Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6b9c5d0c-bab8-4a46-89c3-42ea3feac567/61400c255d967297a7d31031fe039135708be988.roa
File:                     61400c255d967297a7d31031fe039135708be988.roa (raw, json)
Hash identifier:          yvkv0f+8IUEPq+ykgOF7/NWnrAGDwh2v+g0PPDVWHYo=
Subject key identifier:   3A:D4:AD:D9:91:8E:1B:23:D8:E4:C3:42:15:12:70:AA:BF:B2:DA:70
Certificate issuer:       /CN=c52c1f7d8ef2a3f49b389ab5b89a8228e38e742c
Certificate serial:       0CE55C
Authority key identifier: EF:C0:24:B6:BA:D7:86:2E:BD:C9:F2:5E:67:3B:46:1A:D4:B2:D6:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c52c1f7d8ef2a3f49b389ab5b89a8228e38e742c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6b9c5d0c-bab8-4a46-89c3-42ea3feac567/61400c255d967297a7d31031fe039135708be988.roa
Signing time:             Wed 24 Mar 2021 14:47:09 +0000
ROA not before:           Wed 24 Mar 2021 14:47:09 +0000
ROA not after:            Tue 24 Mar 2026 14:47:09 +0000
asID:                     32934
IP address blocks:        179.60.193.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 18 Jan 2024 13:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 845148 (0xce55c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c52c1f7d8ef2a3f49b389ab5b89a8228e38e742c
        Validity
            Not Before: Mar 24 14:47:09 2021 GMT
            Not After : Mar 24 14:47:09 2026 GMT
        Subject: CN=61400c255d967297a7d31031fe039135708be988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f4:1c:64:3b:e8:6c:79:80:80:ee:2b:d5:1e:
                    33:35:dc:1b:25:ff:fc:bf:dd:0e:ba:e8:1d:bc:2c:
                    4f:e8:28:d6:2f:0e:6b:26:55:77:54:db:e8:86:1e:
                    9b:f9:c8:e2:43:0f:27:9c:d7:ab:43:5d:3e:3a:f6:
                    e6:1e:33:0f:8a:71:c5:c3:e3:13:96:94:f2:60:44:
                    ec:dc:c3:a6:84:27:7b:c5:ac:2b:cd:59:75:52:17:
                    1d:58:61:0a:34:8e:57:62:60:db:56:b7:f5:4b:70:
                    5b:4e:f9:bf:63:5b:1b:d3:e4:e6:92:4e:c8:db:f3:
                    92:a8:8d:ac:83:c3:30:16:8c:e6:71:6d:40:e5:a4:
                    11:b8:58:18:18:2b:dc:16:f1:72:b0:9c:d6:8e:f8:
                    c2:68:e5:40:7f:80:ac:72:3b:85:52:67:e5:f7:bf:
                    6e:d7:7d:1b:b2:5d:45:89:17:9b:7f:5e:b2:a0:a2:
                    d2:1f:65:0c:a3:65:94:23:43:44:45:ba:5d:73:79:
                    08:99:80:b6:10:a8:b4:27:7b:10:95:0d:67:c6:31:
                    43:d1:aa:91:4b:95:ce:03:9d:29:e8:cd:6f:ae:32:
                    34:ad:19:c0:51:7c:25:70:b5:d4:89:7d:7f:56:66:
                    0e:9e:4a:13:fa:a8:7f:ca:29:60:0d:d1:9a:ec:50:
                    c5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:D4:AD:D9:91:8E:1B:23:D8:E4:C3:42:15:12:70:AA:BF:B2:DA:70
            X509v3 Authority Key Identifier:
                keyid:EF:C0:24:B6:BA:D7:86:2E:BD:C9:F2:5E:67:3B:46:1A:D4:B2:D6:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c52c1f7d8ef2a3f49b389ab5b89a8228e38e742c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6b9c5d0c-bab8-4a46-89c3-42ea3feac567/61400c255d967297a7d31031fe039135708be988.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6b9c5d0c-bab8-4a46-89c3-42ea3feac567/c52c1f7d8ef2a3f49b389ab5b89a8228e38e742c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:db:89:a9:81:b0:da:d4:e9:09:6a:36:56:6e:08:af:8e:1b:
         9e:1d:c9:b2:53:f4:e5:18:5a:1d:84:5d:85:d5:37:c4:ea:11:
         ce:60:4e:de:37:63:a7:9b:fb:d8:fc:66:4f:58:64:63:f0:a1:
         21:54:83:0e:df:48:54:98:8f:b8:3d:26:8d:3b:be:3d:ce:34:
         10:31:2f:44:62:df:2f:24:ac:57:b3:2d:81:8c:da:cd:66:a5:
         71:d3:a5:97:b0:1c:02:86:1c:ca:f3:c7:e4:42:72:2f:91:dd:
         9e:20:57:ad:ad:ff:d2:58:87:e9:ce:3a:05:54:48:04:a2:26:
         a4:b4:29:4f:7d:af:69:92:90:2a:67:25:5f:f2:ca:65:d7:a9:
         e9:f7:fd:d1:63:38:46:c2:71:b8:68:c5:ab:dd:97:ea:35:2e:
         38:1c:51:ae:5a:4d:c1:73:a8:18:69:4d:2e:42:69:de:da:84:
         4c:ee:87:c2:e2:40:f1:4d:53:fe:1b:71:20:df:0d:fa:56:2f:
         f9:84:d7:bc:f1:89:86:a7:9e:d4:7e:08:da:05:71:52:75:77:
         19:a7:ca:a8:4d:30:e2:c9:50:90:b2:f8:1e:e3:9b:9c:ca:c8:
         b9:55:d9:c3:13:38:7e:cd:15:a4:46:20:2a:4b:ce:0e:c3:12:
         3c:3e:c1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 18:08:55 2024 by rpki-client on console-ams.rpki-client.org