Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3138312e3132382e302e302f31322d3135203d3e203133343839.roa
File:                     3138312e3132382e302e302f31322d3135203d3e203133343839.roa (raw, json)
Hash identifier:          yl0/5nsoPHuNqN9A+1yIZeZ+1rwDyM+H5TlX+chGeS8=
Subject key identifier:   10:68:73:5E:E7:17:17:17:AF:33:64:DB:06:9C:7B:27:54:99:77:10
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       780B6EEC6E65ECF8DFEFD286AB569CA4C6C6DEDC
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3138312e3132382e302e302f31322d3135203d3e203133343839.roa
Signing time:             Mon 30 Sep 2024 22:45:00 +0000
ROA not before:           Mon 30 Sep 2024 22:40:00 +0000
ROA not after:            Mon 29 Sep 2025 22:45:00 +0000
asID:                     13489
IP address blocks:        181.128.0.0/12 maxlen: 15

Validation:               Failed, certificate revoked on Tue 08 Oct 2024 18:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:0b:6e:ec:6e:65:ec:f8:df:ef:d2:86:ab:56:9c:a4:c6:c6:de:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Sep 30 22:40:00 2024 GMT
            Not After : Sep 29 22:45:00 2025 GMT
        Subject: CN=1068735EE7171717AF3364DB069C7B2754997710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ea:9f:59:a7:8d:f2:a0:60:a4:32:b2:f9:e2:
                    be:99:45:c9:93:af:dc:72:ff:0f:c1:23:4e:f1:36:
                    e4:ef:3a:72:6a:0e:f0:75:fe:24:72:1c:95:3b:f1:
                    d4:64:dc:d1:d2:5b:b9:74:38:09:1d:50:25:6e:07:
                    22:69:b8:da:65:4e:46:ac:d0:0b:d5:4f:93:8f:df:
                    e3:3f:6b:51:00:c3:01:b5:6f:6b:6f:e7:96:63:df:
                    57:05:56:03:ca:de:db:bd:fe:ad:a5:97:65:d9:fc:
                    e8:d1:97:03:e6:0c:a7:0f:4a:68:bf:54:12:b9:aa:
                    9a:03:f6:64:74:76:cf:c3:03:3f:c4:da:7c:56:fd:
                    24:95:9d:a1:8c:2e:32:66:93:eb:52:a9:f1:09:1e:
                    0a:22:0c:f1:1e:38:89:6c:b1:3f:fd:68:40:12:b0:
                    5d:6f:f5:db:0e:b7:60:63:5d:bc:14:bc:84:a2:29:
                    3b:a2:ce:32:1d:ef:04:2b:72:cb:6c:a2:bc:a9:51:
                    e9:f5:2e:f3:b9:48:c0:e9:c6:0a:82:fa:59:09:49:
                    e6:42:c4:7c:8f:34:28:c2:cd:c5:94:1d:7d:63:58:
                    74:6d:42:92:dd:13:04:9c:66:34:b5:c0:02:2e:82:
                    aa:5a:80:dc:ee:76:6e:ca:ec:39:8b:55:c7:9d:5f:
                    18:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:68:73:5E:E7:17:17:17:AF:33:64:DB:06:9C:7B:27:54:99:77:10
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3138312e3132382e302e302f31322d3135203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.128.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         be:fc:eb:57:dd:06:6b:bb:d3:d6:41:96:4e:44:01:fb:30:ef:
         41:46:bd:ea:05:29:cf:4f:39:5b:21:4d:bb:04:29:d2:86:82:
         14:7f:e5:98:cb:63:24:5c:d8:15:af:bf:52:5a:73:40:34:d2:
         ac:46:c6:09:0c:57:57:30:bb:de:09:85:c8:02:c6:8f:10:8e:
         b3:6f:dc:fa:60:a9:d3:da:04:a6:c6:15:2f:34:75:fb:61:54:
         92:1b:23:1d:99:4c:a4:6f:23:8b:35:61:9e:d3:64:a9:f6:97:
         8b:a0:59:50:be:67:0f:5b:b4:d7:87:fe:4f:88:51:b6:ef:cb:
         0e:ce:65:fd:f6:15:07:f5:7e:4d:4e:7a:00:2a:15:39:47:ae:
         5e:f4:ff:87:27:28:83:32:c6:74:21:72:24:79:80:2e:1c:e9:
         a2:8b:79:de:3f:c2:8a:4c:fb:a7:ba:4c:d8:3f:0f:a7:7f:6e:
         d7:6b:ae:40:a8:9a:18:2c:56:c7:3e:8c:46:7b:9c:30:98:01:
         ef:74:9a:40:e9:50:4a:f9:80:d5:d8:69:0a:b1:ba:12:74:4d:
         b6:e0:55:fc:78:97:2f:8c:f2:64:90:03:55:bc:90:e3:af:43:
         7c:3e:ce:bc:88:c4:70:7d:c2:b9:39:ca:f2:e2:64:c4:66:a7:
         a5:d0:e5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 22:29:09 2024 by rpki-client on console-ams.rpki-client.org