Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3135332e302f32342d3234203d3e203133393939.roa
File:                     3230302e39322e3135332e302f32342d3234203d3e203133393939.roa (raw, json)
Hash identifier:          /XFCnzNOI3wsgvOahVXnEQ6iofbu5cPgLKThYY6ATK0=
Subject key identifier:   15:A7:50:0D:6B:8F:AB:F2:82:EB:78:3D:D0:89:8F:2C:AB:6E:24:95
Certificate issuer:       /CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
Certificate serial:       22C4DBC77606FB310D4152C27A2D22F55A9E2450
Authority key identifier: C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3135332e302f32342d3234203d3e203133393939.roa
Signing time:             Thu 23 May 2024 04:30:09 +0000
ROA not before:           Thu 23 May 2024 04:25:09 +0000
ROA not after:            Thu 22 May 2025 04:30:09 +0000
asID:                     13999
IP address blocks:        200.92.153.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 29 May 2024 04:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:c4:db:c7:76:06:fb:31:0d:41:52:c2:7a:2d:22:f5:5a:9e:24:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01F5C753EFDB7F8476C63BBB41417B8E194A2A3
        Validity
            Not Before: May 23 04:25:09 2024 GMT
            Not After : May 22 04:30:09 2025 GMT
        Subject: CN=15A7500D6B8FABF282EB783DD0898F2CAB6E2495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e9:22:64:4e:2e:07:38:a6:c4:c4:a6:a6:9c:
                    d8:04:ab:4a:27:cb:a3:c6:ee:70:f5:a2:1c:69:a5:
                    17:73:02:67:0a:7c:72:36:01:23:cd:61:4f:dc:4d:
                    7e:4a:3e:85:c4:80:24:42:79:ce:0f:2a:3f:4a:aa:
                    d5:14:67:44:d9:89:d1:5c:4d:03:8d:ec:f9:1c:93:
                    f5:0f:5e:21:27:28:ee:f8:2d:3f:b7:b7:ae:d3:7f:
                    3a:7b:1f:54:b8:9a:e2:77:3f:62:40:83:dc:5e:84:
                    94:a7:a4:00:9f:a2:6f:fa:f3:24:f5:12:e5:eb:d8:
                    c0:a2:5a:1f:af:d8:45:ac:e9:5f:c1:70:a6:23:e5:
                    59:0d:bd:ff:9c:f7:68:f0:20:1f:97:fa:bd:e5:15:
                    d6:89:90:17:b1:4a:66:0a:b6:64:b4:ee:39:cf:77:
                    ae:89:de:66:12:8e:38:76:d6:e5:ec:80:9e:b1:4b:
                    82:a4:cf:95:20:bc:fa:64:2a:a5:7f:95:d5:ab:73:
                    ee:27:ff:e5:a5:96:d5:07:f2:ad:58:b0:81:65:1a:
                    21:cf:01:5c:84:6a:45:77:71:df:e9:f0:c7:cc:b7:
                    ab:6a:bc:2c:9a:67:bf:d2:0f:1d:06:bb:a8:c2:da:
                    6e:83:17:b3:ca:59:ec:96:10:62:1d:d0:5b:42:03:
                    51:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A7:50:0D:6B:8F:AB:F2:82:EB:78:3D:D0:89:8F:2C:AB:6E:24:95
            X509v3 Authority Key Identifier:
                keyid:C0:1F:5C:75:3E:FD:B7:F8:47:6C:63:BB:B4:14:17:B8:E1:94:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C01F5C753EFDB7F8476C63BBB41417B8E194A2A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3230302e39322e3135332e302f32342d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.92.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:3b:ff:85:4f:ff:58:84:18:0a:a1:3a:96:a5:f5:f7:b8:8d:
         e5:51:a4:4c:ed:0c:55:c5:ac:20:f8:53:c0:73:f8:36:4f:70:
         e9:dd:72:bc:ca:96:00:bb:39:02:f4:6a:a1:9c:ee:45:b8:2c:
         39:5c:95:43:1b:06:aa:5e:13:a4:38:90:19:0c:e2:a1:a9:e7:
         22:a8:91:c6:12:86:35:bd:49:60:f9:96:be:a6:ab:b6:17:d0:
         11:3a:45:22:92:cb:35:b8:2c:ab:2e:e3:4e:3b:e0:de:75:c7:
         28:bb:ee:b3:5f:02:a9:bb:c8:cd:00:a5:51:9c:1d:10:4e:86:
         5c:89:2c:7d:03:d7:49:bc:f7:dd:19:c7:9e:e3:1f:aa:f7:be:
         f2:9d:da:1d:26:67:ac:3b:26:15:97:2e:00:1a:27:63:a9:45:
         49:03:cd:91:17:7e:1b:7c:cc:24:21:86:22:b8:d2:43:ec:50:
         99:20:63:75:77:4c:c0:68:70:88:71:a1:86:69:dd:e5:01:07:
         ff:64:e8:02:c5:b0:4b:18:06:3e:f1:6a:22:e1:8a:ed:f9:72:
         b4:48:d1:8e:df:e7:ec:a1:f8:96:e5:4e:21:52:d1:2a:b9:06:
         95:52:c2:ab:fe:57:08:15:87:81:c2:a0:69:1b:26:e8:97:0c:
         ab:37:71:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:43 2024 by rpki-client on console-fra.rpki-client.org