Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C7C36DCB6F18C2C66F0A4D3589CFD1F0951B1CC300D7BB482FAEAF95E951F16/0/323830333a643761303a3a2f33322d3332203d3e203532343635.roa
File:                     323830333a643761303a3a2f33322d3332203d3e203532343635.roa (raw, json)
Hash identifier:          IPHBOUisfQFHPO4U6uf23oA2mlyeMseFe/r3WxdmYio=
Subject key identifier:   C4:E6:0D:E1:A5:FD:31:63:3D:EB:ED:0D:97:FA:12:8C:8B:7A:2F:23
Certificate issuer:       /CN=CFD2835EF2DA8C68B69290E421AE6ACB9E7B06BD
Certificate serial:       620CACDE3071070BD1809A97F0DA889664D847CF
Authority key identifier: CF:D2:83:5E:F2:DA:8C:68:B6:92:90:E4:21:AE:6A:CB:9E:7B:06:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFD2835EF2DA8C68B69290E421AE6ACB9E7B06BD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C7C36DCB6F18C2C66F0A4D3589CFD1F0951B1CC300D7BB482FAEAF95E951F16/0/323830333a643761303a3a2f33322d3332203d3e203532343635.roa
Signing time:             Mon 01 Jul 2024 01:45:01 +0000
ROA not before:           Mon 01 Jul 2024 01:40:01 +0000
ROA not after:            Mon 30 Jun 2025 01:45:01 +0000
asID:                     52465
IP address blocks:        2803:d7a0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 01 Jul 2024 11:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:0c:ac:de:30:71:07:0b:d1:80:9a:97:f0:da:88:96:64:d8:47:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFD2835EF2DA8C68B69290E421AE6ACB9E7B06BD
        Validity
            Not Before: Jul  1 01:40:01 2024 GMT
            Not After : Jun 30 01:45:01 2025 GMT
        Subject: CN=C4E60DE1A5FD31633DEBED0D97FA128C8B7A2F23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b2:8a:83:4e:07:10:5f:85:3b:81:6b:bd:d5:
                    f1:51:4b:75:b4:42:bd:71:cb:d4:a5:3c:1d:31:9e:
                    9a:c3:4a:4b:75:69:86:14:12:c7:77:b7:97:10:52:
                    27:1d:05:79:99:2c:d0:76:9b:c1:47:81:dc:dd:b1:
                    bb:2c:30:89:87:92:2f:26:42:63:da:7b:ff:b3:cb:
                    49:63:d1:5d:c5:a9:bc:2b:9c:26:ba:cb:f6:2c:81:
                    cb:bc:f0:ad:c7:98:1d:cf:6a:da:00:b6:01:ee:78:
                    2e:ab:b1:48:b1:82:35:17:cc:99:d5:66:18:dc:b6:
                    98:02:52:e9:20:44:17:7a:8c:37:c1:be:21:6f:fe:
                    a0:c5:0c:e4:4a:eb:14:16:aa:1c:cc:f8:25:78:4f:
                    ae:60:8f:ce:85:23:b3:d3:dd:11:59:c6:35:5b:92:
                    39:71:19:25:94:08:c8:68:3b:66:f4:c9:94:5f:a2:
                    db:35:73:70:ca:b7:0e:4d:9c:55:4b:51:e7:24:1c:
                    3a:9f:2d:60:a3:db:07:48:c6:83:b1:72:2e:3f:b9:
                    6b:68:b1:93:63:fd:0b:31:42:ea:b4:97:59:eb:58:
                    df:00:33:aa:60:55:05:ac:71:69:1b:78:e2:7b:5f:
                    48:bb:3d:51:40:09:27:69:81:a0:b0:9e:c7:c9:b0:
                    07:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:E6:0D:E1:A5:FD:31:63:3D:EB:ED:0D:97:FA:12:8C:8B:7A:2F:23
            X509v3 Authority Key Identifier:
                keyid:CF:D2:83:5E:F2:DA:8C:68:B6:92:90:E4:21:AE:6A:CB:9E:7B:06:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C7C36DCB6F18C2C66F0A4D3589CFD1F0951B1CC300D7BB482FAEAF95E951F16/0/CFD2835EF2DA8C68B69290E421AE6ACB9E7B06BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFD2835EF2DA8C68B69290E421AE6ACB9E7B06BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C7C36DCB6F18C2C66F0A4D3589CFD1F0951B1CC300D7BB482FAEAF95E951F16/0/323830333a643761303a3a2f33322d3332203d3e203532343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d7a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:e0:b9:5f:bb:76:dc:6b:fd:a0:5f:5a:f7:0e:12:dd:39:3a:
         67:a6:ba:60:2c:e9:d7:f7:a6:5a:91:d9:e3:32:2a:0d:66:02:
         2d:d5:ff:2a:d6:d3:86:39:98:d6:22:c6:db:6b:6a:c5:6f:a2:
         1f:af:95:a2:d3:ba:9c:3d:08:f4:4f:10:1c:2c:5e:51:f5:69:
         82:16:9d:2b:ef:af:0d:36:9d:14:11:6b:a5:d6:48:6b:f4:7a:
         e0:2d:c5:e1:94:63:39:c2:fc:a8:a0:8a:24:4c:74:17:ef:68:
         c1:23:dc:5a:6c:58:66:46:9c:f0:35:88:0c:0b:3f:aa:0f:2a:
         35:26:9e:03:25:5c:eb:3e:88:aa:38:b4:62:6e:75:30:32:d1:
         3b:c7:07:08:8e:62:ee:cc:62:82:0f:da:e1:bc:51:80:05:cb:
         3c:08:05:a1:b6:89:e9:47:44:ef:c8:ad:3b:5c:18:2c:25:cc:
         11:71:4e:d7:5f:0d:bc:05:1e:58:d3:e9:19:14:c6:fb:5a:c1:
         16:68:6d:06:bc:fc:f7:47:56:cd:4f:c1:df:b0:b2:81:b3:58:
         6f:6d:52:e3:c1:0a:b6:c5:73:b9:36:85:4d:66:27:28:48:ab:
         ac:5c:2b:c6:33:e3:55:ab:eb:f4:3b:50:c8:88:04:43:b4:7d:
         2d:af:e6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 13:01:24 2024 by rpki-client on console-fra.rpki-client.org