Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0FB710AFB895BCF01E90A112F91574F572F05758EE3793F8C2755C857489FD7A/0/34352e3233362e3234342e302f32332d3234203d3e20323633373332.roa
File:                     34352e3233362e3234342e302f32332d3234203d3e20323633373332.roa (raw, json)
Hash identifier:          e2p0xlJEcfu0MYhSJkL3ARyzEBpUxFng4DjwsOLgMlY=
Subject key identifier:   06:DC:56:65:DD:DC:54:05:43:C6:5B:C1:FE:BF:50:BE:17:A5:DC:54
Certificate issuer:       /CN=8B5877089EE5620C180446F9B30B225C6209D812
Certificate serial:       48C69457E3D45F9F9F6A142B9675351EA5B338DF
Authority key identifier: 8B:58:77:08:9E:E5:62:0C:18:04:46:F9:B3:0B:22:5C:62:09:D8:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B5877089EE5620C180446F9B30B225C6209D812.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0FB710AFB895BCF01E90A112F91574F572F05758EE3793F8C2755C857489FD7A/0/34352e3233362e3234342e302f32332d3234203d3e20323633373332.roa
Signing time:             Wed 13 Nov 2024 07:05:00 +0000
ROA not before:           Wed 13 Nov 2024 07:00:00 +0000
ROA not after:            Wed 12 Nov 2025 07:05:00 +0000
asID:                     263732
IP address blocks:        45.236.244.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Sat 16 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c6:94:57:e3:d4:5f:9f:9f:6a:14:2b:96:75:35:1e:a5:b3:38:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B5877089EE5620C180446F9B30B225C6209D812
        Validity
            Not Before: Nov 13 07:00:00 2024 GMT
            Not After : Nov 12 07:05:00 2025 GMT
        Subject: CN=06DC5665DDDC540543C65BC1FEBF50BE17A5DC54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fc:b7:e6:ef:40:1c:8a:af:17:bc:61:e7:ec:
                    8b:9d:8f:b6:7f:16:ea:77:03:4f:8c:75:db:f4:dc:
                    96:af:f5:8a:7e:9f:2f:a6:1e:7c:6d:7f:c8:6f:92:
                    e1:b3:18:eb:7a:3b:a2:02:75:df:fb:d5:ff:93:07:
                    1a:c5:b5:00:44:3e:9b:04:65:ed:50:f8:f7:9b:b3:
                    82:0d:c2:40:59:31:69:87:99:22:e6:60:42:bc:0a:
                    5b:82:a5:44:74:41:62:1b:b9:6c:05:bd:a3:fa:33:
                    e3:64:b3:ce:42:90:8f:01:95:a5:03:82:f8:0d:9e:
                    0d:92:df:9e:0e:24:a1:26:bc:2b:a8:b8:3c:33:77:
                    42:8b:d1:92:00:fb:77:b1:47:8b:fd:2a:da:b7:8d:
                    d2:e9:0b:89:99:8d:7b:98:fe:15:6d:24:d1:d8:2a:
                    b6:ac:0c:30:ec:1e:d6:bf:2e:bc:8b:da:05:bf:09:
                    51:91:bd:90:c8:30:8b:3b:9c:45:47:38:fa:36:ab:
                    2b:5a:7c:27:41:e5:31:53:18:83:27:a6:02:bd:8f:
                    f5:0f:c7:ed:18:22:37:da:db:42:dc:9c:a8:a5:f8:
                    49:04:33:61:0b:b6:ee:ef:72:e4:86:d5:7d:a1:81:
                    ef:81:ba:0d:8b:6c:b0:46:42:f9:a3:2e:54:f4:3d:
                    67:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:DC:56:65:DD:DC:54:05:43:C6:5B:C1:FE:BF:50:BE:17:A5:DC:54
            X509v3 Authority Key Identifier:
                keyid:8B:58:77:08:9E:E5:62:0C:18:04:46:F9:B3:0B:22:5C:62:09:D8:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0FB710AFB895BCF01E90A112F91574F572F05758EE3793F8C2755C857489FD7A/0/8B5877089EE5620C180446F9B30B225C6209D812.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B5877089EE5620C180446F9B30B225C6209D812.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0FB710AFB895BCF01E90A112F91574F572F05758EE3793F8C2755C857489FD7A/0/34352e3233362e3234342e302f32332d3234203d3e20323633373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:63:09:98:d1:b6:f6:fe:21:be:2f:c5:10:ce:54:23:65:a4:
         45:60:c3:6d:a3:c5:bc:3e:f3:83:a1:08:50:dc:dc:6f:7e:fb:
         52:41:97:27:63:56:d8:91:43:e1:d1:45:5e:e6:ef:1a:18:f4:
         df:60:fc:5b:e9:7b:f9:ba:5c:fe:eb:ef:b8:cb:c4:9b:70:ce:
         05:83:bb:43:6b:10:5e:08:be:1f:68:dc:13:c6:cc:e4:c8:6f:
         10:62:72:ec:3a:73:5c:16:f5:3d:81:e6:c5:2a:e6:9c:10:86:
         50:05:68:87:80:f8:1d:1a:c6:3b:fd:39:ab:29:60:f4:7e:1d:
         f4:01:c7:39:e0:da:99:4a:40:b2:37:11:fa:e9:f9:70:c7:a5:
         f2:f2:dd:68:17:76:da:71:2a:2d:cf:55:8a:c6:0b:9b:51:03:
         1f:a2:51:dd:f2:78:c9:1d:61:f6:a0:d3:df:c0:2c:8c:9e:ad:
         af:7e:b6:68:18:79:81:16:e5:4b:46:bf:de:27:f0:af:82:87:
         50:01:33:83:66:59:46:99:03:6c:1b:c2:6d:db:1e:48:0c:0a:
         ab:41:7d:95:0b:82:81:0c:50:bc:35:b2:53:f2:eb:f5:a7:81:
         81:2f:ad:83:e1:c8:be:78:98:72:52:99:c1:f1:35:d8:fb:16:
         a9:d1:bc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 04:18:12 2024 by rpki-client on console-ams.rpki-client.org