Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5e51a554-dca5-4d32-bc5a-e80e88a81e2b/c9efb13b02c61fdb502faa1dfea428fbd0b5cd74.roa
File:                     c9efb13b02c61fdb502faa1dfea428fbd0b5cd74.roa (raw, json)
Hash identifier:          uI7uJo2JBNHt7fXdUrjwnC//1M+dwDC86WD1baCkJ/Q=
Subject key identifier:   98:06:20:9A:BD:4A:A8:74:43:78:63:C1:03:03:A6:82:BC:BB:A5:B5
Certificate issuer:       /CN=5ddf424db6364fbbd65117f50773ca8bce9ec973
Certificate serial:       10CABB
Authority key identifier: C3:57:47:6F:6C:90:7A:A1:A5:55:3F:8F:A4:FD:E3:37:BC:15:A3:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5ddf424db6364fbbd65117f50773ca8bce9ec973.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5e51a554-dca5-4d32-bc5a-e80e88a81e2b/c9efb13b02c61fdb502faa1dfea428fbd0b5cd74.roa
Signing time:             Fri 17 Mar 2023 15:29:18 +0000
ROA not before:           Thu 16 Mar 2023 15:29:15 +0000
ROA not after:            Mon 17 Mar 2025 15:29:15 +0000
asID:                     271909
IP address blocks:        179.0.104.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 16 Jan 2024 10:06:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1100475 (0x10cabb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ddf424db6364fbbd65117f50773ca8bce9ec973
        Validity
            Not Before: Mar 16 15:29:15 2023 GMT
            Not After : Mar 17 15:29:15 2025 GMT
        Subject: CN=c9efb13b02c61fdb502faa1dfea428fbd0b5cd74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:53:67:5f:97:c3:69:ab:48:67:95:99:1f:8a:
                    50:7b:81:fd:6f:32:33:ff:28:1e:1c:6e:93:41:ff:
                    97:f8:37:72:3e:54:c3:f1:d7:c6:4e:86:45:a2:3b:
                    6c:e6:4a:3d:40:8f:92:8a:d3:b1:57:dc:92:1b:92:
                    5c:34:1d:4c:fc:ba:c6:7a:57:56:61:bd:54:8b:4b:
                    38:06:37:78:c9:63:72:30:19:50:4d:16:52:e4:6e:
                    5d:13:8d:72:10:34:4f:9b:f0:2d:a9:b9:63:74:52:
                    13:75:f2:59:86:4f:91:8b:d0:06:07:77:83:74:02:
                    ed:ef:91:06:97:8f:4c:24:8b:78:b7:75:19:60:8b:
                    ac:7e:b4:11:92:01:26:99:a9:31:94:18:12:48:b0:
                    d3:3b:d1:48:56:5a:5b:53:76:b0:8c:66:44:ee:c2:
                    f3:8b:5c:39:84:bc:f7:11:83:92:fd:2a:24:76:32:
                    97:fe:99:30:74:4c:a2:0c:1a:5a:e6:c9:3d:07:4d:
                    87:44:be:59:82:87:93:12:52:c8:e7:cf:fe:a7:08:
                    90:70:b1:93:65:3d:60:2b:05:c0:52:81:ed:e0:ad:
                    66:2a:b0:79:63:53:ef:4c:62:fc:79:ac:81:2b:e1:
                    0d:11:09:b3:89:6a:d2:cf:30:d5:3a:cb:e2:6d:a4:
                    13:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:06:20:9A:BD:4A:A8:74:43:78:63:C1:03:03:A6:82:BC:BB:A5:B5
            X509v3 Authority Key Identifier:
                keyid:C3:57:47:6F:6C:90:7A:A1:A5:55:3F:8F:A4:FD:E3:37:BC:15:A3:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5ddf424db6364fbbd65117f50773ca8bce9ec973.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5e51a554-dca5-4d32-bc5a-e80e88a81e2b/c9efb13b02c61fdb502faa1dfea428fbd0b5cd74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5e51a554-dca5-4d32-bc5a-e80e88a81e2b/5ddf424db6364fbbd65117f50773ca8bce9ec973.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:c3:31:55:9a:e4:8a:f3:15:11:b4:50:15:94:8a:c1:5e:2f:
         78:51:48:d1:2d:27:a5:bf:a8:27:f8:48:e6:26:82:b3:cd:51:
         8e:b4:ff:9c:e0:ca:87:03:e9:a6:2c:34:7c:04:37:1f:de:58:
         a0:63:3a:f9:5b:f6:9b:7f:db:12:4c:33:1b:7f:0b:09:99:99:
         eb:97:d7:52:de:1a:30:77:69:12:67:86:0a:ce:09:52:bc:af:
         56:08:d2:6c:5a:79:3f:7e:05:3e:8f:30:e1:68:46:54:ad:29:
         7a:c0:90:99:fc:29:57:f3:fe:f7:fe:bc:88:bb:1e:50:7f:b9:
         d7:84:58:2c:c0:ce:f7:4b:17:06:6e:d3:40:30:14:33:b0:eb:
         4f:df:aa:e5:0c:7d:a8:79:dc:7a:4f:95:e6:80:da:01:61:6a:
         e5:26:62:7c:26:a4:21:f8:e5:b2:cc:51:0a:6b:f8:13:29:05:
         8b:06:93:1e:1b:a7:02:41:e9:0a:c3:8d:90:b6:ef:71:ab:06:
         83:a1:bb:26:e5:2f:84:af:07:15:05:e8:fb:7d:53:53:c0:f8:
         93:3c:76:61:e2:5e:99:64:b3:ba:c7:ab:e9:1a:1f:e5:10:63:
         cb:6d:75:23:7a:74:94:2d:bf:17:41:59:ea:96:e7:02:34:a4:
         e5:1a:7e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 15:27:44 2024 by rpki-client on console-ams.rpki-client.org