Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/3139312e3130322e3138342e302f32312d3231203d3e20333934343734.roa
File:                     3139312e3130322e3138342e302f32312d3231203d3e20333934343734.roa (raw, json)
Hash identifier:          GPIXb09/sgRsY4CunFMcxmtxApylFNuHS7OJ+CG4QJM=
Subject key identifier:   8B:52:4D:F7:98:E9:C9:A9:D3:9B:29:E3:AE:0B:0C:D2:E7:FF:B7:CB
Certificate issuer:       /CN=01DFCD969398C7D14FA18E44D1649A0B21C96569
Certificate serial:       35506CD39E2FD755CCCC67CC0C092FD665E2B0D4
Authority key identifier: 01:DF:CD:96:93:98:C7:D1:4F:A1:8E:44:D1:64:9A:0B:21:C9:65:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/3139312e3130322e3138342e302f32312d3231203d3e20333934343734.roa
Signing time:             Tue 05 Mar 2024 17:47:54 +0000
ROA not before:           Tue 05 Mar 2024 17:42:54 +0000
ROA not after:            Tue 04 Mar 2025 17:47:54 +0000
asID:                     394474
IP address blocks:        191.102.184.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Mon 22 Jul 2024 16:45:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:50:6c:d3:9e:2f:d7:55:cc:cc:67:cc:0c:09:2f:d6:65:e2:b0:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01DFCD969398C7D14FA18E44D1649A0B21C96569
        Validity
            Not Before: Mar  5 17:42:54 2024 GMT
            Not After : Mar  4 17:47:54 2025 GMT
        Subject: CN=8B524DF798E9C9A9D39B29E3AE0B0CD2E7FFB7CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5e:5e:1e:1f:45:ab:34:29:5b:88:de:94:3f:
                    68:c1:5b:32:a4:58:52:89:ed:a8:5e:8e:27:c8:63:
                    0e:d8:59:50:36:28:95:5f:f3:13:91:23:16:71:24:
                    f5:ac:ee:5c:f9:c9:6c:5b:bc:f6:8d:c8:21:3b:9c:
                    c1:16:69:25:b6:54:eb:ee:47:24:06:8a:65:b7:2a:
                    88:f0:01:3c:00:3a:af:b7:5a:81:16:d0:0f:f4:4f:
                    61:b9:56:5d:85:13:66:87:7b:83:0a:2d:1d:9d:90:
                    55:86:ff:c2:0d:e8:ea:da:a6:b0:22:0a:71:e9:fc:
                    c8:7b:19:6e:55:78:45:df:60:3b:02:dd:05:e7:88:
                    b0:09:c4:d3:eb:a7:d1:51:98:e4:07:10:0a:b0:d6:
                    9c:df:6e:91:0d:99:d4:7e:05:51:c7:b2:16:bc:b3:
                    1b:1a:40:3b:24:7d:d7:62:3a:e6:7c:0d:32:34:25:
                    da:6d:c6:31:55:ef:49:9a:cc:68:67:ad:0f:6e:5e:
                    dd:23:c4:b6:6f:f3:4f:03:0f:66:a0:a2:57:e5:bc:
                    9b:de:9b:5b:4f:e1:12:97:0d:01:07:16:81:90:ff:
                    a6:7b:53:00:58:ab:9d:d1:4f:62:0b:41:b1:17:db:
                    dd:ef:05:71:78:7a:c2:ab:b6:42:ef:6c:9b:de:c5:
                    28:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:52:4D:F7:98:E9:C9:A9:D3:9B:29:E3:AE:0B:0C:D2:E7:FF:B7:CB
            X509v3 Authority Key Identifier:
                keyid:01:DF:CD:96:93:98:C7:D1:4F:A1:8E:44:D1:64:9A:0B:21:C9:65:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/3139312e3130322e3138342e302f32312d3231203d3e20333934343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b3:cb:94:82:70:23:ce:34:96:e9:2c:28:ef:68:8f:c7:cd:12:
         ce:34:b0:c9:72:c9:0d:b3:48:ae:25:f6:e5:63:4e:b7:4f:36:
         39:28:8f:e6:95:66:99:14:46:5e:fb:19:94:51:d0:8a:b3:c2:
         7e:1d:6a:74:ea:31:2a:66:a8:27:31:48:04:67:c0:2f:91:98:
         6f:fd:f4:8d:81:7b:18:da:bb:6f:60:d3:13:df:e3:cd:02:fe:
         6a:e4:99:e0:ca:f7:7c:5b:fd:df:73:1b:5c:90:74:a2:08:71:
         d4:4b:71:d4:0c:01:e5:86:6d:30:69:97:32:80:0f:89:a8:b4:
         3f:2f:af:71:2f:01:99:f8:9c:53:29:16:01:8a:c7:0c:77:5a:
         ea:7f:cb:e0:34:77:e0:bd:17:86:34:7a:61:d4:f3:a1:29:5f:
         08:cd:d2:7b:72:dc:59:7a:02:bc:d9:ae:a8:4b:d6:37:b1:73:
         31:f5:fc:1b:64:f8:f8:98:55:ca:59:64:cb:e6:14:71:21:fc:
         92:16:a5:ad:e2:fe:cc:34:f2:ff:33:48:0a:a0:21:9f:72:42:
         a0:6e:9a:5d:51:81:a1:52:9a:31:c0:ec:af:2d:6e:ac:76:11:
         d1:80:9a:fd:02:7d:95:01:a5:58:80:65:9f:05:df:a5:61:d7:
         7a:68:ec:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 22 19:51:40 2024 by rpki-client on console-ams.rpki-client.org