEB6D544BC162/0/F180E837FD7EADABAAE544FD4C3108402270D287.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F180E837FD7EADABAAE544FD4C3108402270D287.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05985ED27A8125BBA401250FB751C7B25EE08D4144467D815B7FEB6D544BC162/0/3137392e36332e3233322e302f32322d3232203d3e20323635363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:33:3a:f3:81:56:1a:2f:84:45:a4:a2:53:ee:bf:aa:86:b8:
         e1:2f:4e:f4:31:a6:b1:02:ea:a3:f0:b2:07:1b:c9:42:ae:1e:
         4d:64:8e:f6:a5:d1:5a:a2:4c:b6:30:48:1d:a1:9f:44:db:00:
         50:af:66:8f:89:8f:41:4a:71:3a:3b:8a:ab:97:0f:f9:72:47:
         4b:ba:21:bc:f8:35:57:c2:55:2f:84:1d:ba:44:bd:38:13:01:
         06:e6:58:31:5b:c6:08:8c:59:e9:19:3a:87:e4:b3:6a:36:46:
         3b:b4:98:a2:90:ea:34:58:05:51:3d:b8:49:11:cb:9e:37:e7:
         0f:42:32:d3:3c:20:01:dd:dc:c0:10:b3:c4:e5:37:f7:1d:3b:
         ae:cc:ad:ee:b4:d1:73:01:a6:54:8e:59:08:3b:a2:39:be:da:
         68:1e:82:91:3c:fe:11:b6:c3:3b:3f:40:1f:ec:88:e4:a1:15:
         5d:28:a9:a3:4e:40:db:b2:65:82:57:75:93:dc:77:69:4c:0e:
         43:ac:c9:50:4d:fc:61:ff:dd:02:46:d6:6a:4a:73:d2:db:07:
         28:75:78:16:87:c1:be:00:11:b6:43:c2:a7:3f:69:02:c1:74:
         23:9a:5f:e8:ed:dc:4a:e8:82:81:e3:7a:f2:fa:b1:a0:39:36:
         69:ff:12:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 05:06:48 2024 by rpki-client on console-fra.rpki-client.org