Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363030613a3a2f34382d3438203d3e203532333736.roa
File:                     323030313a313363373a363030613a3a2f34382d3438203d3e203532333736.roa (raw, json)
Hash identifier:          ZMJ33p7Ju7qC7Z0Q9lGk1KneHPs9eW4i03EoBd3itR8=
Subject key identifier:   DE:F9:91:6F:AF:B0:9B:E7:46:00:A5:77:05:9F:48:4F:15:76:E6:BA
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       210FA189FAAD34E1FFE427BE2E978B5033F3F1A1
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363030613a3a2f34382d3438203d3e203532333736.roa
Signing time:             Tue 05 Mar 2024 18:15:59 +0000
ROA not before:           Tue 05 Mar 2024 18:10:59 +0000
ROA not after:            Tue 04 Mar 2025 18:15:59 +0000
asID:                     52376
IP address blocks:        2001:13c7:600a::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 14 May 2024 12:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:0f:a1:89:fa:ad:34:e1:ff:e4:27:be:2e:97:8b:50:33:f3:f1:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Mar  5 18:10:59 2024 GMT
            Not After : Mar  4 18:15:59 2025 GMT
        Subject: CN=DEF9916FAFB09BE74600A577059F484F1576E6BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f7:9b:20:03:8d:50:62:67:ab:5a:cb:f1:64:
                    93:34:e5:45:65:c3:95:80:18:a9:85:c5:79:f0:8a:
                    1b:68:b5:5b:3f:f5:15:44:81:a2:2b:f0:12:1d:df:
                    a5:59:e2:38:67:34:58:80:fe:6a:b5:6b:ab:ec:4c:
                    57:f0:80:b9:0f:fa:98:69:47:3a:56:91:4e:d0:43:
                    ab:90:48:1b:87:32:36:43:b8:68:c6:17:c8:52:26:
                    c0:5a:13:72:1c:ac:80:e3:31:ff:c4:07:b2:cb:49:
                    53:96:86:f7:8d:41:cf:d7:ee:2c:21:94:74:e5:9e:
                    ec:0a:69:d7:1d:d6:48:cd:06:a7:17:d6:c1:e7:de:
                    d8:90:19:26:00:53:04:20:14:61:fc:5e:68:a5:72:
                    d3:a8:70:44:92:f3:de:0b:77:21:cf:64:c2:3d:24:
                    fb:cc:3f:d5:38:59:c6:9d:78:80:d0:5b:61:28:43:
                    83:f8:e3:01:5c:14:41:b8:d9:9a:c5:ac:e1:32:9c:
                    ce:67:79:5c:dc:a8:7c:73:2d:3c:04:59:b2:28:83:
                    e5:78:f5:29:b8:bd:bc:c8:48:30:f1:d1:cf:25:23:
                    6a:0c:0a:3b:55:20:aa:12:ef:d4:c6:96:64:9f:87:
                    cc:af:d9:30:18:f3:d6:66:81:f1:16:f0:98:9b:5c:
                    03:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F9:91:6F:AF:B0:9B:E7:46:00:A5:77:05:9F:48:4F:15:76:E6:BA
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/323030313a313363373a363030613a3a2f34382d3438203d3e203532333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:600a::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:9f:d6:96:bc:44:10:7d:74:4c:04:e3:84:b1:ce:a8:23:9b:
         6b:75:84:5c:6a:95:79:b6:76:7e:e7:cd:7f:ce:7a:42:2d:ba:
         d8:ac:02:5a:df:53:1c:9c:2d:58:cc:8f:c3:db:2e:dd:8a:fc:
         48:4f:bb:ea:bf:dc:49:b3:e4:de:79:80:01:86:7a:1d:c1:17:
         1f:8a:24:9b:e1:36:4d:7d:d4:83:fe:0a:0e:65:53:49:8e:e1:
         db:f6:00:27:64:ba:e4:de:c4:44:f8:48:0e:eb:8d:b0:04:1b:
         60:8c:2e:c2:49:54:e2:c5:ed:bb:0b:e7:ec:71:f3:5d:d0:a1:
         75:af:d6:3b:4a:28:f3:45:dc:30:cb:db:04:a9:66:df:f6:09:
         e4:33:0f:97:6f:5e:4e:b2:a8:00:19:ed:a8:6f:31:65:68:02:
         b2:e6:db:a7:7c:b2:61:ee:c9:b6:dd:2f:78:83:88:c1:28:a0:
         18:bd:25:0a:b0:e1:8b:9c:e1:a3:af:ff:ca:f8:e1:95:bf:d2:
         95:74:9c:aa:c6:f3:8c:2f:79:8f:a7:db:ed:bd:28:d9:f7:cb:
         6d:82:74:20:fb:d8:0e:e1:82:3f:c5:af:bc:cb:47:fb:2f:3e:
         a8:30:0c:ed:d5:97:8d:74:86:c1:11:6d:1a:e8:b8:3b:4b:ba:
         b6:0c:95:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-ams.rpki-client.org