Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/3137392e36332e3234382e302f32342d3234203d3e203532343338.roa
File:                     3137392e36332e3234382e302f32342d3234203d3e203532343338.roa (raw, json)
Hash identifier:          IxTJ/xaAuSUuQIrVtdgsDOispp7p3hS2bHHT9Glyx8Y=
Subject key identifier:   56:1F:CB:92:7A:CB:2E:57:C1:D3:A6:42:DE:2D:A2:08:85:EF:C7:21
Certificate issuer:       /CN=A537F8449EAA5150B4958CB0F49E0C2358347988
Certificate serial:       5BDEC01AB073AABC77DDD921B358F963F367E24B
Authority key identifier: A5:37:F8:44:9E:AA:51:50:B4:95:8C:B0:F4:9E:0C:23:58:34:79:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A537F8449EAA5150B4958CB0F49E0C2358347988.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/3137392e36332e3234382e302f32342d3234203d3e203532343338.roa
Signing time:             Tue 05 Mar 2024 17:40:37 +0000
ROA not before:           Tue 05 Mar 2024 17:35:37 +0000
ROA not after:            Tue 04 Mar 2025 17:40:37 +0000
asID:                     52438
IP address blocks:        179.63.248.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 07 Jul 2024 15:15:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:de:c0:1a:b0:73:aa:bc:77:dd:d9:21:b3:58:f9:63:f3:67:e2:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A537F8449EAA5150B4958CB0F49E0C2358347988
        Validity
            Not Before: Mar  5 17:35:37 2024 GMT
            Not After : Mar  4 17:40:37 2025 GMT
        Subject: CN=561FCB927ACB2E57C1D3A642DE2DA20885EFC721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:76:12:87:80:15:60:bf:f0:9e:4a:90:7b:6b:
                    c5:e4:e8:39:00:3d:aa:49:02:32:7c:00:84:ba:66:
                    ad:56:c7:c1:1d:6f:1b:e5:44:cf:20:ed:05:bb:db:
                    6a:91:88:33:61:b6:32:2e:f7:ad:3f:ae:72:99:d6:
                    93:90:b0:8b:07:0f:3e:af:2f:2a:c9:8f:63:3c:04:
                    c1:5e:34:96:c8:e3:1c:21:2e:92:de:11:5b:22:ea:
                    5e:8e:67:60:f4:ac:81:f4:b1:f1:fb:47:57:43:fd:
                    0b:e1:d4:4b:79:3c:f6:15:e6:f4:9f:8a:b2:d0:67:
                    2a:a9:66:1d:3f:65:bf:8a:51:73:78:8b:5c:e5:64:
                    a3:57:7d:8f:65:02:1f:e2:b6:fd:2d:73:81:c6:51:
                    3d:d9:80:6f:56:8b:ed:47:68:1d:87:8c:ff:86:35:
                    c5:7e:e7:33:74:02:ed:77:36:f2:c8:8e:2d:50:80:
                    87:b3:9b:2c:30:f7:33:ec:e2:ff:66:22:a2:67:6f:
                    43:c0:68:52:39:0c:6c:eb:7a:b0:e0:58:7d:5b:de:
                    b1:a2:b3:7b:68:f5:52:21:2b:99:3e:2d:5c:a2:f3:
                    26:65:fc:bf:1c:69:5c:20:2a:29:f5:2f:6f:27:5f:
                    8a:bf:3b:42:8c:d1:65:18:8f:73:24:26:9c:38:1f:
                    df:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:1F:CB:92:7A:CB:2E:57:C1:D3:A6:42:DE:2D:A2:08:85:EF:C7:21
            X509v3 Authority Key Identifier:
                keyid:A5:37:F8:44:9E:AA:51:50:B4:95:8C:B0:F4:9E:0C:23:58:34:79:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/A537F8449EAA5150B4958CB0F49E0C2358347988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A537F8449EAA5150B4958CB0F49E0C2358347988.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/3137392e36332e3234382e302f32342d3234203d3e203532343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:25:9e:2a:3b:6d:8d:18:06:87:f8:e3:a1:21:ac:16:79:b7:
         d5:35:08:c5:bd:ad:6d:81:7d:06:27:55:ee:9d:6b:9d:70:3d:
         66:9a:4f:74:dc:95:eb:28:43:3c:e8:0d:d0:2d:9c:6c:3f:42:
         dd:d0:28:59:e5:22:ed:2e:ae:20:11:1d:03:4c:7a:ac:8f:9f:
         b2:c9:25:4b:d7:ab:97:03:a6:98:d2:75:77:ab:b7:1f:71:a7:
         ce:8a:1f:85:f3:46:f1:e1:60:a5:43:43:0d:97:3f:03:c1:2b:
         c8:7f:66:3a:a9:9a:e1:ef:c0:f6:da:f3:9e:42:3d:aa:37:e3:
         86:17:4a:f7:e0:c9:f3:19:56:ab:75:7b:71:e3:88:a4:c2:11:
         9a:65:66:72:65:c6:f9:b9:22:b0:eb:5f:b4:a3:ff:25:06:a6:
         4b:eb:22:54:17:fa:84:85:e2:ec:a2:50:ed:10:d6:fe:49:bc:
         93:ae:1e:ce:54:17:70:a2:19:6f:6b:d6:91:9b:51:f9:ef:6f:
         51:30:81:96:6c:84:af:7c:ae:b3:c0:88:ef:1b:f3:9b:57:2b:
         c1:f0:03:f1:e2:fd:24:79:f1:20:f7:1d:4f:51:a8:27:83:24:
         5e:b7:21:ba:dd:43:f1:e1:a7:1e:3b:ba:8f:b7:b7:bf:cd:e2:
         94:21:73:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 16:24:17 2024 by rpki-client on console-fra.rpki-client.org