Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3133312e3130382e33362e302f32322d3232203d3e20323632313937.roa
File:                     3133312e3130382e33362e302f32322d3232203d3e20323632313937.roa (raw, json)
Hash identifier:          u/PDNHXuXOx+b1fgwHdwbUGHgbvEFQDxSQ8DoNcrhiU=
Subject key identifier:   9B:7E:B5:C7:FD:FA:FB:CA:A8:7B:88:F3:68:15:66:EF:EC:75:2E:FC
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       14B18FFDD70A1120910CA5FB6DD32F05C873554F
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3133312e3130382e33362e302f32322d3232203d3e20323632313937.roa
Signing time:             Tue 05 Mar 2024 17:59:51 +0000
ROA not before:           Tue 05 Mar 2024 17:54:51 +0000
ROA not after:            Tue 04 Mar 2025 17:59:51 +0000
asID:                     262197
IP address blocks:        131.108.36.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 08 May 2024 20:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:b1:8f:fd:d7:0a:11:20:91:0c:a5:fb:6d:d3:2f:05:c8:73:55:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Mar  5 17:54:51 2024 GMT
            Not After : Mar  4 17:59:51 2025 GMT
        Subject: CN=9B7EB5C7FDFAFBCAA87B88F3681566EFEC752EFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4d:9c:18:ae:a7:f2:d7:f3:c9:7e:57:ec:d1:
                    2c:50:c7:f2:d8:b3:23:04:ba:31:63:e8:9b:03:25:
                    a0:1b:7d:c5:f0:41:77:43:30:26:40:14:b7:41:e2:
                    de:1d:c2:a0:5f:8f:5f:bb:05:2d:96:96:4c:fa:3e:
                    c5:e8:34:9b:a7:6e:03:1b:c7:3c:43:8e:2e:5c:b9:
                    25:e6:78:c3:67:05:3a:f0:af:53:de:db:f5:00:af:
                    31:b2:16:01:c8:99:11:07:a4:fa:82:0c:98:9c:e9:
                    be:b8:d5:b6:b2:8d:70:3e:6e:39:b0:12:33:8b:c1:
                    c6:e1:d5:76:53:d5:05:91:20:ea:7d:87:94:dc:01:
                    f7:6d:ca:d1:04:11:f7:35:a3:86:6a:70:d2:32:7a:
                    a7:27:8c:0a:ad:17:b0:4b:a6:89:94:74:34:85:bf:
                    a5:3d:84:c5:99:21:50:5a:93:20:5d:e9:92:70:4b:
                    8b:8b:00:39:b2:0a:00:51:31:4b:4b:f2:56:3d:cd:
                    44:33:b0:81:af:33:53:f3:b3:91:47:3a:62:f9:06:
                    15:05:f3:3c:5d:fd:a3:4a:a6:b3:24:0f:18:9f:12:
                    0e:a3:db:8f:4b:cd:97:49:76:5b:cd:c9:a8:1e:46:
                    6d:de:a3:47:69:80:8e:85:dd:84:e6:d3:89:4f:59:
                    1d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:7E:B5:C7:FD:FA:FB:CA:A8:7B:88:F3:68:15:66:EF:EC:75:2E:FC
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3133312e3130382e33362e302f32322d3232203d3e20323632313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:e8:e2:14:68:eb:31:44:00:94:a5:80:53:51:e2:ba:d4:23:
         fc:d6:d2:0c:a1:25:6c:b2:31:c7:53:99:a5:25:b5:e0:b2:e6:
         a1:8b:49:d6:ed:d1:92:59:91:b4:0e:6f:92:82:8b:21:fc:39:
         49:bf:25:7e:71:bf:63:a2:cc:21:06:b1:54:2c:24:20:2d:b5:
         34:98:13:d2:c0:cd:cf:f9:6d:09:c3:c3:99:ec:60:47:46:44:
         17:c9:d3:3f:39:8f:30:21:8d:f6:76:81:ed:45:10:86:0f:30:
         45:5c:10:23:8f:9d:fc:b6:4f:f0:a5:f0:b7:74:a6:c9:28:5f:
         28:d7:aa:09:5b:3f:dd:10:7f:9f:7d:fe:77:1a:94:d5:7c:81:
         f0:b3:5b:ab:67:08:19:c8:07:64:55:b0:14:de:fd:f6:eb:26:
         09:1a:0b:de:3a:92:41:fb:40:ab:13:65:e1:de:d9:aa:46:31:
         2d:69:29:0e:74:00:44:f6:03:56:8a:1c:86:65:52:e9:d1:a9:
         c9:69:41:db:df:c6:c5:67:14:3b:fc:f2:72:27:1b:af:6c:5d:
         3c:52:eb:6e:92:39:33:42:d6:5b:5c:8a:f4:10:4b:f4:ec:a7:
         cb:bb:10:b5:44:84:dc:ae:ad:7b:ac:f5:18:c9:d0:ae:2e:04:
         be:43:f9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 23:03:51 2024 by rpki-client on console-ams.rpki-client.org