Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e39342e302f32332d3233203d3e203532323531.roa
File:                     3139302e3138312e39342e302f32332d3233203d3e203532323531.roa (raw, json)
Hash identifier:          wBWmaFLHn+TEji+Y2nFq4vfC8xNxbZy7YuzyF0KThgY=
Subject key identifier:   6A:86:6B:5E:8A:4D:1F:B9:CD:0E:26:D3:8E:D6:56:72:60:9B:3E:B8
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       3075E860F8832513CE51A5787AEE37E58F57A56B
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e39342e302f32332d3233203d3e203532323531.roa
Signing time:             Thu 02 May 2024 14:25:06 +0000
ROA not before:           Thu 02 May 2024 14:20:06 +0000
ROA not after:            Thu 01 May 2025 14:25:06 +0000
asID:                     52251
IP address blocks:        190.181.94.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 06 May 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:75:e8:60:f8:83:25:13:ce:51:a5:78:7a:ee:37:e5:8f:57:a5:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: May  2 14:20:06 2024 GMT
            Not After : May  1 14:25:06 2025 GMT
        Subject: CN=6A866B5E8A4D1FB9CD0E26D38ED65672609B3EB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d1:cd:68:43:69:c6:de:30:26:c6:22:69:2d:
                    9d:db:98:2c:01:db:f3:ea:43:cd:11:87:d0:a4:61:
                    83:71:c4:81:82:1e:d0:0c:d8:c1:75:ee:50:d0:61:
                    61:07:2e:2e:6c:1b:d6:95:12:84:30:65:33:76:9b:
                    05:14:82:55:64:3f:ab:c2:7e:96:09:9d:bc:81:22:
                    1a:12:49:08:f8:17:ea:63:1b:59:aa:79:a9:b3:c6:
                    6a:b3:39:64:88:eb:8e:8b:a3:7a:5a:82:15:09:bd:
                    40:24:89:be:46:9d:b6:af:04:11:31:e1:27:6b:91:
                    5e:07:04:51:7a:bc:0b:17:97:c0:71:f2:fd:ca:04:
                    77:a0:33:49:45:e6:0b:cf:37:0c:56:6d:6d:af:8b:
                    b0:e3:45:c0:dd:c8:19:48:dc:64:34:9d:e4:cb:f6:
                    66:9f:0b:ca:4e:4b:d4:5f:ab:1e:e6:a8:55:27:3a:
                    1b:ac:d6:88:20:8e:07:17:29:47:ea:0b:71:7d:d5:
                    27:02:76:d5:30:5a:79:08:b3:49:a2:26:ff:3c:4c:
                    01:6a:99:5f:52:2e:c8:0b:ef:9b:32:5a:b2:60:54:
                    46:86:89:47:bf:a9:65:34:12:e2:da:b5:22:6c:cb:
                    b6:a9:97:6d:df:d0:cc:0f:97:cb:20:82:13:08:c9:
                    40:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:86:6B:5E:8A:4D:1F:B9:CD:0E:26:D3:8E:D6:56:72:60:9B:3E:B8
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e39342e302f32332d3233203d3e203532323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.181.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cd:c6:e9:b2:3f:89:ef:49:89:29:10:7a:98:ba:46:f3:5d:b0:
         d1:fd:c2:6d:08:7e:bc:5f:b0:2f:3b:2a:2d:22:fb:96:28:37:
         32:ae:bf:21:98:42:62:2a:84:a0:85:68:bd:21:05:b4:dc:ba:
         56:16:14:47:56:53:df:46:fb:05:9b:34:08:51:84:ad:1b:86:
         10:58:86:8f:0f:0d:6f:4b:5a:95:47:e1:18:5e:33:ab:a4:3f:
         54:37:02:9a:ff:23:ee:8d:6d:d8:fb:47:c4:3b:9f:1e:82:f3:
         ad:2f:7d:7c:24:06:e3:e3:77:f1:b5:bf:6d:fd:88:87:26:df:
         59:97:88:3b:9f:1c:bc:b5:62:10:ed:3e:13:cb:cd:84:70:75:
         18:90:ec:f0:87:05:09:e3:a3:24:ee:76:d4:d1:9f:9a:41:11:
         25:ae:a5:c2:97:52:b8:85:0d:46:38:2a:48:c6:bb:c1:60:5d:
         da:47:fa:aa:7d:d6:3a:96:58:bd:e0:c4:38:04:b1:21:5b:f1:
         3a:f9:24:10:bf:38:ba:47:ce:87:28:c3:d0:63:82:54:cf:a7:
         66:32:3a:4b:b3:19:b0:31:47:48:03:11:9d:d0:6f:6a:d7:f2:
         05:f0:db:85:ce:e1:c7:9a:37:69:9a:4a:1d:aa:20:70:44:89:
         26:eb:c7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:11 2024 by rpki-client on console-ams.rpki-client.org