Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e37342e302f32332d3233203d3e203532323531.roa
File:                     3139302e3138312e37342e302f32332d3233203d3e203532323531.roa (raw, json)
Hash identifier:          J8WWeYYZfGpo/zvw5V1PTDfdjY/Yl4M623as92Ob09A=
Subject key identifier:   AB:BA:7A:C0:14:70:5D:E5:7E:CC:7E:0E:E1:17:21:91:47:D3:3C:2D
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       685EFC0583992D7F9541ABC1165EE70F549E6B00
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e37342e302f32332d3233203d3e203532323531.roa
Signing time:             Thu 02 May 2024 14:25:05 +0000
ROA not before:           Thu 02 May 2024 14:20:05 +0000
ROA not after:            Thu 01 May 2025 14:25:05 +0000
asID:                     52251
IP address blocks:        190.181.74.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 06 May 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:5e:fc:05:83:99:2d:7f:95:41:ab:c1:16:5e:e7:0f:54:9e:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: May  2 14:20:05 2024 GMT
            Not After : May  1 14:25:05 2025 GMT
        Subject: CN=ABBA7AC014705DE57ECC7E0EE117219147D33C2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:79:8e:fe:ac:02:17:c4:f7:de:f5:86:00:3e:
                    ec:4e:17:22:f3:6e:a3:dc:3f:39:43:94:06:64:22:
                    2b:5b:40:45:a1:6f:3e:94:b4:70:ed:55:5b:d3:82:
                    f4:26:75:2d:9e:d2:3a:df:9a:c3:f0:54:1f:f6:01:
                    28:b4:f5:0c:c7:99:ad:32:87:52:84:f7:4e:2b:3f:
                    d4:f5:0d:1d:30:fe:cb:2e:74:dc:fa:9e:ae:6d:3f:
                    e8:28:bc:6c:6e:03:00:13:4c:16:e8:a5:60:c4:c4:
                    e2:6d:ea:c6:99:1e:45:e1:aa:d9:d7:01:82:63:60:
                    bd:26:4a:06:ef:27:c2:a7:13:38:e3:6e:c2:c3:11:
                    cf:ba:a8:dc:df:bf:71:fc:bb:f0:79:62:34:4a:07:
                    e2:f3:36:b6:fd:59:36:50:51:7f:87:40:44:64:d4:
                    46:f1:eb:d4:83:31:8e:5d:f9:06:58:a6:f7:33:48:
                    f6:27:47:50:74:99:cc:17:bf:bf:85:94:2f:fc:7d:
                    8c:3f:20:81:31:a2:74:fc:ca:91:8e:85:f0:c8:6f:
                    44:d3:aa:07:72:4d:43:fb:f4:72:d1:98:9d:a0:71:
                    a0:06:9c:31:cc:18:7a:57:a3:64:37:d9:5b:7c:3e:
                    e7:bc:6e:bb:26:1d:94:c2:99:83:1f:fe:1c:c9:2c:
                    98:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:BA:7A:C0:14:70:5D:E5:7E:CC:7E:0E:E1:17:21:91:47:D3:3C:2D
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e37342e302f32332d3233203d3e203532323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.181.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:fa:0d:d6:a4:86:53:51:f6:9d:6c:aa:81:b3:be:f8:1b:8b:
         9a:af:b6:29:45:c5:b3:e5:63:a3:2a:e0:3d:e4:47:15:15:a0:
         6a:42:c3:d5:aa:3f:62:76:7d:e2:c0:87:05:86:e7:8f:89:0c:
         e8:01:5a:59:ad:80:ae:cc:b0:a2:32:8d:ea:d0:f0:6a:67:97:
         89:96:33:20:8b:fb:c9:8c:a9:d7:f1:2e:6b:be:96:65:e0:c6:
         82:b9:a8:1e:67:75:7e:97:93:70:90:34:dc:9e:d1:48:f2:b2:
         07:28:d9:93:29:8f:6b:e4:e7:e0:05:a8:ef:72:9f:b2:5e:56:
         c2:b3:18:17:19:9b:d6:d9:1e:ee:8e:25:47:0c:69:7d:ed:16:
         67:fc:a8:fb:b7:9b:1e:ce:ce:89:38:61:4a:9a:b0:4d:ed:1c:
         91:0f:f6:f7:f7:98:0d:55:ce:68:b7:0a:2d:25:b2:78:79:82:
         56:bc:a8:74:f3:34:78:e7:5c:de:de:ab:c3:97:db:2d:93:1d:
         6b:38:70:63:66:fc:dc:f8:52:43:f8:12:66:45:c8:67:22:0f:
         22:49:90:b9:ff:73:ed:64:d7:b7:30:81:ba:9f:6f:cc:ae:00:
         c5:bc:c6:c1:1e:5f:41:de:a1:01:e9:83:10:fd:23:25:42:22:
         e7:4b:50:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:27 2024 by rpki-client on console-fra.rpki-client.org