Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5BC27E67CC4BD72DBD695E8B8FD48EE83524B67C058379454E87EA4739D3405E/0/3137302e38302e3134322e302f32342d3234203d3e20323634383139.roa
File:                     3137302e38302e3134322e302f32342d3234203d3e20323634383139.roa (raw, json)
Hash identifier:          l7dPt88oJiQ0hQ3jrO3oBnngpUEMO9jLemZ/+GHEs+s=
Subject key identifier:   0B:AB:7D:4C:04:80:4D:2D:18:7B:FD:D6:52:F3:64:22:B4:81:3A:77
Certificate issuer:       /CN=17FD7B4CD3B97225C91244D204C973ABA848EF0A
Certificate serial:       220EBA5DB251019336699B3DFAB0D382328BC46E
Authority key identifier: 17:FD:7B:4C:D3:B9:72:25:C9:12:44:D2:04:C9:73:AB:A8:48:EF:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17FD7B4CD3B97225C91244D204C973ABA848EF0A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5BC27E67CC4BD72DBD695E8B8FD48EE83524B67C058379454E87EA4739D3405E/0/3137302e38302e3134322e302f32342d3234203d3e20323634383139.roa
Signing time:             Tue 05 Mar 2024 18:02:39 +0000
ROA not before:           Tue 05 Mar 2024 17:57:39 +0000
ROA not after:            Tue 04 Mar 2025 18:02:39 +0000
asID:                     264819
IP address blocks:        170.80.142.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 22 Aug 2024 04:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:0e:ba:5d:b2:51:01:93:36:69:9b:3d:fa:b0:d3:82:32:8b:c4:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17FD7B4CD3B97225C91244D204C973ABA848EF0A
        Validity
            Not Before: Mar  5 17:57:39 2024 GMT
            Not After : Mar  4 18:02:39 2025 GMT
        Subject: CN=0BAB7D4C04804D2D187BFDD652F36422B4813A77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a1:10:d7:83:16:ad:57:6e:c0:1e:b8:a7:8f:
                    bf:e4:7f:57:d9:eb:3d:45:29:62:61:e8:39:fc:e1:
                    03:81:fb:6a:0b:8a:6f:18:07:66:ef:ec:81:5e:eb:
                    3b:39:b9:fd:ac:7c:62:8b:41:e1:04:26:22:13:21:
                    8c:db:f9:8c:4f:ff:c0:91:41:cf:23:8d:69:71:d1:
                    69:2b:9c:0d:2a:fd:74:e3:b4:7a:12:63:96:98:ec:
                    4a:00:e1:7f:03:2c:8e:e9:1e:11:5d:06:a2:c8:d1:
                    e3:d5:ca:0e:06:fb:22:30:d4:60:c5:04:b7:ce:d8:
                    10:be:46:3d:ef:b7:94:f1:7d:25:20:43:d4:d5:10:
                    c2:b7:42:af:13:f5:c1:2d:72:56:64:4a:13:3b:5d:
                    54:13:cf:2f:72:bf:dc:92:6c:11:3d:33:51:52:ea:
                    ef:b3:70:d7:da:8e:79:b4:5c:d3:11:d7:4c:9c:99:
                    e3:75:88:03:58:13:fd:23:bc:2b:7f:1d:0c:5f:f3:
                    33:ab:3e:43:d7:cf:87:79:e4:a1:d6:75:be:95:f0:
                    cc:f2:4a:c5:4f:f5:14:f0:3b:14:98:30:b0:5c:ec:
                    c0:33:49:f6:23:ba:cc:10:48:17:2c:0f:18:31:29:
                    5b:c0:90:76:0f:51:b9:6a:c1:e7:24:bc:fa:67:ed:
                    1f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:AB:7D:4C:04:80:4D:2D:18:7B:FD:D6:52:F3:64:22:B4:81:3A:77
            X509v3 Authority Key Identifier:
                keyid:17:FD:7B:4C:D3:B9:72:25:C9:12:44:D2:04:C9:73:AB:A8:48:EF:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5BC27E67CC4BD72DBD695E8B8FD48EE83524B67C058379454E87EA4739D3405E/0/17FD7B4CD3B97225C91244D204C973ABA848EF0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17FD7B4CD3B97225C91244D204C973ABA848EF0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5BC27E67CC4BD72DBD695E8B8FD48EE83524B67C058379454E87EA4739D3405E/0/3137302e38302e3134322e302f32342d3234203d3e20323634383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:cf:43:81:1d:6b:a3:f6:97:25:89:75:ce:b6:91:1d:e0:3f:
         41:8b:e8:4c:9d:9c:80:b5:94:de:ce:33:23:ce:1c:7a:94:9e:
         65:2d:69:50:d2:a1:6b:e3:33:27:d5:f8:55:bb:f9:fe:f1:ef:
         d9:d6:96:bf:d4:00:a1:66:57:93:f8:b1:53:9f:12:e7:34:bb:
         19:b2:9f:39:65:16:ba:fe:1a:c2:cb:03:23:3f:b3:6f:22:fe:
         0d:59:c2:d9:b7:14:1d:ef:b1:fc:b4:31:3a:bd:3c:5a:7a:67:
         05:56:fb:a0:fd:1e:ec:2e:88:31:c8:5d:46:95:64:a2:0e:47:
         76:44:f1:70:65:47:5d:3c:e2:d6:2e:81:55:fe:42:2f:27:49:
         f4:d2:ba:b0:89:f2:fa:78:d3:bd:45:6a:d3:4b:b6:1e:61:d7:
         e8:a8:5c:ce:0b:ed:52:5b:8d:dd:c2:88:99:ec:1f:fa:6b:1c:
         dc:b7:b3:4b:37:34:a2:ca:69:0c:95:49:f5:06:9a:d7:69:ef:
         93:42:a8:12:5c:06:1d:df:90:55:a7:c1:64:6e:b5:7d:d4:45:
         a0:1e:be:51:37:09:ac:19:0f:8e:92:3b:66:2d:33:7e:00:11:
         b4:b8:37:ed:ad:f1:47:81:95:02:51:73:88:9a:52:54:53:45:
         1e:64:29:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 06:45:58 2024 by rpki-client on console-fra.rpki-client.org