Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e3132382e302f31372d3137203d3e20323632313937.roa
File:                     3138362e3137362e3132382e302f31372d3137203d3e20323632313937.roa (raw, json)
Hash identifier:          gb2YUBDkACbalRqUONI2U+xX+htc6z+Me/xG83FOFio=
Subject key identifier:   EF:44:87:5C:B4:77:E6:1C:F7:85:A0:6B:AF:2A:06:22:2D:1A:8C:81
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       41C3FBE802936C228F05CC3BE826DAF00531777A
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e3132382e302f31372d3137203d3e20323632313937.roa
Signing time:             Tue 05 Mar 2024 18:00:00 +0000
ROA not before:           Tue 05 Mar 2024 17:55:00 +0000
ROA not after:            Tue 04 Mar 2025 18:00:00 +0000
asID:                     262197
IP address blocks:        186.176.128.0/17 maxlen: 17

Validation:               Failed, certificate revoked on Wed 08 May 2024 20:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:c3:fb:e8:02:93:6c:22:8f:05:cc:3b:e8:26:da:f0:05:31:77:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Mar  5 17:55:00 2024 GMT
            Not After : Mar  4 18:00:00 2025 GMT
        Subject: CN=EF44875CB477E61CF785A06BAF2A06222D1A8C81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:60:22:67:bb:a3:26:a6:c6:ef:66:c9:39:41:
                    dc:b0:1f:0c:26:41:0a:ce:24:e3:fb:ff:a2:e6:ba:
                    81:31:1b:05:82:16:54:b1:b8:78:0a:b0:f5:41:81:
                    eb:55:c0:b7:74:ea:a9:c9:0c:36:0f:f8:97:04:a4:
                    a5:81:97:90:c1:15:c8:f9:ab:e7:26:ca:ff:59:57:
                    f1:c0:3e:5f:fc:af:5a:d1:dc:6e:96:61:52:94:bd:
                    2f:19:1d:0e:65:7e:6d:be:f1:c6:5f:50:5d:0b:bb:
                    9e:7e:3b:c8:1f:b0:76:c8:2b:34:18:0b:c4:bb:96:
                    42:3d:a0:1e:8b:29:f1:0b:c0:10:a3:5e:18:15:cf:
                    6a:58:7d:9c:e8:42:0c:bf:c1:90:54:f1:ef:4b:cc:
                    41:e1:33:df:6b:9f:ab:b6:ea:a6:be:ae:6e:23:86:
                    31:02:4e:8c:39:1b:a5:09:39:6c:2a:fd:a1:31:d2:
                    fc:cd:f6:67:50:8d:87:9e:1f:c8:fd:d6:bc:ad:b3:
                    f7:df:cd:f2:85:61:dd:59:37:e9:b4:8a:15:94:b4:
                    28:22:d2:aa:cf:f0:c6:73:e7:fd:88:35:88:44:c4:
                    1e:61:e3:ac:fd:6e:22:bd:7a:43:46:7e:77:cd:f9:
                    27:76:f7:54:f8:d1:a0:39:c7:69:fe:7a:3c:57:75:
                    d8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:44:87:5C:B4:77:E6:1C:F7:85:A0:6B:AF:2A:06:22:2D:1A:8C:81
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e3132382e302f31372d3137203d3e20323632313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.176.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         4a:1d:64:a1:25:bf:77:66:40:52:7e:c5:a1:28:64:d4:6b:1e:
         d0:7f:35:63:80:02:20:a3:c1:fd:7f:37:b2:18:a3:c3:0a:e7:
         50:ed:c1:ee:23:ba:89:f2:83:44:fa:bc:6f:5c:1d:a1:d6:90:
         a0:73:1c:5d:8e:05:1e:a9:83:8f:f5:8d:f9:a7:da:2b:45:4d:
         95:71:27:16:e2:47:71:38:25:7f:78:99:66:5c:2a:15:de:55:
         ed:d7:4e:42:03:64:fa:66:23:73:fe:2d:54:98:3e:00:f9:f0:
         b8:40:7e:ac:bc:7c:dd:a6:28:ed:c9:15:61:78:54:c2:ac:98:
         7a:ba:31:12:d3:94:1e:9c:93:71:ce:8e:5a:70:f2:4e:b1:d3:
         6f:9d:25:92:d0:0b:35:c0:c4:3d:9c:ad:fd:ec:7d:6e:f6:1d:
         34:77:3b:2c:c4:6a:12:c7:aa:72:5f:61:fc:27:c8:19:d8:32:
         2d:18:68:c0:82:59:b0:cd:46:6d:8f:6f:ad:f2:7e:c7:61:c9:
         98:ed:21:8f:ae:04:1a:aa:a3:25:7d:7d:4d:ba:42:93:15:57:
         d6:9c:6b:53:5e:d6:e7:33:ca:cc:b1:61:a9:d2:4f:3c:ad:09:
         3f:4f:37:e1:ed:43:37:7e:f7:3c:05:fb:6b:0f:48:03:d2:d9:
         90:d7:48:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:42 2024 by rpki-client on console-fra.rpki-client.org