Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/3230302e35352e3235342e302f32342d3234203d3e20323632313534.roa
File:                     3230302e35352e3235342e302f32342d3234203d3e20323632313534.roa (raw, json)
Hash identifier:          +Gabko2pw279r8dbcXE8Vbq9ZOBTQxm9ronB5O1dgf8=
Subject key identifier:   0B:2D:39:ED:97:CA:D5:AF:5E:42:7B:3D:5D:F5:C7:68:09:22:7C:0A
Certificate issuer:       /CN=5C50B1935CDD951E8FB572A5AF3C419AC4D487E4
Certificate serial:       142CA6730375B71BC3BC1BE9C3E13D8CCF8EF637
Authority key identifier: 5C:50:B1:93:5C:DD:95:1E:8F:B5:72:A5:AF:3C:41:9A:C4:D4:87:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/3230302e35352e3235342e302f32342d3234203d3e20323632313534.roa
Signing time:             Tue 05 Mar 2024 18:11:42 +0000
ROA not before:           Tue 05 Mar 2024 18:06:42 +0000
ROA not after:            Tue 04 Mar 2025 18:11:42 +0000
asID:                     262154
IP address blocks:        200.55.254.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 13 May 2024 17:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:2c:a6:73:03:75:b7:1b:c3:bc:1b:e9:c3:e1:3d:8c:cf:8e:f6:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C50B1935CDD951E8FB572A5AF3C419AC4D487E4
        Validity
            Not Before: Mar  5 18:06:42 2024 GMT
            Not After : Mar  4 18:11:42 2025 GMT
        Subject: CN=0B2D39ED97CAD5AF5E427B3D5DF5C76809227C0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:cc:db:b6:0f:ff:86:b1:c9:2a:97:5c:75:b5:
                    af:cd:2e:bc:da:ec:62:b4:e6:ee:40:e5:77:da:26:
                    dc:28:04:23:42:03:91:22:cd:6c:fb:1c:5b:23:a0:
                    24:97:18:b4:1e:70:47:6c:46:41:f9:44:59:29:4e:
                    db:ba:08:ba:10:96:fe:3d:82:9f:8f:9d:df:54:9d:
                    a2:b3:b5:c0:d3:43:20:c5:ca:e6:18:79:66:b6:15:
                    54:50:09:0d:ec:74:e8:99:ec:e6:a6:65:b4:11:bc:
                    82:c2:c4:28:38:6a:34:3a:11:e8:92:37:ba:5e:fe:
                    f0:3e:44:31:cd:b9:fc:d8:ef:3e:9c:fb:bd:e4:67:
                    4a:b5:81:c4:7b:24:ca:6f:ad:fd:b5:ad:41:3f:df:
                    85:71:30:f2:1d:f7:b6:a0:7d:85:c2:b0:95:c7:38:
                    61:64:e0:ff:03:79:e6:2f:9b:c3:01:35:3f:0d:33:
                    f0:b3:af:10:74:95:1b:8f:b0:6d:b7:0d:1e:a2:a2:
                    af:1f:22:24:71:8a:bf:ad:70:b9:78:a4:57:fa:eb:
                    7c:6c:57:e0:08:dd:d9:26:ba:80:d9:1b:de:8e:3b:
                    ce:16:18:dd:e4:e4:79:78:b8:de:17:3b:65:0c:db:
                    e2:77:7f:44:92:92:94:f9:6d:c6:d3:6d:cc:a2:36:
                    30:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2D:39:ED:97:CA:D5:AF:5E:42:7B:3D:5D:F5:C7:68:09:22:7C:0A
            X509v3 Authority Key Identifier:
                keyid:5C:50:B1:93:5C:DD:95:1E:8F:B5:72:A5:AF:3C:41:9A:C4:D4:87:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C50B1935CDD951E8FB572A5AF3C419AC4D487E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/689D927EB9091917F81D678A41EA4769358841D9778DF2DA109C313B3E78A6E8/0/3230302e35352e3235342e302f32342d3234203d3e20323632313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.55.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:14:16:2d:e7:93:68:7c:82:d8:fd:73:e2:0e:14:30:c2:46:
         39:ca:2a:80:cd:c0:12:aa:08:6d:f7:71:23:a4:a3:ba:23:19:
         31:a8:e9:af:c1:94:6b:6f:04:7c:65:20:a4:87:cf:6e:0f:2d:
         eb:1f:3a:3b:fc:ab:6c:aa:d3:50:1e:d0:f3:e9:23:a5:a7:90:
         70:6a:da:19:00:0c:a7:50:f8:a5:d1:4c:3c:c7:8f:ee:52:ff:
         eb:94:ef:89:c8:fd:53:06:cc:51:a3:4e:80:96:ec:aa:22:fd:
         f3:05:fc:f8:f4:54:9f:9b:28:97:3d:39:54:79:4c:d6:80:3d:
         b8:08:b6:3d:aa:e8:f9:e1:64:3e:a1:6b:bd:46:9b:b5:e5:07:
         51:05:6a:5e:10:c1:f4:ae:46:61:39:a9:14:ec:e3:21:57:49:
         9d:8b:b9:ff:7b:be:bd:2e:16:bc:e4:06:1e:e6:51:df:ff:bc:
         24:ba:17:a3:5f:ac:ce:01:6a:a2:f3:f2:31:b1:b4:73:1a:2a:
         a1:72:3f:3b:a6:7b:66:11:bd:27:e6:65:a8:60:fe:08:b0:5c:
         05:42:02:a4:9a:c7:22:62:2e:22:bd:49:e8:4d:eb:b1:9f:72:
         27:27:ee:f9:a2:d1:48:df:bd:4f:3c:2e:0b:2b:0b:45:af:3f:
         af:40:77:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:59 2024 by rpki-client on console-ams.rpki-client.org