Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3130332e3133332e3230382e302f32322d3232203d3e20323632313931.roa
File:                     3130332e3133332e3230382e302f32322d3232203d3e20323632313931.roa (raw, json)
Hash identifier:          M+/8Gc2YeuTFuSCaAMToZGI5roMWt95/iwpoT4XAmkI=
Subject key identifier:   C4:8F:9A:AC:1B:C9:5D:2D:82:00:EE:85:59:AF:74:F4:DC:19:18:EE
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       5AF3E62D0B368377F6EC4CB4AFE13FEBFEE71419
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3130332e3133332e3230382e302f32322d3232203d3e20323632313931.roa
Signing time:             Tue 08 Oct 2024 17:40:00 +0000
ROA not before:           Tue 08 Oct 2024 17:35:00 +0000
ROA not after:            Tue 07 Oct 2025 17:40:00 +0000
asID:                     262191
IP address blocks:        103.133.208.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 09 Oct 2024 13:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:f3:e6:2d:0b:36:83:77:f6:ec:4c:b4:af:e1:3f:eb:fe:e7:14:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Oct  8 17:35:00 2024 GMT
            Not After : Oct  7 17:40:00 2025 GMT
        Subject: CN=C48F9AAC1BC95D2D8200EE8559AF74F4DC1918EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:29:63:f1:45:17:a9:5a:38:6b:4d:69:99:fb:
                    04:68:e9:7d:39:02:90:3b:cb:22:7e:f1:4b:65:bf:
                    ac:9c:d2:1a:be:50:a6:10:47:a8:82:44:b0:c1:05:
                    55:af:ff:f8:50:58:37:2c:01:82:bb:d1:36:a5:06:
                    36:c2:78:11:de:61:64:9c:f3:6c:c4:13:8c:49:ea:
                    49:f8:ae:a5:c1:0c:a5:a2:94:1e:45:81:4c:f7:cd:
                    23:10:d2:eb:de:26:6f:fe:02:3b:82:06:7f:f1:6f:
                    ff:2a:1c:e9:72:2b:f0:2f:2d:23:2a:ad:f0:e1:9a:
                    8b:b9:d9:71:09:ce:df:79:07:43:8a:4e:7e:04:e6:
                    4b:54:fe:2f:2a:01:a6:57:64:79:fd:22:07:fd:bd:
                    1b:e5:cf:09:4c:bf:07:93:74:85:ff:59:50:e1:28:
                    18:25:7c:cc:d4:3b:38:f0:90:9d:49:42:76:55:2a:
                    ad:a1:24:ef:ab:21:9c:27:4a:44:83:19:b7:e9:ae:
                    55:2b:06:e9:5c:1a:8a:ef:31:b4:35:cc:6e:37:a8:
                    a5:c0:3c:29:f2:80:35:f8:51:50:bc:af:e2:e6:42:
                    71:fe:75:24:14:05:8d:08:7b:01:90:1c:a0:bc:6e:
                    c6:a7:17:d6:27:df:21:0c:4b:0d:6e:1e:33:f8:fd:
                    fd:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:8F:9A:AC:1B:C9:5D:2D:82:00:EE:85:59:AF:74:F4:DC:19:18:EE
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3130332e3133332e3230382e302f32322d3232203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:eb:9e:0f:63:2c:72:c8:90:1d:b7:37:e7:64:fe:40:0d:b7:
         c4:26:e0:b4:f6:a3:9c:e8:5e:11:00:fe:ad:9d:a6:4c:86:d5:
         ae:a0:4c:c7:e5:f4:03:d1:d9:ed:b6:a2:bb:dc:ef:f5:67:8e:
         f9:ca:17:8e:3f:33:05:43:91:2d:3a:54:c8:dc:b7:25:de:08:
         60:53:ee:2d:9e:e1:84:03:96:1c:e3:21:4a:7c:ce:90:39:18:
         27:1e:30:6f:00:a3:9e:41:d7:54:3e:ef:35:b4:f9:ff:9e:2f:
         a7:3d:e0:41:73:45:be:72:35:3c:f3:ff:0b:6c:92:20:0f:16:
         dc:5d:41:58:ca:65:8d:48:5d:02:df:fd:b5:60:14:60:43:e0:
         e0:42:10:0e:7b:ba:7b:88:22:14:d4:ec:9c:7a:46:77:4f:a1:
         a4:59:a9:90:de:eb:f5:ab:b2:ca:9d:c2:23:db:c4:f4:4e:9f:
         42:53:bd:72:99:f2:5d:e2:f3:c3:ac:56:cb:e0:51:28:cf:06:
         66:44:bc:0a:09:82:cf:be:0f:8e:03:ff:c5:47:2e:e7:a3:96:
         d3:cd:5e:c2:ae:93:d7:8e:1f:7f:c8:04:3d:cb:f4:ee:00:c7:
         b6:c7:a5:81:9d:64:23:c5:49:3c:59:bf:d8:81:f9:6f:f7:02:
         28:4f:ed:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 17:08:25 2024 by rpki-client on console-fra.rpki-client.org