Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3036EDB3EE2AD34EACAF3C2092EE6C4249CAA5DBB56592A3CD581CD7AC3178E1/0/34352e3138302e3134332e302f32342d3234203d3e20323639373238.roa
File:                     34352e3138302e3134332e302f32342d3234203d3e20323639373238.roa (raw, json)
Hash identifier:          D+iptZ0YmeL3qa5Q9GLlD66mBzw7RNJ71TZkmBTHNw4=
Subject key identifier:   1D:16:1B:9E:66:BF:3D:8B:B5:A3:B4:0E:35:30:79:42:FA:2E:C1:CE
Certificate issuer:       /CN=13B657FF6E17844C871CDBE69EB5DF87796F1536
Certificate serial:       3EE49F5A37D9134124A58CE4CAF753212E1AC69A
Authority key identifier: 13:B6:57:FF:6E:17:84:4C:87:1C:DB:E6:9E:B5:DF:87:79:6F:15:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13B657FF6E17844C871CDBE69EB5DF87796F1536.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3036EDB3EE2AD34EACAF3C2092EE6C4249CAA5DBB56592A3CD581CD7AC3178E1/0/34352e3138302e3134332e302f32342d3234203d3e20323639373238.roa
Signing time:             Tue 05 Mar 2024 17:49:31 +0000
ROA not before:           Tue 05 Mar 2024 17:44:31 +0000
ROA not after:            Tue 04 Mar 2025 17:49:31 +0000
asID:                     269728
IP address blocks:        45.180.143.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 15 May 2024 00:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:e4:9f:5a:37:d9:13:41:24:a5:8c:e4:ca:f7:53:21:2e:1a:c6:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13B657FF6E17844C871CDBE69EB5DF87796F1536
        Validity
            Not Before: Mar  5 17:44:31 2024 GMT
            Not After : Mar  4 17:49:31 2025 GMT
        Subject: CN=1D161B9E66BF3D8BB5A3B40E35307942FA2EC1CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7f:c8:4d:69:8d:2b:b7:40:4b:b0:d1:16:5f:
                    d3:c8:d4:62:dd:76:e1:f8:90:01:61:c8:d5:21:32:
                    98:33:ea:52:ea:7a:cd:48:f8:e7:6b:2e:b3:aa:97:
                    66:17:37:8a:10:1e:5a:a9:d0:35:50:67:d8:8b:39:
                    15:4d:58:6f:9c:2e:3d:5f:26:28:89:9d:d4:88:53:
                    7f:82:b3:cc:b8:71:21:9b:05:3c:47:8c:54:b6:13:
                    5e:8a:64:e7:a9:0f:3b:43:24:21:54:53:b4:a8:1f:
                    cd:9e:a6:ae:8b:24:08:bc:be:27:d6:f1:44:b1:6c:
                    7e:ad:53:49:46:1e:5a:55:a7:6b:f1:d5:34:39:8b:
                    8a:68:48:dd:73:99:6b:e9:1b:af:56:dc:7c:f8:57:
                    2e:30:08:d9:d2:98:27:b7:c1:68:a7:39:28:0e:55:
                    34:1e:7a:58:33:45:c2:d7:17:e3:dc:f0:66:57:d8:
                    0b:e4:47:e4:95:5a:a4:7f:4e:6c:26:5c:d3:ba:4e:
                    94:f7:7e:a7:3a:ef:e3:4d:f5:a3:0a:85:2f:6a:17:
                    b9:9c:00:48:6e:e2:59:41:86:15:61:1d:33:ad:3b:
                    1b:2f:79:14:19:ad:4e:42:d1:5c:f6:6b:12:a4:8e:
                    a3:6c:69:92:6a:69:4b:80:58:f5:01:07:6e:a6:f5:
                    08:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:16:1B:9E:66:BF:3D:8B:B5:A3:B4:0E:35:30:79:42:FA:2E:C1:CE
            X509v3 Authority Key Identifier:
                keyid:13:B6:57:FF:6E:17:84:4C:87:1C:DB:E6:9E:B5:DF:87:79:6F:15:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3036EDB3EE2AD34EACAF3C2092EE6C4249CAA5DBB56592A3CD581CD7AC3178E1/0/13B657FF6E17844C871CDBE69EB5DF87796F1536.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13B657FF6E17844C871CDBE69EB5DF87796F1536.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3036EDB3EE2AD34EACAF3C2092EE6C4249CAA5DBB56592A3CD581CD7AC3178E1/0/34352e3138302e3134332e302f32342d3234203d3e20323639373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:e5:3d:20:da:a7:42:9e:79:1a:96:2d:f0:c2:8a:be:69:d6:
         61:e5:71:ff:21:cc:14:42:d8:6f:6d:58:10:a5:3c:4d:f8:9d:
         48:e3:e0:c7:a2:a6:3e:7c:61:13:f6:82:02:0e:6d:6c:c2:12:
         af:5d:80:65:90:87:8b:d7:74:ce:e4:fa:3f:f7:33:15:c6:6d:
         af:6c:bf:dd:5b:bb:b2:2f:ae:9b:0e:38:0e:fb:4a:39:9f:d0:
         4c:6e:fd:df:71:84:c2:ed:d2:0f:e5:96:97:a1:ff:4f:95:06:
         f8:95:04:cc:f6:1b:e9:57:d6:43:28:7a:ec:60:0d:04:f1:e9:
         63:50:a9:fc:e5:0b:1e:96:c7:a3:12:0f:34:e7:96:e2:66:98:
         68:1b:96:00:3e:b6:b2:95:dd:ea:4e:63:7c:2f:15:7b:de:14:
         58:98:7a:75:d2:cd:95:e0:07:96:c1:2c:e2:bd:5c:0e:9f:4d:
         54:5e:53:68:61:54:e1:0e:80:b4:1f:58:86:8f:60:2f:34:10:
         e8:29:dc:29:c0:a5:3b:20:02:42:ff:1a:c3:03:1f:e5:b7:31:
         f9:19:68:81:89:79:87:1d:e2:69:57:78:0a:4d:13:93:fd:3b:
         f1:35:b3:34:03:d0:70:ea:53:8b:f2:03:d7:6a:18:79:fb:23:
         7b:de:42:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:25 2024 by rpki-client on console-fra.rpki-client.org