Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138312e3232352e3139382e302f32332d3233203d3e203532323531.roa
File:                     3138312e3232352e3139382e302f32332d3233203d3e203532323531.roa (raw, json)
Hash identifier:          QzLkQqQUWZZXBxKjJO1/mH4g6Cd/TqYOZub0NDV2Mis=
Subject key identifier:   61:AC:D8:51:61:F8:B3:C0:37:39:79:F3:BB:37:5A:6F:32:54:80:CD
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       42DECED8BE744779F0AC9EC32F8DA6BF333E123A
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138312e3232352e3139382e302f32332d3233203d3e203532323531.roa
Signing time:             Fri 26 Apr 2024 19:20:02 +0000
ROA not before:           Fri 26 Apr 2024 19:15:02 +0000
ROA not after:            Fri 25 Apr 2025 19:20:02 +0000
asID:                     52251
IP address blocks:        181.225.198.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 06 May 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:de:ce:d8:be:74:47:79:f0:ac:9e:c3:2f:8d:a6:bf:33:3e:12:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: Apr 26 19:15:02 2024 GMT
            Not After : Apr 25 19:20:02 2025 GMT
        Subject: CN=61ACD85161F8B3C0373979F3BB375A6F325480CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3e:d4:16:43:d8:f0:8a:51:28:17:36:44:df:
                    e5:83:41:c4:18:3b:3e:d5:43:73:f2:09:74:f9:81:
                    3b:da:7a:b6:57:4e:33:fb:2a:ec:a6:43:dc:30:40:
                    36:a8:21:25:dc:41:60:e2:1d:05:eb:26:94:f3:93:
                    de:4b:0a:e6:a5:a2:8e:a9:39:40:ef:99:b0:38:18:
                    eb:c5:b7:1e:34:d8:0b:94:8d:65:56:d7:50:7f:a1:
                    63:d4:c5:92:6a:91:00:28:5b:5a:cf:73:a0:4b:c4:
                    0b:ef:32:99:c8:16:43:bd:88:05:db:79:9f:09:15:
                    fe:ec:69:4b:01:f5:e8:77:4c:a4:bd:8c:57:47:9f:
                    e7:f5:3d:ea:43:06:a6:fe:df:5c:2a:93:c8:34:3f:
                    61:31:a6:db:40:c5:b6:6d:3f:39:55:1a:7a:f3:61:
                    b8:0a:b3:5a:60:d5:a0:a5:5b:59:e1:ab:bc:d9:3a:
                    74:0e:d5:53:d1:bd:f1:86:04:5a:cb:c9:6d:34:06:
                    35:a9:80:7c:50:aa:f6:40:6f:a1:38:b7:96:12:ba:
                    53:df:0b:3e:f7:59:96:e5:9e:9b:66:6d:ea:bc:67:
                    39:14:cf:7e:03:02:7f:13:c3:12:aa:bf:5c:03:ed:
                    ae:a0:a7:4d:7b:cb:4a:29:43:02:df:20:7a:df:cb:
                    b1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:AC:D8:51:61:F8:B3:C0:37:39:79:F3:BB:37:5A:6F:32:54:80:CD
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138312e3232352e3139382e302f32332d3233203d3e203532323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:9a:fa:ef:a2:e8:19:e6:df:f4:5b:78:d6:6b:ad:ac:71:4a:
         53:9e:5d:03:a2:bf:04:1b:e2:a5:e5:d9:8d:7d:c5:ad:1e:2a:
         2f:68:3a:a0:a4:8b:cf:7a:1d:cc:2c:d5:9f:6b:c5:f3:e1:0d:
         67:96:9e:ee:d9:4c:5a:0b:c0:b8:8c:4c:dc:be:0d:65:4d:02:
         1a:ad:19:7f:7b:b5:32:c8:ed:81:03:72:c6:a8:a3:71:10:be:
         e3:6e:35:25:c1:dd:cb:ff:e6:87:a8:32:9f:2e:57:b0:33:03:
         8f:d4:80:14:7d:41:6d:8c:92:86:f0:3c:2c:b6:63:21:92:aa:
         95:e3:38:46:ea:49:45:95:da:59:0f:20:83:c8:4f:4e:c0:73:
         aa:b8:36:30:3c:40:ca:fd:ae:e8:14:02:d3:66:44:4e:2a:d0:
         bd:a2:5e:e7:69:c1:d3:49:17:f4:fa:85:4d:4a:c1:51:cf:ec:
         84:0c:25:93:13:7a:b9:9f:2b:e9:d7:f0:eb:98:ba:a6:31:dc:
         7f:7c:25:1a:0b:a8:7b:97:24:f1:82:c0:8d:ee:4f:77:08:64:
         a2:60:17:24:63:e8:99:ac:ca:c9:71:c9:54:60:3d:0c:fd:3b:
         e8:8d:72:16:2e:8e:5c:6b:fd:12:4b:8d:29:6c:a3:bc:6b:0e:
         32:4c:f8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:10 2024 by rpki-client on console-ams.rpki-client.org