Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363030373a3a2f34382d3438203d3e203532323934.roa
File:                     323030313a313363373a363030373a3a2f34382d3438203d3e203532323934.roa (raw, json)
Hash identifier:          0SX9sf4vjeeeJjf0tdt8hJdMTOvcy0/8Xv38TYBmm/o=
Subject key identifier:   5A:57:81:75:A2:44:4F:6F:62:8C:09:E0:B8:F4:99:38:3B:F6:35:E5
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       1A57D87B3E01AF507C8EB5554F1603FC3154FA47
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363030373a3a2f34382d3438203d3e203532323934.roa
Signing time:             Tue 05 Mar 2024 18:15:54 +0000
ROA not before:           Tue 05 Mar 2024 18:10:54 +0000
ROA not after:            Tue 04 Mar 2025 18:15:54 +0000
asID:                     52294
IP address blocks:        2001:13c7:6007::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 14 May 2024 12:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:57:d8:7b:3e:01:af:50:7c:8e:b5:55:4f:16:03:fc:31:54:fa:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Mar  5 18:10:54 2024 GMT
            Not After : Mar  4 18:15:54 2025 GMT
        Subject: CN=5A578175A2444F6F628C09E0B8F499383BF635E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7f:13:00:88:35:12:f5:2f:07:d6:46:5e:aa:
                    0a:4c:27:9f:1e:23:31:8f:b6:c8:d2:0f:54:df:f9:
                    b0:3c:21:c9:13:25:9f:36:ea:80:96:60:aa:71:c4:
                    7e:a0:89:98:6d:d2:c8:54:4e:77:18:69:04:1e:87:
                    bc:3c:97:ca:8e:40:25:37:40:55:48:89:e4:25:21:
                    aa:ae:3c:89:ee:e6:ff:80:e9:97:de:cd:46:c7:31:
                    36:a8:18:4b:1b:28:f9:66:8d:ca:e3:51:39:52:26:
                    ca:9d:a9:12:1e:20:7a:86:3a:06:1b:2c:27:64:8d:
                    c6:99:e5:31:84:16:96:7a:7d:c2:bf:42:d4:62:7b:
                    2c:1c:99:ce:e4:cb:8e:da:d7:73:d8:76:85:7c:29:
                    fb:c9:da:5a:5a:d0:c9:03:64:50:b1:78:15:b7:8b:
                    9b:71:ac:22:07:d1:01:cd:d1:7d:1c:96:22:1b:6f:
                    ec:91:4e:72:76:bc:1e:17:c3:11:54:b9:7e:c4:8a:
                    15:45:02:39:67:e1:73:92:e5:5b:fb:2f:9d:7c:8d:
                    6d:cc:a8:78:6a:d7:ab:64:1e:07:0a:b5:12:62:9d:
                    3b:0f:ca:8e:4d:83:7b:51:8f:78:ba:46:5f:e4:e8:
                    aa:fa:b3:05:ef:5b:3d:fb:29:9e:fb:8d:a0:33:f4:
                    38:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:57:81:75:A2:44:4F:6F:62:8C:09:E0:B8:F4:99:38:3B:F6:35:E5
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363030373a3a2f34382d3438203d3e203532323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:6007::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:01:e9:fd:cb:37:2d:4e:71:fb:dc:8e:54:9e:f4:72:46:8e:
         7d:c0:4e:25:6c:d2:ce:0c:1a:09:7f:a1:4f:19:7a:99:d1:89:
         6f:5e:3c:0c:11:8f:f2:cb:42:b2:f7:71:43:4b:2c:8d:d4:b5:
         6a:5e:d9:90:e7:e0:f0:f3:59:a1:31:e5:ae:79:b1:e3:7e:59:
         08:28:9d:0c:a1:7f:0b:43:9c:7c:69:d2:25:d7:89:25:c9:f2:
         18:3d:03:b4:75:87:af:bd:ff:2c:f7:8e:f1:eb:45:ec:06:a8:
         3f:3c:ab:2c:99:f1:2e:39:df:05:d1:26:e8:c8:7c:7b:52:06:
         50:92:8b:59:23:aa:f2:6e:fc:08:3d:a7:d3:35:20:5d:3c:88:
         bd:31:9a:63:85:27:56:e5:27:ea:39:0f:df:5c:1c:70:d3:bd:
         9a:b4:99:45:ea:33:40:01:6f:9f:b2:17:24:63:82:ef:d0:22:
         c8:82:c0:66:c7:fc:3c:45:f4:0e:fd:02:ee:eb:6a:17:70:27:
         fb:19:0c:fc:32:0a:6a:87:66:6d:56:71:48:3c:57:da:9a:84:
         b8:de:b8:04:4b:0e:cf:c6:0d:02:46:f6:0a:93:35:05:18:bb:
         b9:a6:03:34:e3:d0:83:98:e7:f5:43:be:9a:4e:45:89:6b:36:
         8b:e4:73:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:22 2024 by rpki-client on console-fra.rpki-client.org