Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/3139312e3130322e3133362e302f32312d3231203d3e20333934343734.roa
File:                     3139312e3130322e3133362e302f32312d3231203d3e20333934343734.roa (raw, json)
Hash identifier:          GGjCrTc4UqRAAL5XovjE4dudMj6xd/mLxA03IsA7bAg=
Subject key identifier:   C8:6D:EC:1A:7F:9C:45:B8:DE:0B:5B:05:3A:A0:81:AF:45:8E:E5:90
Certificate issuer:       /CN=01DFCD969398C7D14FA18E44D1649A0B21C96569
Certificate serial:       55311A1267FD582B3087FDE40395DBC436EE3B4B
Authority key identifier: 01:DF:CD:96:93:98:C7:D1:4F:A1:8E:44:D1:64:9A:0B:21:C9:65:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/3139312e3130322e3133362e302f32312d3231203d3e20333934343734.roa
Signing time:             Tue 05 Mar 2024 17:47:54 +0000
ROA not before:           Tue 05 Mar 2024 17:42:54 +0000
ROA not after:            Tue 04 Mar 2025 17:47:54 +0000
asID:                     394474
IP address blocks:        191.102.136.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Mon 22 Jul 2024 16:45:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:31:1a:12:67:fd:58:2b:30:87:fd:e4:03:95:db:c4:36:ee:3b:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01DFCD969398C7D14FA18E44D1649A0B21C96569
        Validity
            Not Before: Mar  5 17:42:54 2024 GMT
            Not After : Mar  4 17:47:54 2025 GMT
        Subject: CN=C86DEC1A7F9C45B8DE0B5B053AA081AF458EE590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:27:bd:93:29:98:58:59:23:e1:d6:ca:aa:a1:
                    c4:26:b5:6b:d2:e6:b0:ba:0d:80:99:a7:49:89:78:
                    1e:92:3d:64:0c:1d:7e:c0:45:fa:e2:1b:d5:0b:35:
                    6f:b5:42:80:ef:3d:82:f2:40:2b:60:02:73:85:63:
                    83:db:c5:02:e0:55:6a:d6:34:e2:c9:7b:85:c9:e5:
                    99:63:c6:f0:b5:be:5f:a1:6a:38:38:85:fa:a9:d7:
                    6c:68:33:0f:c6:2b:83:3f:be:cd:a4:67:f4:71:f0:
                    9a:ee:e9:5e:a9:6e:5d:d2:2d:2c:0e:6a:c2:9e:1e:
                    e7:a0:0e:29:aa:97:bc:73:84:5e:d9:ac:74:05:1c:
                    5c:d1:6f:e4:2a:a0:8d:0a:06:36:1c:e6:d5:25:ff:
                    49:23:d2:a6:a2:19:24:1a:af:06:a6:03:43:23:3a:
                    5d:f4:e9:17:5a:ce:34:b2:a6:ed:14:0a:e2:cc:50:
                    b3:bc:23:68:50:b4:c5:91:98:7b:22:70:5f:37:df:
                    76:65:b7:49:50:6d:24:6d:12:01:88:6c:15:42:f5:
                    2f:65:87:31:6e:99:58:ae:f1:85:9c:2a:94:77:4f:
                    86:70:0b:d3:ac:61:2a:e0:17:6a:2c:55:29:fb:79:
                    db:3d:21:0d:50:9b:d5:6d:4b:06:a6:11:08:40:be:
                    9e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:6D:EC:1A:7F:9C:45:B8:DE:0B:5B:05:3A:A0:81:AF:45:8E:E5:90
            X509v3 Authority Key Identifier:
                keyid:01:DF:CD:96:93:98:C7:D1:4F:A1:8E:44:D1:64:9A:0B:21:C9:65:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/3139312e3130322e3133362e302f32312d3231203d3e20333934343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7e:c2:5a:dd:ed:a1:97:4c:69:dd:5c:e6:a7:bd:a5:b0:be:98:
         59:55:56:20:f1:3c:b8:57:5c:cb:dd:e5:c1:23:6e:1a:d0:73:
         35:0f:a4:ad:25:fe:9f:fa:b3:3d:a7:5c:9f:8e:f2:90:88:3c:
         e1:eb:92:f4:86:d4:fa:b5:f9:21:37:d6:ad:6e:04:f6:52:3f:
         af:22:18:01:b0:4c:00:69:54:23:0f:54:81:07:32:e7:56:13:
         8b:92:09:8f:bd:df:7e:cf:1a:17:c8:b0:9d:d2:cb:2b:b9:fd:
         33:f0:fa:b3:1e:0b:45:bf:2f:07:df:4a:96:82:28:b3:d6:eb:
         63:a9:81:85:73:7f:9f:f9:a8:45:54:bd:b7:29:17:73:1a:0f:
         7d:9d:65:46:78:f5:f9:0e:93:6b:dd:06:ca:5c:56:82:06:07:
         1b:85:c5:ec:64:f5:34:4b:b5:78:db:d6:ad:5b:df:e4:5d:76:
         2a:02:44:de:4e:a7:78:9c:e9:92:e7:2a:fd:33:e1:49:81:ca:
         46:1e:7c:8f:fa:db:ae:01:02:1d:29:af:4a:1c:a1:a8:c3:f7:
         38:98:cd:3e:a2:ed:58:bf:73:68:34:92:33:c5:a3:f6:dc:af:
         83:64:3c:e8:15:fe:47:3d:95:1e:13:34:bf:3f:8d:d6:ef:8f:
         99:c3:b9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 22 20:13:51 2024 by rpki-client on console-fra.rpki-client.org