Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138312e3232352e3230302e302f32332d3233203d3e203532323531.roa
File:                     3138312e3232352e3230302e302f32332d3233203d3e203532323531.roa (raw, json)
Hash identifier:          ZqnIv6NTEDSE57NljHhkwRkiUhiIEmXynGCBaF8EvbA=
Subject key identifier:   B1:7A:61:2E:53:39:CD:34:60:7D:15:D2:45:8C:93:BA:BE:73:86:0F
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       1458808144C95498CE54D6CB5C75AE34479107A9
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138312e3232352e3230302e302f32332d3233203d3e203532323531.roa
Signing time:             Fri 26 Apr 2024 19:20:04 +0000
ROA not before:           Fri 26 Apr 2024 19:15:04 +0000
ROA not after:            Fri 25 Apr 2025 19:20:04 +0000
asID:                     52251
IP address blocks:        181.225.200.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 06 May 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:58:80:81:44:c9:54:98:ce:54:d6:cb:5c:75:ae:34:47:91:07:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: Apr 26 19:15:04 2024 GMT
            Not After : Apr 25 19:20:04 2025 GMT
        Subject: CN=B17A612E5339CD34607D15D2458C93BABE73860F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:26:36:3e:cb:3b:0e:07:47:52:54:d4:1d:05:
                    50:b5:52:c2:7f:7e:45:e8:4d:07:18:91:f1:0d:c0:
                    e8:ef:18:86:a5:60:ca:88:13:36:a0:e2:03:45:29:
                    c5:45:32:4e:06:9a:67:3e:9d:19:97:8a:ef:df:25:
                    a1:eb:b0:9a:83:8f:7a:3a:c3:2f:08:92:41:86:08:
                    26:13:bb:72:89:a6:0e:a4:4f:06:a0:b9:5a:e5:3c:
                    77:b2:bf:ff:47:79:b0:1a:67:8e:70:27:08:39:bd:
                    2d:03:b4:86:03:a2:a5:10:1a:67:6f:5b:57:a2:9d:
                    d6:96:27:a3:d3:ad:80:01:52:a8:e6:68:1a:1d:93:
                    a8:9f:63:77:34:30:28:f6:98:6f:b1:96:8c:93:10:
                    31:5b:6d:38:e5:b2:d1:8b:dc:30:13:89:9d:b0:01:
                    65:3c:60:31:da:65:87:ea:b6:ff:f5:ca:e7:7e:d6:
                    a8:7f:54:a5:cc:34:39:ae:97:1f:eb:e6:18:bb:28:
                    22:2a:b5:2a:84:da:40:29:8a:bc:ea:87:9b:55:ad:
                    7f:e0:3b:b4:18:43:6f:4a:cc:17:da:74:59:a5:73:
                    9a:ed:a7:2a:e0:45:2d:36:04:09:c0:35:68:d7:13:
                    ca:0d:4b:8d:50:6a:fb:b9:5b:af:e2:3f:01:9c:7d:
                    c6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:7A:61:2E:53:39:CD:34:60:7D:15:D2:45:8C:93:BA:BE:73:86:0F
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138312e3232352e3230302e302f32332d3233203d3e203532323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:7b:ba:25:c7:e7:1d:11:ae:6d:50:29:f9:a8:d6:95:6f:69:
         cf:10:37:3d:26:8d:8c:23:05:46:84:da:af:4e:03:ae:d2:fc:
         d2:dc:46:f8:71:6f:b3:a7:47:df:ef:9a:a7:55:7d:36:f6:33:
         3a:a4:2f:20:c1:3c:db:73:b2:fe:0c:a4:7b:13:01:6d:dd:9a:
         20:6b:3f:9b:73:cd:89:01:9f:56:3f:f1:46:22:b3:bf:01:11:
         21:c2:8e:5d:ca:fd:67:4a:b2:92:c9:e2:af:33:53:c5:35:f8:
         77:17:13:87:30:61:cc:a9:f9:09:4f:c9:90:01:d7:47:c5:3f:
         83:c5:75:2f:c2:c8:d3:a8:57:09:97:95:1a:81:1b:63:89:8e:
         5c:6a:cb:c6:f4:82:0b:13:77:43:e7:ec:5e:71:ea:b1:42:8e:
         80:ff:08:bb:a0:f0:26:dd:68:90:60:88:43:b2:73:03:9e:7e:
         6e:4e:33:d1:89:a3:ea:7b:ba:a6:53:75:93:53:5a:67:c5:bd:
         d2:64:7d:3f:f4:45:3d:7f:cf:ae:be:60:8d:b5:f7:ab:21:26:
         64:09:ef:06:12:ab:29:14:cb:a6:17:81:1f:56:89:eb:cd:c9:
         3b:26:ae:54:25:29:6c:ee:e9:ae:2d:29:bc:4d:7c:26:11:8d:
         43:81:d1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:27 2024 by rpki-client on console-fra.rpki-client.org