Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5BC27E67CC4BD72DBD695E8B8FD48EE83524B67C058379454E87EA4739D3405E/0/3137302e38302e3134302e302f32342d3234203d3e20323634383139.roa
File:                     3137302e38302e3134302e302f32342d3234203d3e20323634383139.roa (raw, json)
Hash identifier:          v+7jgg14UgC6MalF94pjXssw+VN6tAcfgXXYGeV7lz4=
Subject key identifier:   E5:75:0B:72:C0:EC:9B:18:D6:62:A8:25:74:73:A8:EA:0F:C9:46:47
Certificate issuer:       /CN=17FD7B4CD3B97225C91244D204C973ABA848EF0A
Certificate serial:       51085F451260A50923846740522B6BB342712937
Authority key identifier: 17:FD:7B:4C:D3:B9:72:25:C9:12:44:D2:04:C9:73:AB:A8:48:EF:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17FD7B4CD3B97225C91244D204C973ABA848EF0A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5BC27E67CC4BD72DBD695E8B8FD48EE83524B67C058379454E87EA4739D3405E/0/3137302e38302e3134302e302f32342d3234203d3e20323634383139.roa
Signing time:             Tue 05 Mar 2024 18:02:39 +0000
ROA not before:           Tue 05 Mar 2024 17:57:39 +0000
ROA not after:            Tue 04 Mar 2025 18:02:39 +0000
asID:                     264819
IP address blocks:        170.80.140.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 22 Aug 2024 04:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:08:5f:45:12:60:a5:09:23:84:67:40:52:2b:6b:b3:42:71:29:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17FD7B4CD3B97225C91244D204C973ABA848EF0A
        Validity
            Not Before: Mar  5 17:57:39 2024 GMT
            Not After : Mar  4 18:02:39 2025 GMT
        Subject: CN=E5750B72C0EC9B18D662A8257473A8EA0FC94647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bb:ca:77:05:13:08:0d:07:01:89:5f:e9:e3:
                    23:32:c4:d9:99:cf:fe:61:ba:e9:d0:6b:29:b9:a2:
                    33:b1:d8:71:01:09:de:d3:20:44:0d:7b:76:20:d6:
                    43:d2:80:d1:b6:e8:e7:cd:0c:7a:ee:16:ad:5f:e5:
                    00:b0:12:4f:bf:2a:91:f7:24:2b:fa:53:86:db:b2:
                    e3:99:52:70:4e:4e:22:ea:ad:49:b4:67:e7:97:5a:
                    b6:7e:12:45:80:54:0c:72:bc:33:c5:18:80:41:fb:
                    11:86:d0:50:10:a9:ed:66:fe:52:8f:24:b6:2c:5b:
                    c9:d3:20:2c:7d:99:6e:e9:47:5c:b3:fb:d2:27:fc:
                    67:29:a4:6e:3e:ea:e7:33:12:12:a9:67:3d:4b:70:
                    37:fd:75:9f:b6:22:81:38:c0:f6:f7:36:d9:04:6c:
                    5f:a9:9b:2f:3f:a9:79:04:c3:e7:fa:1d:54:dd:4b:
                    70:be:cb:6e:61:61:63:6f:00:00:55:1d:31:23:5e:
                    a4:f3:b5:93:7c:70:d5:7d:97:67:8c:23:96:b5:00:
                    1f:5e:1e:c4:83:40:a4:a6:3a:aa:30:27:d7:03:dd:
                    87:6c:79:66:8d:d3:fd:d7:76:fc:df:1c:66:b5:b6:
                    a0:b8:e3:4b:87:47:61:90:32:ba:b7:b4:16:d1:25:
                    f3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:75:0B:72:C0:EC:9B:18:D6:62:A8:25:74:73:A8:EA:0F:C9:46:47
            X509v3 Authority Key Identifier:
                keyid:17:FD:7B:4C:D3:B9:72:25:C9:12:44:D2:04:C9:73:AB:A8:48:EF:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5BC27E67CC4BD72DBD695E8B8FD48EE83524B67C058379454E87EA4739D3405E/0/17FD7B4CD3B97225C91244D204C973ABA848EF0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17FD7B4CD3B97225C91244D204C973ABA848EF0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5BC27E67CC4BD72DBD695E8B8FD48EE83524B67C058379454E87EA4739D3405E/0/3137302e38302e3134302e302f32342d3234203d3e20323634383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:48:67:db:1e:80:e8:4e:1c:e6:86:ec:df:39:82:85:a6:39:
         d5:5c:ed:e9:9a:a9:a1:76:6d:8f:54:5b:fd:be:39:7e:69:93:
         6a:8f:51:cb:ba:3d:1d:1c:60:84:ec:cb:8a:83:6c:3d:7e:5b:
         fb:db:68:10:28:5e:27:db:dd:56:a7:ff:b8:b5:87:b2:ed:0a:
         e5:b0:42:ab:29:e0:77:a5:88:17:6a:cb:29:48:05:75:58:46:
         4e:63:50:2c:00:de:19:13:48:7a:85:54:0c:ab:ad:a7:ce:ca:
         24:92:fd:e4:75:1b:8e:df:a2:0c:35:62:3e:6a:84:33:db:b4:
         c5:4d:6c:1e:1f:96:6f:4e:e5:1b:c9:8a:51:61:d2:c3:3e:2a:
         9a:6f:07:16:6e:67:66:71:11:0b:44:25:45:d7:f3:7d:56:3a:
         43:8a:3b:45:4c:52:e7:aa:ae:28:75:ab:62:1f:11:4b:6c:76:
         f0:92:3b:c1:35:0c:e8:12:2d:87:70:2c:11:dd:1e:b7:3a:b8:
         e6:67:ba:7a:fb:0f:f3:9b:02:3b:70:4c:ab:a8:74:82:ab:22:
         4f:8e:16:88:38:08:52:42:fe:53:71:88:04:c0:af:6f:40:bb:
         33:a9:57:06:83:b8:39:c3:e0:b8:ee:6c:82:09:f1:10:03:91:
         7e:73:40:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 06:45:58 2024 by rpki-client on console-fra.rpki-client.org