Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e3131302e302f32332d3233203d3e203532323531.roa
File:                     3139302e3138312e3131302e302f32332d3233203d3e203532323531.roa (raw, json)
Hash identifier:          i2bcbJuG4Dmh8TopScwnPmchOKy3pfFdwyOs6sj4T0M=
Subject key identifier:   31:29:07:5F:8C:E7:B3:20:97:95:7B:2F:2C:F6:8C:A4:29:E9:63:55
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       7688C5AC137F37BA6AE129B7063B1747B33CE56D
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e3131302e302f32332d3233203d3e203532323531.roa
Signing time:             Thu 02 May 2024 14:25:07 +0000
ROA not before:           Thu 02 May 2024 14:20:07 +0000
ROA not after:            Thu 01 May 2025 14:25:07 +0000
asID:                     52251
IP address blocks:        190.181.110.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 06 May 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:88:c5:ac:13:7f:37:ba:6a:e1:29:b7:06:3b:17:47:b3:3c:e5:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: May  2 14:20:07 2024 GMT
            Not After : May  1 14:25:07 2025 GMT
        Subject: CN=3129075F8CE7B32097957B2F2CF68CA429E96355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:06:8d:a3:39:fd:ae:45:61:57:1c:02:59:7b:
                    4d:af:21:66:82:11:ea:33:e1:95:23:56:71:38:eb:
                    fe:5a:7e:70:3a:e0:83:35:84:6e:31:c4:8d:4f:66:
                    83:87:b3:4d:f9:ce:25:67:dc:f8:36:ee:66:4d:f4:
                    5c:ff:79:1c:39:62:c5:da:a6:7b:35:de:9d:09:91:
                    10:1c:8d:c3:c9:7b:48:4d:ab:22:d9:8d:16:09:87:
                    04:b7:f4:f3:b2:74:70:a4:12:11:e6:72:0d:7a:21:
                    61:c0:fc:ce:71:0a:a2:66:40:ba:95:b0:e4:6e:7a:
                    cd:88:25:e8:7a:2f:3c:1f:2f:dd:84:7c:95:36:2e:
                    d6:36:a2:b5:6a:d3:80:3a:92:63:31:c8:3f:ce:3b:
                    27:b7:f3:5b:93:f6:0e:56:2f:57:bf:e4:5d:4d:dc:
                    9b:aa:ad:57:c4:79:80:6a:3e:f5:9a:55:b8:18:ec:
                    e0:50:1f:ca:1f:c0:03:44:c7:1d:4b:b6:60:59:df:
                    12:82:d2:98:05:e2:2a:e3:0a:95:a6:38:3c:24:4a:
                    a5:10:84:86:95:4c:2d:c9:6e:66:3e:24:7d:2e:62:
                    d6:28:21:87:0f:86:53:b8:6f:8a:6c:5b:cb:e6:8c:
                    3f:04:47:f3:e0:18:72:e9:2f:c1:e0:3f:06:3b:fb:
                    af:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:29:07:5F:8C:E7:B3:20:97:95:7B:2F:2C:F6:8C:A4:29:E9:63:55
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e3131302e302f32332d3233203d3e203532323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.181.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:24:d6:db:aa:c0:bc:c2:bb:a9:c4:3f:0c:77:ba:02:06:01:
         10:5d:34:ee:48:76:76:6a:40:d7:5e:87:1c:49:f7:26:12:17:
         8a:6e:2b:13:2a:15:db:41:b8:a7:b4:45:13:6e:0b:a5:4f:67:
         fc:35:5b:14:e6:32:ed:ef:32:ae:e8:db:47:a0:7f:8b:05:80:
         5d:af:71:dd:86:25:ec:d5:d4:9b:67:fd:07:db:5c:ee:60:b0:
         2c:be:c9:50:08:bf:bb:95:aa:c8:dc:26:82:56:f1:75:42:ec:
         50:7b:c0:b5:33:c6:1e:03:b6:10:ae:d8:0e:4a:18:a2:05:fa:
         aa:fa:3f:88:aa:24:05:5b:d0:39:a4:9e:6e:4c:59:40:54:28:
         39:c2:02:6d:84:6c:2e:28:c6:e8:c6:78:84:56:58:4a:d4:1e:
         9d:ad:f5:54:f3:3e:72:20:9e:47:d0:73:47:02:24:ca:8d:cd:
         98:6c:3d:65:d9:5a:54:92:7e:27:6b:4e:b9:8c:89:b7:60:27:
         bc:b9:ba:f2:69:b8:8a:bb:dc:d1:74:a5:58:f6:f8:46:25:a7:
         19:c4:6a:eb:75:3a:ac:e5:b6:f7:73:31:ea:5f:74:f6:a2:56:
         41:ce:79:9a:d5:b4:98:bc:ee:3f:0d:17:4f:0c:9b:3c:c2:b9:
         e1:5e:99:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:27 2024 by rpki-client on console-fra.rpki-client.org