Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e3131382e302f32332d3233203d3e203532323531.roa
File:                     3139302e3138312e3131382e302f32332d3233203d3e203532323531.roa (raw, json)
Hash identifier:          D0Gzlm3GPDMLaH8XOsWwDqBrUSpbznwOOTJ26JKhhyE=
Subject key identifier:   7A:52:2A:A4:25:B0:4B:5E:C8:79:67:8A:C8:83:3A:90:D0:CD:32:4D
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       676F74BE36887AD5E88C4A7564AAFB78ABA848BF
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e3131382e302f32332d3233203d3e203532323531.roa
Signing time:             Thu 02 May 2024 14:25:01 +0000
ROA not before:           Thu 02 May 2024 14:20:01 +0000
ROA not after:            Thu 01 May 2025 14:25:01 +0000
asID:                     52251
IP address blocks:        190.181.118.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 06 May 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:6f:74:be:36:88:7a:d5:e8:8c:4a:75:64:aa:fb:78:ab:a8:48:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: May  2 14:20:01 2024 GMT
            Not After : May  1 14:25:01 2025 GMT
        Subject: CN=7A522AA425B04B5EC879678AC8833A90D0CD324D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:86:5e:3b:30:8d:69:9c:e8:39:58:be:6f:5f:
                    fd:39:2a:93:8f:56:b5:ae:25:9a:e4:49:32:88:ef:
                    7b:da:7a:25:12:96:5e:86:77:f1:19:e1:2d:a1:6d:
                    54:5b:a2:eb:b2:aa:f4:19:bf:ac:55:86:fa:66:ed:
                    3c:6e:cf:0f:be:d6:14:6d:a9:ba:ce:19:92:ed:28:
                    f1:cd:2e:c9:9f:84:c4:82:f6:26:d1:cb:64:f9:39:
                    ec:61:1d:b7:31:0b:c0:6c:1e:4c:70:e4:b3:01:fb:
                    3d:88:02:47:47:b3:bf:e3:2d:ba:7a:c5:a8:7f:27:
                    c1:51:17:37:6c:6f:bd:54:3b:93:96:f8:13:6c:02:
                    57:46:aa:7f:e9:7c:82:b2:76:f3:c1:06:c9:3f:5c:
                    0c:ce:d3:8a:c5:4e:ad:bd:3e:55:d8:76:99:01:a0:
                    7a:67:05:02:75:f7:67:0a:32:8b:c8:6d:a9:ef:74:
                    6a:7d:df:d9:76:e3:8b:61:16:5e:da:52:e8:f6:69:
                    d5:9d:3f:4c:ec:7c:f9:97:bc:ba:12:26:ae:db:aa:
                    33:41:70:55:3f:04:88:ce:6e:5d:3d:74:15:de:1a:
                    dc:7b:91:48:31:b6:46:72:f1:65:81:39:5c:7f:bf:
                    e4:68:f6:6f:98:eb:a0:f0:b7:8f:e3:56:1d:35:f1:
                    11:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:52:2A:A4:25:B0:4B:5E:C8:79:67:8A:C8:83:3A:90:D0:CD:32:4D
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e3131382e302f32332d3233203d3e203532323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.181.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:35:d8:e3:12:fb:59:71:d7:27:d3:9b:47:81:7e:68:e4:03:
         0d:f1:f5:df:04:3b:a2:fb:e8:0a:b3:be:8a:34:e6:3c:25:c1:
         b9:8f:00:e8:79:7f:af:c4:ef:1b:4c:e7:80:43:86:74:a6:ae:
         cd:a1:84:15:6f:95:8f:46:40:f6:8c:d8:b6:1e:04:3e:48:30:
         4c:4a:b2:c2:d3:e0:8d:13:80:dd:82:27:6b:7c:75:e9:a6:ca:
         e6:56:55:79:7f:20:e0:9b:da:43:85:8e:cc:d7:6b:f9:3a:36:
         52:3d:a8:cb:b2:35:ba:b6:a8:77:dd:59:da:ed:1e:9e:00:5e:
         ac:a4:28:a5:d1:20:af:d4:ac:3b:c0:4f:01:51:6c:14:18:78:
         7c:30:8a:9c:30:99:a6:63:a2:84:74:b6:78:29:e3:3d:ee:e9:
         27:9e:94:ae:76:6c:95:a2:cb:60:58:df:33:75:a7:a8:b0:eb:
         8c:7a:aa:6b:5d:0f:d3:b6:c0:72:79:e3:ff:eb:ea:ca:6f:97:
         b6:60:52:65:f2:3d:83:a6:61:21:c4:3f:91:72:83:f6:f3:a0:
         ad:bb:29:54:78:ac:86:ba:2a:f5:3d:72:36:64:be:13:1b:6b:
         cb:ca:8a:c6:d9:83:8a:0b:ce:54:fc:05:9d:d4:57:3b:a0:99:
         68:0b:7d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:27 2024 by rpki-client on console-fra.rpki-client.org