Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138362e312e3233342e302f32332d3234203d3e203532343236.roa
File:                     3138362e312e3233342e302f32332d3234203d3e203532343236.roa (raw, json)
Hash identifier:          fXOZnY3jG5n5ctNYUSqqElDBvWH1t1lOkKnXi6GX36E=
Subject key identifier:   0E:75:25:E7:7D:5C:BD:9C:2F:B0:DE:9F:EB:F0:2E:78:E6:0C:49:56
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       28298904A9A646B70BBF8CDBE851368545410BC4
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138362e312e3233342e302f32332d3234203d3e203532343236.roa
Signing time:             Fri 26 Apr 2024 12:40:00 +0000
ROA not before:           Fri 26 Apr 2024 12:35:00 +0000
ROA not after:            Fri 25 Apr 2025 12:40:00 +0000
asID:                     52426
IP address blocks:        186.1.234.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Mon 06 May 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:29:89:04:a9:a6:46:b7:0b:bf:8c:db:e8:51:36:85:45:41:0b:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: Apr 26 12:35:00 2024 GMT
            Not After : Apr 25 12:40:00 2025 GMT
        Subject: CN=0E7525E77D5CBD9C2FB0DE9FEBF02E78E60C4956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fa:43:a0:8e:75:e2:2f:dd:66:13:43:27:9b:
                    f8:00:af:1e:94:6b:8b:b1:e4:71:73:bd:e0:a3:3c:
                    a8:d9:1f:36:71:40:bf:59:9f:79:aa:51:d6:6e:1d:
                    2b:c3:fa:cc:7e:0e:e4:70:f5:9b:27:fc:5c:b2:ad:
                    54:a2:83:0c:e1:6f:dd:24:fe:a6:a5:98:77:75:38:
                    48:d2:e4:d0:9d:b9:25:12:fe:47:94:4d:31:9e:a6:
                    31:49:eb:07:b8:48:11:52:a2:62:c0:61:da:43:93:
                    06:32:61:ec:fa:1d:b5:19:75:ce:5b:4c:88:32:00:
                    4e:ef:39:5a:1f:12:6b:e8:2f:63:00:19:5b:b7:a6:
                    dd:3d:ec:4c:0c:24:42:0c:94:9e:74:1a:c0:c6:60:
                    3b:22:30:a8:d0:6b:0f:2a:e0:d5:e1:94:c7:03:73:
                    0d:fb:08:75:10:80:08:62:97:27:ac:14:2e:88:4e:
                    4e:55:12:44:12:12:4c:14:56:55:21:2d:9e:74:80:
                    2a:72:b8:bc:eb:a5:6d:05:8b:1d:7a:e2:fe:fb:0d:
                    05:13:8a:ac:d1:b7:d9:67:f8:1a:3c:be:e9:b8:f1:
                    28:f7:05:45:23:d0:96:79:fa:c2:e4:23:dd:64:99:
                    ef:a8:35:ee:a2:f7:fa:b5:e2:da:b0:dd:ae:b5:11:
                    88:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:75:25:E7:7D:5C:BD:9C:2F:B0:DE:9F:EB:F0:2E:78:E6:0C:49:56
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3138362e312e3233342e302f32332d3234203d3e203532343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.1.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:fa:fe:67:62:eb:49:1d:40:d4:ee:af:e4:b8:a2:11:b1:a4:
         fd:c8:9f:46:3b:d2:e0:ac:17:0c:8c:88:84:e9:6d:7d:e7:47:
         4d:1f:a1:07:7d:0a:9d:06:5a:13:51:9c:8c:e6:95:86:f1:df:
         98:91:db:c3:ae:35:79:57:61:d1:ba:13:c7:d9:d4:ef:ae:c5:
         21:5a:ad:83:e5:13:16:df:45:af:f8:ff:3c:83:4a:0a:5f:f5:
         43:28:10:81:90:2d:e0:6a:1c:87:52:a7:a3:0c:4d:49:26:0f:
         93:be:23:70:f0:e4:13:40:77:23:b2:aa:9d:34:b4:f9:30:f0:
         c5:d0:b5:be:2b:6b:4f:2e:c4:26:91:57:41:c7:67:1c:0d:bc:
         c2:81:c7:69:e4:f9:6d:b2:49:21:6f:77:87:13:7b:fd:25:a1:
         ac:5d:a5:5b:af:e7:8f:e0:1f:9a:f0:e8:d3:98:3b:47:88:f9:
         a1:c3:91:f1:68:6e:fb:d8:56:61:c4:30:0e:96:94:cc:77:6e:
         b5:aa:91:76:66:c5:14:8f:82:63:9d:d7:d7:77:35:83:ab:f4:
         96:56:a3:b7:4b:fd:8f:ec:80:85:13:c9:f7:df:76:47:75:0a:
         3f:ea:53:00:00:f3:be:2c:68:c4:c1:34:09:4e:5f:05:aa:bc:
         2f:9c:46:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:10 2024 by rpki-client on console-ams.rpki-client.org