Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0FB710AFB895BCF01E90A112F91574F572F05758EE3793F8C2755C857489FD7A/0/34352e3233362e3234342e302f32332d3233203d3e20323636383035.roa
File:                     34352e3233362e3234342e302f32332d3233203d3e20323636383035.roa (raw, json)
Hash identifier:          yjHx00sMsmZZPTIjsEgAX7PJduS5VUCXBSFfyWylQQU=
Subject key identifier:   B5:EE:68:92:4C:86:0F:45:73:77:00:21:9D:F5:9C:1E:1C:9D:50:3A
Certificate issuer:       /CN=8B5877089EE5620C180446F9B30B225C6209D812
Certificate serial:       710BD16F0A70E3E59D0814EB074E2B49ABBA2C31
Authority key identifier: 8B:58:77:08:9E:E5:62:0C:18:04:46:F9:B3:0B:22:5C:62:09:D8:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B5877089EE5620C180446F9B30B225C6209D812.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0FB710AFB895BCF01E90A112F91574F572F05758EE3793F8C2755C857489FD7A/0/34352e3233362e3234342e302f32332d3233203d3e20323636383035.roa
Signing time:             Fri 25 Oct 2024 19:15:00 +0000
ROA not before:           Fri 25 Oct 2024 19:10:00 +0000
ROA not after:            Fri 24 Oct 2025 19:15:00 +0000
asID:                     266805
IP address blocks:        45.236.244.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 29 Oct 2024 15:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:0b:d1:6f:0a:70:e3:e5:9d:08:14:eb:07:4e:2b:49:ab:ba:2c:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B5877089EE5620C180446F9B30B225C6209D812
        Validity
            Not Before: Oct 25 19:10:00 2024 GMT
            Not After : Oct 24 19:15:00 2025 GMT
        Subject: CN=B5EE68924C860F45737700219DF59C1E1C9D503A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:52:33:e1:c8:e7:b0:5e:45:a7:01:7e:81:e3:
                    24:a9:e0:30:e4:b2:28:5e:84:29:2a:82:b6:e7:94:
                    e9:9b:50:c5:4a:d9:a0:2c:e6:3c:ad:ac:29:9b:47:
                    5b:c2:04:57:09:90:6c:29:77:59:90:d5:c6:20:da:
                    7f:37:f7:6e:bf:b4:9c:e2:ee:40:91:44:c1:a7:89:
                    94:1c:2a:42:48:32:ce:09:69:44:19:65:1b:1a:7b:
                    e1:10:07:02:60:59:3e:4b:6c:19:48:61:66:62:59:
                    2c:fb:b6:0b:35:48:6b:15:64:a3:d7:c8:08:bc:43:
                    49:71:7d:80:43:58:a4:50:43:9e:e8:a7:77:fb:23:
                    3a:e9:ff:bd:26:62:2c:90:3d:85:6f:db:4e:f2:c8:
                    2a:65:51:2d:2a:45:17:1e:40:be:bb:6c:0d:d2:05:
                    ca:cc:ad:41:a4:5f:5e:fb:8e:7a:a1:97:0b:63:61:
                    40:46:05:af:a0:ec:d8:44:4a:86:84:91:eb:24:bc:
                    8d:14:f5:2c:3c:3e:cd:f2:59:35:88:69:69:e4:c7:
                    21:b1:3d:d3:a6:ae:0b:a0:67:41:bb:c6:7d:ac:57:
                    89:50:93:78:e1:c6:4f:d7:ae:ab:a7:6d:4c:da:33:
                    a2:6a:ea:76:89:25:b4:1a:c0:6c:6d:b3:b5:b1:d0:
                    87:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:EE:68:92:4C:86:0F:45:73:77:00:21:9D:F5:9C:1E:1C:9D:50:3A
            X509v3 Authority Key Identifier:
                keyid:8B:58:77:08:9E:E5:62:0C:18:04:46:F9:B3:0B:22:5C:62:09:D8:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0FB710AFB895BCF01E90A112F91574F572F05758EE3793F8C2755C857489FD7A/0/8B5877089EE5620C180446F9B30B225C6209D812.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B5877089EE5620C180446F9B30B225C6209D812.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0FB710AFB895BCF01E90A112F91574F572F05758EE3793F8C2755C857489FD7A/0/34352e3233362e3234342e302f32332d3233203d3e20323636383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:00:bf:b4:6c:9a:1a:93:02:70:ca:61:2f:01:c7:ed:c0:2e:
         0d:35:08:32:b2:51:8d:5d:41:dd:b8:bf:d7:af:55:8c:39:2d:
         9e:2a:5b:b9:51:3b:f6:7a:79:98:fb:9c:c8:51:3f:e6:5c:d9:
         54:87:9b:03:41:63:2b:25:2e:4f:32:8e:55:ae:c7:68:ed:f2:
         a4:34:6b:8a:aa:e6:ea:0c:ec:64:0c:5b:81:b7:e5:c4:6e:25:
         c2:fd:83:c5:c3:b3:94:56:5e:58:4f:21:b6:51:07:72:4b:ba:
         27:69:1f:08:23:c1:c4:32:df:4d:c9:af:ee:ae:d4:71:06:59:
         8e:0d:08:5a:21:b1:ad:6b:0a:91:49:56:47:6d:af:41:ed:2c:
         5d:59:29:7d:88:4e:1c:06:b1:42:4e:e2:af:c8:fd:65:7c:c7:
         7b:35:b4:85:ee:a4:39:3c:43:1d:9c:c1:4e:92:28:30:7c:ba:
         12:f3:2c:6f:be:d1:e0:01:79:7b:d0:1a:ab:a4:a2:91:70:c2:
         e3:65:a7:b2:de:3d:98:78:29:13:8b:2b:53:04:15:01:64:99:
         1c:42:66:f1:8b:19:cf:ef:85:70:5e:d5:cb:bd:ab:be:36:7c:
         68:ea:bd:ea:2f:c3:a7:df:cf:c4:7a:37:7d:41:ac:7f:22:32:
         48:50:74:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 20:19:36 2024 by rpki-client on console-ams.rpki-client.org