Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e39362e302f32332d3233203d3e203532323531.roa
File:                     3139302e3138312e39362e302f32332d3233203d3e203532323531.roa (raw, json)
Hash identifier:          l2vmOpb2n43MxPME/qrxLuCmvRBmgWhZgQUFVYbyXiw=
Subject key identifier:   FC:43:99:30:52:50:2E:59:DF:66:57:6E:47:9A:C4:93:29:10:A8:ED
Certificate issuer:       /CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
Certificate serial:       4851503314BF3DE5D01CDD5AD295E2461ACD386E
Authority key identifier: 97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e39362e302f32332d3233203d3e203532323531.roa
Signing time:             Thu 02 May 2024 14:25:03 +0000
ROA not before:           Thu 02 May 2024 14:20:03 +0000
ROA not after:            Thu 01 May 2025 14:25:03 +0000
asID:                     52251
IP address blocks:        190.181.96.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 06 May 2024 13:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:51:50:33:14:bf:3d:e5:d0:1c:dd:5a:d2:95:e2:46:1a:cd:38:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9726BDB066009E4573BA35D5FEAFCCB431330CD7
        Validity
            Not Before: May  2 14:20:03 2024 GMT
            Not After : May  1 14:25:03 2025 GMT
        Subject: CN=FC43993052502E59DF66576E479AC4932910A8ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ad:ae:2c:93:7a:0a:ba:4a:d7:89:9a:fe:eb:
                    3f:53:62:37:ce:cd:70:31:26:f3:1a:74:a4:9b:05:
                    75:66:6c:10:b8:51:0c:62:32:77:53:6e:a4:cf:d7:
                    09:61:89:d6:e6:38:f5:85:48:f6:89:4c:3c:f1:8d:
                    c4:e8:01:75:a6:fe:88:55:75:81:b3:d8:e0:24:33:
                    70:28:49:44:ad:1c:4b:35:e4:8c:3c:d5:4b:c4:5b:
                    84:e5:fd:32:ea:40:d3:b4:38:68:62:ba:54:fe:e4:
                    99:cb:64:23:84:48:51:27:e8:44:e9:f8:48:a1:f7:
                    d2:0a:8c:36:38:8b:00:98:59:7c:b5:07:cb:a4:ac:
                    17:43:d3:6c:0b:01:f9:56:34:ca:59:14:e2:ed:90:
                    5f:02:72:f2:08:48:80:39:55:a6:cf:c0:a4:1f:ea:
                    12:e2:b5:70:f3:90:d3:1d:1a:92:09:75:ad:81:0f:
                    d5:22:26:60:1c:89:32:9b:f0:d7:18:7d:c6:6b:7f:
                    1d:47:63:e4:42:8c:c8:ec:18:6e:ea:56:de:b3:d5:
                    5b:02:36:56:41:ba:bd:ec:fb:01:75:e3:72:4b:5a:
                    31:d4:a6:9b:4d:3e:3f:45:b5:44:71:dd:ff:6b:a4:
                    aa:52:c8:2f:b0:1f:38:ea:db:14:e9:8d:f0:ed:3e:
                    47:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:43:99:30:52:50:2E:59:DF:66:57:6E:47:9A:C4:93:29:10:A8:ED
            X509v3 Authority Key Identifier:
                keyid:97:26:BD:B0:66:00:9E:45:73:BA:35:D5:FE:AF:CC:B4:31:33:0C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9726BDB066009E4573BA35D5FEAFCCB431330CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39BC715C575F7D53D1503DD8236E5197318D18926BBE4C77CB65DDEB13048FB7/0/3139302e3138312e39362e302f32332d3233203d3e203532323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.181.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:42:c5:c1:65:cd:a7:d2:52:f7:20:5f:c2:52:46:ab:02:5e:
         a7:3a:bf:08:84:57:64:eb:a6:a2:cc:62:70:48:52:4f:30:32:
         43:f0:f1:23:cf:27:8a:c5:50:49:16:83:53:51:e8:08:df:86:
         ad:ff:d6:28:da:10:e4:71:a9:d1:62:c8:d3:ea:6d:da:f5:09:
         24:da:d2:99:ef:c0:4e:be:52:68:44:57:16:94:0c:23:90:0a:
         a1:d2:64:e0:a1:c9:43:ca:0f:45:8b:d6:e5:37:81:b5:b7:6d:
         7f:55:c1:2d:1e:a6:04:0d:02:f6:aa:12:07:7d:23:25:30:19:
         92:26:ef:81:66:02:a9:11:0b:dc:bc:02:72:dc:b4:1e:99:cc:
         9e:18:b5:1a:e6:71:ec:41:6b:a3:18:94:51:4a:44:2d:f6:8e:
         c3:5a:8e:35:cd:81:bc:c3:c8:d5:db:f4:80:21:62:bd:cf:37:
         93:36:f1:9c:e8:bc:5f:4e:36:bc:9e:3b:9e:64:d1:4e:24:3a:
         c6:5f:a1:aa:fb:00:e5:d5:ff:61:b3:b7:d9:4a:1a:8b:e5:3e:
         31:76:2f:52:78:be:c7:68:8b:99:56:dc:7c:db:ef:ea:46:cd:
         dc:fb:5e:bd:4c:22:64:fd:7e:13:ae:af:42:3c:60:b0:c1:d0:
         c1:74:6b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:11 2024 by rpki-client on console-ams.rpki-client.org