Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/45F5B0F6B432084492421F87D85DC933C32131207800D5BEFBF891585FF9A0DB/0/3136382e3139362e3134302e302f32322d3232203d3e20323634373638.roa
File:                     3136382e3139362e3134302e302f32322d3232203d3e20323634373638.roa (raw, json)
Hash identifier:          8B2cqHVIfAUza0P5qNp1jteyZep8Uk3fdaYsd6OjFoQ=
Subject key identifier:   D7:A7:EE:D0:20:08:B1:48:7D:E1:EA:26:B0:2B:F5:1F:9F:9C:FB:01
Certificate issuer:       /CN=6F2B68C44C2A31541210D894254226DCF2A63FD5
Certificate serial:       54E14ACCD9389B1FB84694A462D9B179683DDC74
Authority key identifier: 6F:2B:68:C4:4C:2A:31:54:12:10:D8:94:25:42:26:DC:F2:A6:3F:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F2B68C44C2A31541210D894254226DCF2A63FD5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/45F5B0F6B432084492421F87D85DC933C32131207800D5BEFBF891585FF9A0DB/0/3136382e3139362e3134302e302f32322d3232203d3e20323634373638.roa
Signing time:             Tue 05 Mar 2024 17:43:02 +0000
ROA not before:           Tue 05 Mar 2024 17:38:02 +0000
ROA not after:            Tue 04 Mar 2025 17:43:02 +0000
asID:                     264768
IP address blocks:        168.196.140.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 18 Apr 2024 14:45:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:e1:4a:cc:d9:38:9b:1f:b8:46:94:a4:62:d9:b1:79:68:3d:dc:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F2B68C44C2A31541210D894254226DCF2A63FD5
        Validity
            Not Before: Mar  5 17:38:02 2024 GMT
            Not After : Mar  4 17:43:02 2025 GMT
        Subject: CN=D7A7EED02008B1487DE1EA26B02BF51F9F9CFB01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c0:06:8e:1e:53:ff:8d:1d:18:c8:f6:4c:24:
                    e6:55:15:22:ec:e7:44:7b:46:f5:50:15:c4:ff:65:
                    0a:9d:c6:69:36:67:42:14:92:8c:5f:66:ef:5a:a2:
                    d3:1d:a5:48:6e:12:41:92:7f:ef:1b:53:be:c8:5e:
                    31:22:ac:9e:21:d7:1d:93:23:5a:aa:0e:92:db:55:
                    80:e0:b2:b6:c3:00:d7:ba:0b:db:d4:f0:fa:02:51:
                    fa:d8:73:a3:1e:d8:7b:dd:ed:f6:d6:2e:b5:ee:88:
                    27:ef:c3:f8:2d:59:bd:ad:06:47:1d:48:f3:21:a0:
                    0a:62:2e:a5:3b:57:63:d5:be:61:74:ce:70:66:65:
                    96:c0:ca:95:f3:ba:8a:4e:9e:b8:fb:ef:ea:69:ba:
                    7c:53:17:db:a5:65:66:21:69:a9:b6:d9:51:52:f2:
                    2e:d0:84:ab:de:10:be:9d:01:7f:83:be:5c:48:bf:
                    71:5c:c3:b4:c6:ed:da:87:fa:60:2a:dd:fe:57:36:
                    a1:26:b3:44:18:bb:dc:ac:92:34:ec:91:92:94:13:
                    52:cd:c0:8d:74:a0:fe:c0:d3:52:17:d7:d0:fa:8f:
                    6a:f7:4e:14:2f:db:14:5e:bc:9b:33:07:ff:d4:28:
                    f4:78:dd:9f:8c:7a:d3:f6:ef:f4:63:f6:4c:2c:07:
                    2d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A7:EE:D0:20:08:B1:48:7D:E1:EA:26:B0:2B:F5:1F:9F:9C:FB:01
            X509v3 Authority Key Identifier:
                keyid:6F:2B:68:C4:4C:2A:31:54:12:10:D8:94:25:42:26:DC:F2:A6:3F:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/45F5B0F6B432084492421F87D85DC933C32131207800D5BEFBF891585FF9A0DB/0/6F2B68C44C2A31541210D894254226DCF2A63FD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F2B68C44C2A31541210D894254226DCF2A63FD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/45F5B0F6B432084492421F87D85DC933C32131207800D5BEFBF891585FF9A0DB/0/3136382e3139362e3134302e302f32322d3232203d3e20323634373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:43:07:4d:f4:50:19:a5:fa:a6:66:ae:e1:26:46:37:72:12:
         dd:9b:4f:b4:89:bb:aa:72:8e:dc:a1:0a:3e:db:b2:b5:6b:f4:
         f6:2f:89:44:e5:71:d5:b9:e7:40:ae:1b:aa:d9:c5:ed:b9:78:
         f4:93:9d:ad:ca:0f:5b:1e:ad:bf:91:ca:41:6e:5e:ec:fa:5f:
         ba:89:bb:ab:d8:01:2b:2d:0e:1c:3b:6a:97:ba:16:ec:2b:14:
         8b:0f:4e:89:fd:48:e6:9d:bf:fa:d1:37:b1:73:e0:f8:db:54:
         ef:20:97:c8:16:b7:d1:04:c4:ae:31:47:58:78:7a:97:65:22:
         62:40:a9:e9:7b:8a:3c:f8:48:e4:ae:6c:a9:61:8f:d6:b1:d8:
         fe:9b:43:cf:68:bd:d4:c4:bc:f5:cf:fa:66:21:15:80:1f:6f:
         61:c9:eb:27:fa:e8:f8:7a:28:07:f3:65:c8:42:3f:9c:70:ec:
         3f:4c:fa:fa:6c:86:9a:d7:78:d8:92:d5:7d:de:76:55:e9:13:
         75:9b:4c:11:94:b3:e6:94:03:93:24:b7:d5:3b:9e:ad:83:b5:
         06:7c:e8:e7:58:0d:44:f7:de:2f:57:d8:c1:06:b4:31:39:b6:
         ed:4b:f1:9b:44:4a:d6:6b:e6:f1:4f:47:8f:93:77:4a:47:e9:
         f7:69:20:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:20 2024 by rpki-client on console-ams.rpki-client.org