Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0AAC69A41956A439A25582BDD0999F3376F62F5C0C3F0DCE526AB1EEF391C2E4/0/3137392e302e31322e302f32332d3237203d3e20323733383431.roa
File:                     3137392e302e31322e302f32332d3237203d3e20323733383431.roa (raw, json)
Hash identifier:          QQEaq1BEDB/E2Pk2YLkcP8qOAbGj2bkhJ9q7IQjMCU8=
Subject key identifier:   E6:44:9A:FD:B3:6C:D7:4C:12:BF:BB:AC:B4:81:24:EA:CB:AF:FE:C3
Certificate issuer:       /CN=92524D32A26E7E8BEFE0DAA1838F06F018C6783B
Certificate serial:       146B0372DFFB4A150AA0E573C0993BEBAC4B83DB
Authority key identifier: 92:52:4D:32:A2:6E:7E:8B:EF:E0:DA:A1:83:8F:06:F0:18:C6:78:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92524D32A26E7E8BEFE0DAA1838F06F018C6783B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0AAC69A41956A439A25582BDD0999F3376F62F5C0C3F0DCE526AB1EEF391C2E4/0/3137392e302e31322e302f32332d3237203d3e20323733383431.roa
Signing time:             Tue 30 Jul 2024 01:15:00 +0000
ROA not before:           Tue 30 Jul 2024 01:10:00 +0000
ROA not after:            Tue 29 Jul 2025 01:15:00 +0000
asID:                     273841
IP address blocks:        179.0.12.0/23 maxlen: 27

Validation:               Failed, certificate revoked on Thu 22 Aug 2024 21:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:6b:03:72:df:fb:4a:15:0a:a0:e5:73:c0:99:3b:eb:ac:4b:83:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92524D32A26E7E8BEFE0DAA1838F06F018C6783B
        Validity
            Not Before: Jul 30 01:10:00 2024 GMT
            Not After : Jul 29 01:15:00 2025 GMT
        Subject: CN=E6449AFDB36CD74C12BFBBACB48124EACBAFFEC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4b:1a:b6:33:59:87:80:d0:80:e1:c0:b8:00:
                    49:00:a5:22:91:1d:e4:97:5e:32:6a:3a:20:b4:c4:
                    84:57:23:d7:26:ed:73:09:20:bd:26:1e:b2:7b:93:
                    bd:86:8c:0a:57:82:71:2f:73:d7:6e:e3:b1:1e:e8:
                    eb:ac:01:bb:4f:44:56:1c:61:02:d4:1e:a9:4c:59:
                    52:aa:90:35:0b:a1:93:d0:49:14:01:4b:23:a9:5c:
                    fb:47:43:a4:e4:15:a2:7b:49:aa:e6:a3:4d:4e:3e:
                    1e:86:5a:e2:5a:bd:05:56:a2:f7:8d:f7:0a:07:65:
                    1e:8d:c2:77:00:33:4e:6a:13:83:a6:f3:85:e5:40:
                    7b:17:d5:85:bb:a9:a9:e3:62:ab:0f:7a:ff:f5:47:
                    0b:84:ae:6a:21:18:b9:91:6d:28:5c:cd:82:1e:96:
                    fe:05:83:fe:f0:71:25:6a:0c:18:db:89:2e:1a:96:
                    af:bb:29:81:6f:f3:91:6a:29:8c:71:20:01:10:77:
                    48:f5:53:37:36:1d:5d:ed:d9:76:12:6d:00:35:0e:
                    ca:96:5d:b0:2d:92:72:7a:7f:dc:b7:8b:2b:ad:3f:
                    08:3a:44:4c:99:40:31:04:00:96:e1:cb:fe:dd:ce:
                    f9:ee:24:a1:2c:6e:da:5e:47:f7:de:2c:fe:76:2e:
                    d0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:44:9A:FD:B3:6C:D7:4C:12:BF:BB:AC:B4:81:24:EA:CB:AF:FE:C3
            X509v3 Authority Key Identifier:
                keyid:92:52:4D:32:A2:6E:7E:8B:EF:E0:DA:A1:83:8F:06:F0:18:C6:78:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0AAC69A41956A439A25582BDD0999F3376F62F5C0C3F0DCE526AB1EEF391C2E4/0/92524D32A26E7E8BEFE0DAA1838F06F018C6783B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92524D32A26E7E8BEFE0DAA1838F06F018C6783B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0AAC69A41956A439A25582BDD0999F3376F62F5C0C3F0DCE526AB1EEF391C2E4/0/3137392e302e31322e302f32332d3237203d3e20323733383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:1d:49:c3:4a:51:5f:bd:03:88:97:7f:e0:f8:51:ab:32:d2:
         b1:b9:22:bd:91:b1:63:c4:1a:ea:9a:e6:78:2d:a7:dd:35:8a:
         53:d7:5b:a7:8a:9d:64:99:d5:17:e8:7d:d7:92:fe:3c:08:70:
         dd:c5:b0:63:19:57:3d:28:55:e2:73:f7:f1:81:a7:c4:3a:f8:
         70:3f:4d:05:af:30:98:04:46:c9:35:c3:fc:11:ca:6d:e1:df:
         c3:42:72:b8:54:f7:65:9a:4c:c2:09:08:2c:71:fc:74:4e:24:
         a5:8d:7e:56:41:30:18:b2:fc:04:42:b4:66:c9:21:61:a7:55:
         02:22:d6:af:6b:3f:9a:ff:e9:d9:6f:a5:7c:2c:c7:05:9e:28:
         19:90:cf:d8:9f:96:36:6d:a0:97:ae:d9:20:ce:eb:b9:ec:1a:
         7f:cb:46:ed:7b:42:65:8d:43:57:54:90:8d:a7:e6:93:e9:ac:
         70:c3:13:c8:2e:d3:8e:b8:02:bf:19:db:c5:9a:fe:28:ec:e2:
         ce:a8:67:b2:f9:d3:22:41:b7:ce:80:e6:ca:0c:03:3c:7c:69:
         53:c1:06:8f:31:31:7b:d3:12:d7:de:1a:e9:37:c6:5a:7b:bc:
         66:8b:b3:14:38:e9:c6:d7:58:fe:68:22:4d:e8:53:35:c5:54:
         f0:11:58:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 00:20:33 2024 by rpki-client on console-ams.rpki-client.org