Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e3132342e302f32332d3233203d3e203532323531.roa
File:                     3139302e3138312e3132342e302f32332d3233203d3e203532323531.roa (raw, json)
Hash identifier:          Bu8SWNeg70oPXgHeQrhPRhB/UhzpBPq5YHtZ1dsPuFc=
Subject key identifier:   12:1E:AB:EA:6D:FA:DC:F8:C1:A4:0A:9E:11:33:86:30:8C:D5:C1:EE
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       281E1E28A3BABACC6A44416B80084653F0F538C8
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e3132342e302f32332d3233203d3e203532323531.roa
Signing time:             Thu 02 May 2024 14:25:07 +0000
ROA not before:           Thu 02 May 2024 14:20:07 +0000
ROA not after:            Thu 01 May 2025 14:25:07 +0000
asID:                     52251
IP address blocks:        190.181.124.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 06 May 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:1e:1e:28:a3:ba:ba:cc:6a:44:41:6b:80:08:46:53:f0:f5:38:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: May  2 14:20:07 2024 GMT
            Not After : May  1 14:25:07 2025 GMT
        Subject: CN=121EABEA6DFADCF8C1A40A9E113386308CD5C1EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:24:fb:be:59:a1:03:1c:c6:e3:a8:12:8d:22:
                    64:e7:28:18:8e:6d:dc:12:26:b1:23:5f:95:97:c5:
                    7d:1c:cc:8f:aa:27:61:a7:22:c6:e7:3b:34:8d:6f:
                    18:c4:9f:18:8b:a5:69:d2:25:a9:19:4d:4b:35:ff:
                    c1:f7:61:e0:bf:59:56:97:0b:9c:6b:f9:f3:82:1a:
                    0a:35:d9:74:f8:96:5f:31:a3:a5:c3:82:f8:1c:ae:
                    6a:72:ee:26:3d:c5:64:60:62:75:5d:70:f1:6f:89:
                    f9:93:d7:bb:70:d3:f0:31:ee:bb:81:f9:b1:a5:0a:
                    f8:60:ff:8a:db:5b:4e:50:14:d5:59:f3:f1:c9:1b:
                    5f:08:fa:61:b0:18:86:98:92:6f:39:3f:cf:c7:aa:
                    38:f2:02:ec:dc:01:ed:48:2f:e6:94:76:90:40:c9:
                    e8:c7:f5:a3:76:cf:64:6e:3f:a0:ee:39:1a:c5:e5:
                    01:f0:7c:f7:20:8c:86:25:19:af:fa:19:29:64:7f:
                    61:a9:7a:f8:02:3c:44:b8:e0:58:42:49:23:cf:fc:
                    7e:b0:50:a9:13:b3:61:c3:be:43:9c:2e:ea:55:5e:
                    47:da:55:af:17:3a:1b:9b:86:7f:6f:40:c5:05:68:
                    1a:9e:bf:84:f4:3c:21:ba:f4:8d:2c:d9:2f:2a:08:
                    9f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:1E:AB:EA:6D:FA:DC:F8:C1:A4:0A:9E:11:33:86:30:8C:D5:C1:EE
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e3132342e302f32332d3233203d3e203532323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.181.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:bb:88:d3:09:b6:a2:d5:95:23:5f:62:c0:41:45:e1:c1:bf:
         dc:04:e7:c0:85:b0:18:85:d8:42:88:79:ba:ec:a7:2a:24:f4:
         63:be:07:7c:19:e3:3a:7e:14:f3:ae:07:96:b8:8c:13:9e:7e:
         82:2f:ae:d1:a6:2b:38:1c:f0:89:64:40:77:62:79:09:a5:90:
         4a:f5:63:50:2b:44:ad:3a:46:24:79:53:24:dc:18:7c:7d:7e:
         51:07:94:f3:fb:1d:10:95:dc:01:90:0d:72:bf:fc:02:a3:c9:
         3b:b7:30:2d:31:cf:dc:a9:d8:a0:4b:4a:f7:98:56:be:21:f2:
         fd:b8:6f:ee:44:be:66:5c:29:5f:53:bf:d5:f7:b3:1f:b6:30:
         78:f2:7a:9e:94:3e:1e:e4:88:2e:07:66:62:61:49:7c:a2:e6:
         dc:44:c2:87:82:ca:b4:19:3d:68:61:b8:0e:19:fa:04:85:75:
         1a:f2:ca:98:99:12:de:e2:a4:9d:e7:c2:db:45:15:7c:a9:c6:
         06:a4:d5:70:4e:dd:e9:50:d9:de:5e:dd:25:29:91:54:ea:85:
         4f:90:e7:85:9d:89:69:f2:83:9d:d8:7c:f3:a4:c3:47:02:9e:
         2b:e1:4e:42:dc:0b:ad:26:d2:98:78:eb:79:f7:93:2d:d6:4e:
         6b:93:f4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:27 2024 by rpki-client on console-fra.rpki-client.org