Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A367470AFE6734E69072CE2E020B414FEE3FA1F7887B4509B81173481F55E9B/0/3137302e3233332e3132362e302f32332d3233203d3e20323634373635.roa
File:                     3137302e3233332e3132362e302f32332d3233203d3e20323634373635.roa (raw, json)
Hash identifier:          FaBgeQ5C+xeYFmB+VEplGGSfnVCeOYtU9AvJOtPLQx4=
Subject key identifier:   06:1E:6D:9E:5C:A9:65:19:1B:12:1F:34:53:BD:5A:5A:FC:B6:23:C2
Certificate issuer:       /CN=0F959E8E8990C6B4684A74ECF5D6A8A2BE22B2DF
Certificate serial:       48B6962FBD7DA992249936A79EE3A8B8105B9067
Authority key identifier: 0F:95:9E:8E:89:90:C6:B4:68:4A:74:EC:F5:D6:A8:A2:BE:22:B2:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F959E8E8990C6B4684A74ECF5D6A8A2BE22B2DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A367470AFE6734E69072CE2E020B414FEE3FA1F7887B4509B81173481F55E9B/0/3137302e3233332e3132362e302f32332d3233203d3e20323634373635.roa
Signing time:             Thu 06 Jun 2024 01:05:00 +0000
ROA not before:           Thu 06 Jun 2024 01:00:00 +0000
ROA not after:            Thu 05 Jun 2025 01:05:00 +0000
asID:                     264765
IP address blocks:        170.233.126.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 22 Jul 2024 00:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:b6:96:2f:bd:7d:a9:92:24:99:36:a7:9e:e3:a8:b8:10:5b:90:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F959E8E8990C6B4684A74ECF5D6A8A2BE22B2DF
        Validity
            Not Before: Jun  6 01:00:00 2024 GMT
            Not After : Jun  5 01:05:00 2025 GMT
        Subject: CN=061E6D9E5CA965191B121F3453BD5A5AFCB623C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:86:f7:5e:a0:00:64:2f:5a:f8:d3:20:a6:94:
                    9d:12:04:f1:6d:64:ab:26:4b:47:4b:b8:09:7d:73:
                    d8:2e:08:48:52:16:93:b1:b4:22:94:33:20:6f:28:
                    69:7c:cf:24:35:af:f5:ca:6d:b4:28:7f:a5:46:0b:
                    ff:da:19:73:79:7d:b7:5b:55:70:9a:8b:92:ea:8f:
                    be:e2:18:02:6d:df:43:e1:96:e0:bc:f4:bc:18:ff:
                    4f:69:9f:e7:47:32:25:df:72:39:54:62:aa:08:93:
                    e0:f4:6a:ec:0a:ea:c3:71:97:a0:e2:ac:3f:a3:26:
                    4e:6d:b1:71:6f:98:6f:93:11:2c:7e:a8:f5:a2:d4:
                    e1:8e:b9:27:e1:52:8d:17:c9:48:1b:29:76:44:bb:
                    c2:b3:65:e4:7a:95:63:e0:41:cf:74:7a:b7:62:06:
                    ce:9f:08:d5:89:3f:35:78:c0:23:10:74:83:3f:41:
                    68:48:e6:6a:10:8c:df:03:85:21:49:4b:a1:f9:6d:
                    19:69:0e:f7:8a:58:a2:a2:8f:7a:e2:50:4b:29:54:
                    6e:0a:94:df:52:bc:0f:6e:cc:84:53:5d:00:52:94:
                    1c:5e:39:7f:47:4d:e4:65:05:ec:e3:46:31:e0:9c:
                    50:00:85:7f:02:83:f6:95:5d:12:36:fe:20:3d:f9:
                    30:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:1E:6D:9E:5C:A9:65:19:1B:12:1F:34:53:BD:5A:5A:FC:B6:23:C2
            X509v3 Authority Key Identifier:
                keyid:0F:95:9E:8E:89:90:C6:B4:68:4A:74:EC:F5:D6:A8:A2:BE:22:B2:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A367470AFE6734E69072CE2E020B414FEE3FA1F7887B4509B81173481F55E9B/0/0F959E8E8990C6B4684A74ECF5D6A8A2BE22B2DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F959E8E8990C6B4684A74ECF5D6A8A2BE22B2DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A367470AFE6734E69072CE2E020B414FEE3FA1F7887B4509B81173481F55E9B/0/3137302e3233332e3132362e302f32332d3233203d3e20323634373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:9c:ee:99:eb:50:88:50:6c:3d:51:c2:3c:3e:a0:c4:8c:36:
         4f:9e:36:6a:42:34:c6:be:0b:31:a9:2d:55:23:fd:2c:66:b5:
         95:1c:62:7d:cb:f7:12:de:f8:c2:bd:56:dd:0d:8a:74:36:e7:
         74:c2:24:f7:bc:83:ac:62:64:1f:f3:f0:5f:8b:bb:1c:83:b0:
         a8:31:ac:64:33:f2:9b:12:2f:1b:eb:d4:7e:bd:1b:5b:c1:e0:
         2f:58:06:b5:eb:25:a2:c5:71:2b:b0:04:96:8c:da:5c:a5:42:
         76:20:02:95:6e:4c:84:6b:8c:4d:e6:88:63:cb:9e:ba:51:b8:
         c2:35:df:67:b7:90:d2:d8:e8:6d:37:39:83:d8:63:cc:90:bc:
         99:81:20:bf:c6:95:c7:15:58:7e:54:8a:24:d3:8b:6f:ed:7d:
         c9:63:78:32:17:4b:b2:ca:06:ba:72:49:79:15:8e:f2:50:7a:
         a8:56:18:54:b0:9e:eb:df:fe:d4:ee:95:fc:42:cc:dd:20:32:
         6a:65:f3:d3:bf:36:af:fc:81:33:d2:57:9f:6e:0f:23:81:f5:
         42:1b:56:a8:36:e5:89:63:04:70:03:67:53:47:ac:42:68:33:
         11:00:0a:c4:fc:ad:a5:2f:ae:7a:a4:6d:c7:bf:a2:fc:c7:61:
         41:00:af:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 22 05:36:54 2024 by rpki-client on console-fra.rpki-client.org