Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138312e3232352e3231322e302f32332d3233203d3e203532323531.roa
File:                     3138312e3232352e3231322e302f32332d3233203d3e203532323531.roa (raw, json)
Hash identifier:          jvrZN4lcDeXC7QwhmwL+nYs4voNdjp+hAuszJcZqIds=
Subject key identifier:   D4:80:1C:05:FF:C8:AF:BD:66:B3:C5:D5:1F:C0:BD:B9:19:12:F0:A8
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       FC2DDA029430E5C58B05953F996E34C2D0C0F1
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138312e3232352e3231322e302f32332d3233203d3e203532323531.roa
Signing time:             Fri 26 Apr 2024 19:20:03 +0000
ROA not before:           Fri 26 Apr 2024 19:15:03 +0000
ROA not after:            Fri 25 Apr 2025 19:20:03 +0000
asID:                     52251
IP address blocks:        181.225.212.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 06 May 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            fc:2d:da:02:94:30:e5:c5:8b:05:95:3f:99:6e:34:c2:d0:c0:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: Apr 26 19:15:03 2024 GMT
            Not After : Apr 25 19:20:03 2025 GMT
        Subject: CN=D4801C05FFC8AFBD66B3C5D51FC0BDB91912F0A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8b:8c:e4:e7:3e:92:d2:36:7b:ba:db:b5:67:
                    fc:ba:05:e6:c9:a0:e3:dd:38:16:90:00:65:65:c6:
                    74:44:b5:95:d3:16:bf:b4:75:6e:84:33:de:58:3d:
                    e0:c7:42:61:af:3f:2f:af:d8:9e:ab:d2:a7:27:59:
                    01:e7:1e:54:5d:2b:8a:e2:62:0f:ed:2b:3a:a0:51:
                    88:d4:5b:71:cc:78:0b:b6:e9:7d:40:b3:7d:1a:e6:
                    30:89:d8:db:9f:d9:b9:b3:72:d6:7b:c5:e4:83:52:
                    bd:d9:bb:12:70:d7:96:54:00:7d:3f:db:bb:ad:c4:
                    0a:2b:b6:01:3e:59:2a:ad:e3:6b:05:8e:2b:e8:ba:
                    cd:2b:91:ac:df:86:33:3c:b8:7d:0b:a2:d6:b1:1d:
                    41:3d:78:81:c1:97:ed:58:2c:27:b9:31:df:32:c4:
                    36:bd:87:29:75:ec:e2:63:05:49:29:8b:36:5a:3b:
                    2c:cf:84:45:86:32:4a:f2:29:21:91:db:5a:7e:65:
                    ea:00:b2:43:6d:3d:9b:13:e9:77:73:1a:f8:02:5e:
                    20:3b:48:28:c6:89:4d:66:b8:97:18:64:d0:9f:ff:
                    34:50:fe:39:00:ea:b3:be:9f:56:22:f4:83:9e:4e:
                    0a:3c:7a:58:2a:d9:15:3a:f3:70:ed:40:d5:ee:23:
                    b2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:80:1C:05:FF:C8:AF:BD:66:B3:C5:D5:1F:C0:BD:B9:19:12:F0:A8
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138312e3232352e3231322e302f32332d3233203d3e203532323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:29:5d:66:74:46:eb:4a:bc:3a:fa:3c:bc:0e:53:d6:ad:3a:
         1e:3c:9e:af:d4:4a:98:79:d3:2b:8a:a2:5f:dc:fa:73:b2:1a:
         95:46:98:7b:65:c4:03:fc:96:db:73:f2:cd:7c:28:be:25:21:
         59:fd:e1:c2:29:20:93:43:ad:29:5b:6a:48:66:51:c5:78:9e:
         53:cf:5d:d4:81:15:ac:51:be:fc:75:f8:fb:2d:f4:9f:d8:fd:
         00:dd:b4:03:93:eb:9e:68:92:8d:fd:0e:e5:ad:65:f1:fb:b4:
         49:9a:5e:a9:5a:31:31:dd:22:5a:80:d8:77:32:78:1c:bb:26:
         d5:d8:89:02:05:e5:d5:55:49:bd:ec:0b:9f:fc:a8:2b:18:42:
         b4:fb:be:8d:d8:bb:45:fa:60:ac:f9:46:38:89:15:42:24:8e:
         aa:2b:1a:0d:b2:9e:15:c4:3c:35:9a:b0:4c:da:95:98:c0:06:
         fc:6d:e6:cf:a9:cc:28:61:16:19:76:cd:80:83:b0:96:c8:f6:
         83:5f:98:7f:da:a8:aa:af:a6:06:5d:a5:06:12:3a:81:75:34:
         c8:dc:da:92:a8:f9:02:db:92:7a:64:90:f8:bc:a1:65:0e:37:
         b2:ed:8e:3e:b5:be:66:c1:26:60:b2:49:18:47:97:ac:40:ef:
         2a:cd:03:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:27 2024 by rpki-client on console-fra.rpki-client.org