Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138312e3232352e3230382e302f32332d3233203d3e203532323531.roa
File:                     3138312e3232352e3230382e302f32332d3233203d3e203532323531.roa (raw, json)
Hash identifier:          WlfdeV7pUFUwIgyKuMjUkEgGCDrZZDCy3avggAwyHyg=
Subject key identifier:   BE:8F:E7:7B:A5:86:A3:75:AA:C3:2D:D7:60:50:90:AF:C0:B8:1A:C0
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       190682C40AEBAC31FF0A70BE2A195BA23F43EA7C
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138312e3232352e3230382e302f32332d3233203d3e203532323531.roa
Signing time:             Fri 26 Apr 2024 19:20:04 +0000
ROA not before:           Fri 26 Apr 2024 19:15:04 +0000
ROA not after:            Fri 25 Apr 2025 19:20:04 +0000
asID:                     52251
IP address blocks:        181.225.208.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 06 May 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:06:82:c4:0a:eb:ac:31:ff:0a:70:be:2a:19:5b:a2:3f:43:ea:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: Apr 26 19:15:04 2024 GMT
            Not After : Apr 25 19:20:04 2025 GMT
        Subject: CN=BE8FE77BA586A375AAC32DD7605090AFC0B81AC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5e:12:69:be:7f:ca:99:99:01:0d:13:d4:83:
                    37:e8:80:4b:a6:8c:1d:f8:9c:94:94:f2:61:fd:82:
                    21:e5:1d:88:f6:46:97:72:fa:88:81:73:ff:67:21:
                    0b:3b:01:cf:f3:ed:1d:f5:83:c2:48:22:c4:42:d1:
                    06:72:00:7d:aa:2b:44:d0:93:a1:5d:c8:3f:1c:45:
                    b0:cf:06:0e:e2:01:ae:39:55:47:cd:4c:8b:34:bd:
                    c4:cd:d7:00:e3:41:74:bc:62:83:ef:a6:75:8c:04:
                    8b:0a:6b:f1:03:12:2f:72:f3:1a:24:90:e8:41:7c:
                    3b:9f:04:99:8b:9d:0c:5b:b0:76:bc:e8:9c:b1:9f:
                    cd:88:cd:22:16:96:79:db:d2:60:6a:e5:fe:cc:67:
                    81:42:1d:c0:5f:ff:7c:4f:0c:57:d6:c6:47:26:7c:
                    e0:5a:13:21:02:fd:fd:99:f7:dc:b6:f6:b0:cc:c4:
                    00:fc:f7:a7:50:99:41:44:08:7d:6f:54:f1:24:42:
                    c0:12:9f:cd:16:be:99:6d:b1:b8:ec:83:71:60:f0:
                    8f:27:e8:ec:14:e0:f7:c5:0b:ce:34:69:dd:c0:28:
                    c5:87:8d:57:0f:3e:55:37:60:05:37:61:ec:40:90:
                    82:43:6b:d1:78:db:40:84:e6:a0:bd:6b:54:e5:7e:
                    e4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:8F:E7:7B:A5:86:A3:75:AA:C3:2D:D7:60:50:90:AF:C0:B8:1A:C0
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138312e3232352e3230382e302f32332d3233203d3e203532323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:70:54:8b:54:8f:46:c4:bc:b9:e1:63:96:36:25:31:2f:10:
         ed:b8:52:60:7a:7c:05:5c:3c:7e:9f:88:56:f9:ae:b2:9d:91:
         33:95:31:b5:bc:63:d7:e8:7b:7c:22:f9:66:fd:b3:23:83:95:
         f1:68:74:2c:73:95:10:94:76:c1:1c:a4:41:cb:23:57:a9:f5:
         9b:f5:95:47:43:75:38:1b:fe:9b:7f:ce:ff:b5:32:86:9d:16:
         fd:69:ac:9b:df:89:61:c1:4a:3c:6c:c0:1b:09:ef:6d:73:df:
         66:fd:d2:ab:1f:97:92:d5:39:9b:03:14:ed:4c:85:b9:76:41:
         20:89:d6:60:88:35:03:58:2d:9b:6d:ab:17:35:0a:0d:d0:f5:
         dc:18:5c:d0:8d:06:00:3a:82:78:54:ce:d0:e0:4c:5c:14:17:
         f0:29:f5:10:00:ef:81:40:f0:d9:11:37:e6:97:29:a9:0f:1b:
         c4:b2:a8:c7:f5:90:91:b2:41:f2:b4:b1:39:4a:6a:6e:f1:9e:
         09:01:66:ea:e5:78:2f:c6:c1:78:4a:07:57:34:da:c5:03:16:
         e0:4d:d8:22:c5:d6:23:59:64:ef:41:dc:ea:ca:9a:27:e1:ff:
         c7:8e:f1:7f:ee:17:4a:0c:02:7a:b0:2d:c8:0b:94:43:1b:1f:
         4b:ca:1a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:27 2024 by rpki-client on console-fra.rpki-client.org