Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e3132382e302f31372d3234203d3e20323632323036.roa
File:                     3138362e3137362e3132382e302f31372d3234203d3e20323632323036.roa (raw, json)
Hash identifier:          N0ni/4xgnEizcRh2eJGrCtt9pCop6B4oVqOTmu5lRT0=
Subject key identifier:   14:4B:D7:96:83:1E:C3:18:F0:20:D1:81:21:B7:8B:3D:8E:E2:5D:5C
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       1AE95D5F85F0B8417921A34BEF2518F3CBC29DC6
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e3132382e302f31372d3234203d3e20323632323036.roa
Signing time:             Tue 05 Mar 2024 18:00:01 +0000
ROA not before:           Tue 05 Mar 2024 17:55:01 +0000
ROA not after:            Tue 04 Mar 2025 18:00:01 +0000
asID:                     262206
IP address blocks:        186.176.128.0/17 maxlen: 24

Validation:               Failed, certificate revoked on Wed 08 May 2024 20:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e9:5d:5f:85:f0:b8:41:79:21:a3:4b:ef:25:18:f3:cb:c2:9d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Mar  5 17:55:01 2024 GMT
            Not After : Mar  4 18:00:01 2025 GMT
        Subject: CN=144BD796831EC318F020D18121B78B3D8EE25D5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9e:14:04:c1:20:90:58:c2:ec:e4:46:69:d4:
                    91:21:33:da:79:d8:10:7e:13:f9:fd:6c:69:61:18:
                    a0:c8:a6:45:5e:e3:d2:16:64:2a:f3:cf:25:63:0e:
                    bb:ac:84:8a:73:e6:93:63:f3:21:d3:20:90:e0:64:
                    70:64:2a:75:6c:5d:21:54:1c:9a:bb:c1:31:3b:33:
                    bc:1d:e1:52:2f:da:6f:2b:f0:ed:2f:73:7f:60:2e:
                    86:cc:f6:52:ff:dc:3d:bd:57:15:58:f5:1f:04:ce:
                    3c:45:ac:49:92:de:38:31:56:ea:3c:9b:c0:19:1a:
                    b5:04:35:9a:66:6d:38:00:3f:47:7a:9a:8a:0e:61:
                    23:cc:db:f7:21:a3:6a:30:83:66:fc:4f:a7:19:57:
                    68:5c:29:aa:02:29:ce:9f:d5:2d:62:b2:a4:c9:2c:
                    bf:a2:dd:83:d9:7a:87:76:20:e0:f6:3a:79:c4:73:
                    4d:61:3c:85:90:0b:53:02:37:d6:15:10:a4:04:5b:
                    da:83:41:d0:ed:31:40:a4:59:41:5d:2b:28:d1:e8:
                    76:f9:06:9d:2c:84:6c:7b:f8:8c:1d:49:49:bc:b0:
                    e3:37:15:8b:41:34:89:e4:e0:3f:d2:2f:ae:4c:e2:
                    4f:9c:8e:13:8d:6f:10:02:2f:88:2f:ba:bb:a4:de:
                    92:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:4B:D7:96:83:1E:C3:18:F0:20:D1:81:21:B7:8B:3D:8E:E2:5D:5C
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e3132382e302f31372d3234203d3e20323632323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.176.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         20:0c:79:9e:32:67:5c:04:0f:d4:e9:17:f1:6c:56:d4:ee:9f:
         d7:91:f1:7b:7e:38:2f:50:9c:3a:58:a0:86:bc:0d:8f:98:b7:
         51:77:ff:03:34:5a:94:31:54:75:21:a0:c3:31:98:8e:2e:87:
         44:08:25:a1:28:2b:f6:5d:92:67:a7:1a:98:25:70:c6:31:94:
         50:0f:4b:52:b0:8a:39:d6:6e:c6:42:87:8b:37:44:72:0d:f5:
         13:5f:64:19:e2:03:7f:8d:96:77:7b:9e:4f:9b:99:98:1e:14:
         c1:4e:0b:53:5a:88:ca:68:2a:37:34:dc:40:5c:c6:52:48:25:
         24:54:23:a4:e3:af:57:1c:59:cc:94:86:58:df:b2:7b:4c:94:
         f6:75:f1:14:20:54:f4:1c:5e:4d:fc:ca:45:cf:db:f8:40:b7:
         6c:93:5e:59:7d:d6:ed:d8:f4:c4:15:94:81:e7:36:77:a2:72:
         f2:d0:cc:d0:40:c8:4e:85:96:31:83:59:b0:38:a9:b7:b9:e5:
         68:c9:c8:57:77:dc:30:23:35:8b:ce:0e:86:8d:ff:4b:ad:f2:
         ca:37:cc:c8:36:63:7f:56:dd:9d:50:4b:2c:54:70:75:00:63:
         d9:d0:25:20:51:fc:cf:6d:19:46:69:ee:04:07:7a:9e:a2:97:
         b1:e1:e0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:42 2024 by rpki-client on console-ams.rpki-client.org