Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/3138312e3232342e36342e302f32322d3234203d3e20323732303235.roa
File:                     3138312e3232342e36342e302f32322d3234203d3e20323732303235.roa (raw, json)
Hash identifier:          trJ5+MAkX1Zh3fr9y3cWCWDcwzvwITLLlnCkHmVm8eQ=
Subject key identifier:   1D:A4:CE:9B:9C:65:61:0D:A2:71:A7:73:83:60:E2:C3:6E:50:36:EF
Certificate issuer:       /CN=FC61E7B856A2858B331CE4EC48A27D8162FA5E57
Certificate serial:       72907643316EAA5A05774CB20F113322413279D6
Authority key identifier: FC:61:E7:B8:56:A2:85:8B:33:1C:E4:EC:48:A2:7D:81:62:FA:5E:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/3138312e3232342e36342e302f32322d3234203d3e20323732303235.roa
Signing time:             Tue 05 Mar 2024 18:12:11 +0000
ROA not before:           Tue 05 Mar 2024 18:07:11 +0000
ROA not after:            Tue 04 Mar 2025 18:12:11 +0000
asID:                     272025
IP address blocks:        181.224.64.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Fri 13 Sep 2024 16:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:90:76:43:31:6e:aa:5a:05:77:4c:b2:0f:11:33:22:41:32:79:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC61E7B856A2858B331CE4EC48A27D8162FA5E57
        Validity
            Not Before: Mar  5 18:07:11 2024 GMT
            Not After : Mar  4 18:12:11 2025 GMT
        Subject: CN=1DA4CE9B9C65610DA271A7738360E2C36E5036EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:64:00:08:10:60:01:e6:a7:1b:47:d2:34:b1:
                    4d:64:60:83:fb:da:e0:50:67:a1:52:fa:22:74:d2:
                    e1:c8:c5:2a:b8:b2:03:7c:29:13:7e:55:85:05:72:
                    ed:69:1d:16:24:58:15:5a:d4:bf:c6:76:90:fb:12:
                    89:a3:fb:02:97:ef:f6:49:c9:d9:25:15:bb:9f:d8:
                    25:75:1d:9c:0f:c3:93:a1:99:ab:5b:c2:25:d3:6e:
                    4e:6d:26:46:b2:4d:6a:64:5b:e4:52:66:cf:b1:5d:
                    d0:5f:c0:78:57:8d:b4:5e:a0:c0:2b:21:8a:ca:73:
                    b0:f9:c3:b1:a5:0a:28:11:61:74:e9:34:9d:5c:53:
                    74:e0:fb:69:78:87:1b:fb:8c:f5:f4:3e:7e:27:52:
                    c3:76:4e:c8:01:ed:a2:d4:ba:df:f2:e0:4a:56:f8:
                    8f:fe:fc:2e:14:31:12:2d:2e:f5:5b:bc:29:8c:cb:
                    b6:49:e7:c9:b9:0f:8f:4c:d5:5e:d4:c6:14:27:55:
                    8d:d4:c4:ad:48:18:4e:48:02:fe:aa:1a:1e:75:8e:
                    19:a7:5a:af:19:5c:d3:f1:ed:7a:cf:d7:f5:9a:77:
                    ee:b8:e8:39:4f:37:9f:7b:83:b2:1d:77:66:a1:24:
                    ce:77:be:07:46:da:da:41:c0:4e:a7:2a:67:3d:b2:
                    ad:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A4:CE:9B:9C:65:61:0D:A2:71:A7:73:83:60:E2:C3:6E:50:36:EF
            X509v3 Authority Key Identifier:
                keyid:FC:61:E7:B8:56:A2:85:8B:33:1C:E4:EC:48:A2:7D:81:62:FA:5E:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC61E7B856A2858B331CE4EC48A27D8162FA5E57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3CDDF7F99C266195FF39C955BC7E0F61CCDCFB1C960EC295BAF0252FCC65A7CC/0/3138312e3232342e36342e302f32322d3234203d3e20323732303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:80:0a:b6:29:a7:3e:2f:ed:73:31:97:79:bd:aa:dc:2b:bb:
         e4:97:98:ed:90:02:fc:ff:0e:1e:e7:2c:44:a4:49:70:42:87:
         de:72:dc:26:39:91:ba:52:44:ac:a9:04:f0:3a:45:2c:b4:99:
         5b:15:1c:c3:25:f3:2a:43:2a:df:6f:56:c1:43:3b:c3:c2:3a:
         74:2d:90:98:37:23:c9:81:f0:1e:2c:08:3a:6e:b4:ce:a8:27:
         e3:f7:0f:c6:f3:82:b3:67:47:55:9c:e3:bb:37:05:49:b1:37:
         3a:d4:af:f3:c5:52:45:ba:fb:fd:fa:6c:e9:12:2c:1f:08:4b:
         a6:03:85:5c:46:e0:35:76:d0:5c:c0:f4:af:51:3c:da:1d:d7:
         05:97:af:80:22:3a:02:52:66:4c:38:f4:67:e9:2b:ed:9f:cd:
         4c:0f:ea:13:38:0f:4c:4d:85:8c:be:08:7c:23:27:23:82:13:
         96:35:34:73:ac:6d:73:af:67:d8:c9:3f:a9:88:db:63:e0:52:
         9e:e8:ae:01:ea:be:f7:73:27:77:4e:f3:4f:78:60:37:bd:1f:
         cf:51:cd:89:bd:10:3b:b0:0a:9f:29:ff:5a:da:bc:65:0e:34:
         33:df:c3:61:0b:32:a7:2c:1d:3e:52:97:8c:2b:a7:02:95:a1:
         7b:05:a0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 13 17:40:58 2024 by rpki-client on console-fra.rpki-client.org