Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e38382e302f32332d3233203d3e203532323531.roa
File:                     3139302e3138312e38382e302f32332d3233203d3e203532323531.roa (raw, json)
Hash identifier:          e9WgVB/noOYlvInPDLqWwQZNs5SKgXrFcGEMsJpUE94=
Subject key identifier:   37:E1:7D:F8:71:A6:91:95:7E:BE:A5:95:8D:38:67:57:FE:A5:46:41
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       585B62A2497D9D70A54FB7D938878BDEA328DB8F
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e38382e302f32332d3233203d3e203532323531.roa
Signing time:             Thu 02 May 2024 14:25:04 +0000
ROA not before:           Thu 02 May 2024 14:20:04 +0000
ROA not after:            Thu 01 May 2025 14:25:04 +0000
asID:                     52251
IP address blocks:        190.181.88.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 06 May 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:5b:62:a2:49:7d:9d:70:a5:4f:b7:d9:38:87:8b:de:a3:28:db:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: May  2 14:20:04 2024 GMT
            Not After : May  1 14:25:04 2025 GMT
        Subject: CN=37E17DF871A691957EBEA5958D386757FEA54641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:61:ba:9b:b3:39:34:c6:9e:dd:2b:c7:39:3e:
                    99:ec:ed:a3:18:a4:2e:23:8b:57:56:2b:05:e1:56:
                    72:37:1e:1d:fb:77:ce:94:99:33:cf:96:c9:4a:9f:
                    2d:61:1e:05:69:17:9b:55:51:d9:cf:35:4f:71:d4:
                    23:04:e0:b2:02:8a:7e:e1:3d:d4:a7:84:ce:8e:4d:
                    91:bb:03:a8:c8:f7:55:b0:70:a7:e1:41:f9:38:ec:
                    a3:fc:9b:4f:bb:25:03:72:a4:e9:e4:d0:db:fc:fa:
                    1a:52:6a:b3:fe:70:c8:c5:6d:62:5e:8c:42:36:e4:
                    f3:ff:62:76:51:41:c9:88:24:60:6e:24:da:3f:c7:
                    1c:6a:5b:2a:c5:9f:ed:ac:67:00:bd:de:1e:1b:6b:
                    49:aa:b7:6b:90:30:01:aa:2d:9d:f1:fb:07:e3:4f:
                    a8:10:25:86:22:5b:5b:b9:1f:26:03:b8:25:cf:71:
                    55:a9:b6:35:2a:0b:11:ef:96:30:e6:27:d4:8d:08:
                    0b:5b:3a:e1:39:ce:bd:36:11:d8:6b:f8:7d:2c:95:
                    0e:70:b1:06:59:f5:0c:f8:a7:44:3b:b6:d2:9d:9d:
                    a1:87:4d:97:72:a1:b2:ab:73:c6:24:73:34:09:e2:
                    89:59:98:17:9e:93:70:b8:df:e2:d1:a3:e7:37:61:
                    f8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E1:7D:F8:71:A6:91:95:7E:BE:A5:95:8D:38:67:57:FE:A5:46:41
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e38382e302f32332d3233203d3e203532323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.181.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:78:f5:29:b8:25:57:47:3b:35:0f:6f:ec:ee:36:69:35:c7:
         7b:ce:ca:bf:cb:cf:93:75:fd:dc:72:59:3b:c5:fa:5e:bf:e2:
         71:5c:84:b5:4b:3a:51:62:12:75:8f:2a:4d:43:26:64:40:1a:
         7c:ad:54:ca:a1:db:8f:85:a6:68:9d:3f:48:85:47:3d:f4:02:
         2e:6a:0a:d6:79:e8:57:9c:61:c0:05:c9:f5:c7:1f:19:4b:2a:
         ac:ab:c3:ab:5d:1b:d1:a0:2c:3f:f8:33:77:75:41:f1:4e:2b:
         73:2f:19:61:f9:84:d1:63:4d:19:f8:df:a7:4e:40:69:b0:e5:
         e0:32:a4:82:17:61:9f:e5:87:d1:a1:b5:f5:7f:21:3f:2b:86:
         60:94:50:82:7d:f9:59:6d:55:5c:55:8f:fb:61:c8:23:6b:3f:
         3d:f4:dd:bd:f6:bf:1e:3a:d2:8d:54:b4:c9:72:5a:d5:09:88:
         14:2f:23:d1:1b:99:f8:e7:fa:da:59:e0:18:7f:1a:bb:4e:42:
         8a:d5:36:f9:54:1f:53:be:32:19:e4:48:5e:4d:fd:45:83:a0:
         c0:30:20:3c:98:a0:72:6e:ce:69:c2:61:90:89:93:8a:f7:1e:
         5a:c5:f3:9f:0f:cf:b9:10:95:5d:eb:7f:69:fa:90:c0:69:88:
         db:00:b5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:27 2024 by rpki-client on console-fra.rpki-client.org