Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e38342e302f32332d3233203d3e203532323531.roa
File:                     3139302e3138312e38342e302f32332d3233203d3e203532323531.roa (raw, json)
Hash identifier:          ewpohbmPeavtibFP3uOT+69KSdJJ/hgrwb5EZDl71uM=
Subject key identifier:   C7:EB:8E:7C:8A:D1:51:A7:E8:1D:BC:DF:85:E9:3C:62:CE:55:E6:E3
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       0B024FF382C6C951920576C7F18DE232BCE8DA62
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e38342e302f32332d3233203d3e203532323531.roa
Signing time:             Thu 02 May 2024 14:25:03 +0000
ROA not before:           Thu 02 May 2024 14:20:03 +0000
ROA not after:            Thu 01 May 2025 14:25:03 +0000
asID:                     52251
IP address blocks:        190.181.84.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 06 May 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:02:4f:f3:82:c6:c9:51:92:05:76:c7:f1:8d:e2:32:bc:e8:da:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: May  2 14:20:03 2024 GMT
            Not After : May  1 14:25:03 2025 GMT
        Subject: CN=C7EB8E7C8AD151A7E81DBCDF85E93C62CE55E6E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:52:7a:fe:45:7e:27:b4:fd:35:82:da:b6:35:
                    a2:6f:be:da:69:db:35:c4:0e:e6:85:e1:18:e3:44:
                    0d:45:90:d9:52:09:a8:10:cb:30:e8:0c:f4:a7:34:
                    ea:fa:bb:69:8b:27:79:54:7e:96:7d:19:c8:b0:7f:
                    c7:9a:8d:df:3d:fb:6e:82:ea:a9:d8:99:e4:1b:4a:
                    7d:54:98:d5:68:51:f8:10:e9:02:b8:b6:7c:bf:b8:
                    50:c7:a3:11:66:97:2e:1e:db:ec:ba:28:6c:0a:be:
                    62:9d:3b:45:9d:bd:5c:53:93:f6:3e:40:8e:06:e1:
                    80:49:57:cb:23:1b:c7:81:a7:0a:bf:fd:dd:81:c9:
                    44:a8:59:bb:09:e3:b3:13:d7:03:63:a2:58:b8:7d:
                    a9:57:99:0d:64:8d:71:40:e2:f3:9a:0a:ed:f1:d6:
                    74:ce:00:33:27:53:5d:b1:28:33:77:9b:a3:7f:88:
                    44:27:01:2a:73:82:43:51:b6:e0:ad:39:30:a6:51:
                    a3:50:4a:3b:32:8d:0e:16:a6:d2:a9:08:4c:d4:2d:
                    de:dd:5b:54:18:a7:bf:9f:33:10:da:8e:50:76:f8:
                    4d:b7:e5:f7:1d:28:2a:f9:1b:20:a2:d0:c3:2b:d6:
                    cc:32:b3:f6:4d:3a:55:0c:ac:b7:25:24:8e:49:13:
                    30:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:EB:8E:7C:8A:D1:51:A7:E8:1D:BC:DF:85:E9:3C:62:CE:55:E6:E3
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e38342e302f32332d3233203d3e203532323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.181.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:63:bf:a4:8b:f1:c4:6b:bc:66:8b:22:eb:e0:fd:35:da:57:
         17:c7:63:fb:25:2c:04:67:1d:1e:46:50:d4:0d:bf:1f:c4:fe:
         84:4b:ba:88:4c:cf:d3:f3:81:e0:44:cb:64:4d:10:da:a4:51:
         5a:57:72:83:9f:40:fb:e6:94:a2:12:07:d7:c2:92:c8:63:34:
         4c:0e:e0:e9:38:01:7a:8c:65:78:b4:10:93:dd:61:78:58:50:
         65:ca:45:f7:12:53:39:2e:e5:2e:4c:60:e9:43:21:78:08:1d:
         04:e7:93:cc:be:cf:41:ed:98:a4:3f:42:7e:35:4e:3f:2a:7b:
         f3:a9:60:7f:55:75:f2:51:db:38:3d:1d:77:f2:5e:82:c9:64:
         3c:52:85:4b:08:fe:d8:49:dc:e1:61:2c:c0:25:d3:7b:5c:4c:
         54:15:f6:e9:f9:4c:ea:f8:b2:12:02:00:e8:50:10:56:fd:76:
         d5:ce:e4:bb:65:a1:bf:d9:90:87:04:43:db:4c:01:a8:71:e9:
         87:b7:67:59:6d:99:24:06:47:da:5a:99:e7:11:ed:fb:f5:cf:
         c0:65:03:ea:18:1e:a1:a2:3d:7f:a3:82:cc:31:91:e6:c3:87:
         ad:8f:8a:a6:c3:ba:a3:29:dd:d9:2e:fe:88:57:b9:2d:a1:f3:
         da:56:9e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:11 2024 by rpki-client on console-ams.rpki-client.org