Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7AB08EC2AC446E304D62380D91F9D5B414A646884B8FFF9A130271BC923D1529/0/3139322e3134312e33362e302f32342d3234203d3e20323635373837.roa
File:                     3139322e3134312e33362e302f32342d3234203d3e20323635373837.roa (raw, json)
Hash identifier:          BN5sQ0n3sfwvlI8Lfj3gWAJzRIfvH4LvNNzbcYPiW8A=
Subject key identifier:   2C:8B:79:41:8B:95:8A:65:4D:37:B5:5B:AD:0E:5F:EE:00:15:6C:FA
Certificate issuer:       /CN=7CE45D98F41C9AB7061F84A19C190414D5CB4FCA
Certificate serial:       3F7DDB74D134152133EDA6BA3FA1B912B8CFCF94
Authority key identifier: 7C:E4:5D:98:F4:1C:9A:B7:06:1F:84:A1:9C:19:04:14:D5:CB:4F:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7CE45D98F41C9AB7061F84A19C190414D5CB4FCA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7AB08EC2AC446E304D62380D91F9D5B414A646884B8FFF9A130271BC923D1529/0/3139322e3134312e33362e302f32342d3234203d3e20323635373837.roa
Signing time:             Tue 05 Mar 2024 17:47:13 +0000
ROA not before:           Tue 05 Mar 2024 17:42:13 +0000
ROA not after:            Tue 04 Mar 2025 17:47:13 +0000
asID:                     265787
IP address blocks:        192.141.36.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 06 May 2024 15:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:7d:db:74:d1:34:15:21:33:ed:a6:ba:3f:a1:b9:12:b8:cf:cf:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CE45D98F41C9AB7061F84A19C190414D5CB4FCA
        Validity
            Not Before: Mar  5 17:42:13 2024 GMT
            Not After : Mar  4 17:47:13 2025 GMT
        Subject: CN=2C8B79418B958A654D37B55BAD0E5FEE00156CFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:32:d2:93:7c:fa:01:3f:2b:17:60:25:15:72:
                    fc:e5:9f:71:5b:1f:b1:42:80:c4:f7:aa:01:4b:e3:
                    0f:40:ab:ff:bc:2b:b5:a3:ca:b4:b9:f9:64:f2:45:
                    c6:2c:87:0b:eb:51:a3:59:bb:11:2e:f0:8c:87:fc:
                    cd:df:db:72:c0:21:12:b2:2e:13:44:ef:82:bc:0e:
                    94:e4:bf:57:2e:4d:6c:38:ec:b3:84:ba:1c:18:22:
                    79:ab:f9:53:85:57:7e:8d:62:e8:fa:0d:8d:33:5f:
                    78:53:74:5b:0e:fb:ae:e9:2b:91:b9:7d:18:fe:f8:
                    98:90:14:55:cb:a3:76:34:99:36:3b:dc:a9:3f:1e:
                    5f:b7:29:1f:a2:e5:2a:c3:35:b0:e8:8f:b6:9d:4d:
                    cc:6d:e2:cf:3f:28:a1:1f:e2:e2:56:e1:65:b2:aa:
                    04:35:d7:a4:38:de:5a:b6:ea:6a:da:8f:f4:fb:dd:
                    00:58:99:ff:bf:1e:0b:47:42:5a:cd:62:aa:24:01:
                    1d:91:6d:ef:64:91:e1:0e:ee:4b:aa:1c:93:f9:81:
                    7b:26:5b:05:89:89:14:8f:30:ce:91:e1:77:37:9d:
                    1e:92:42:bb:d6:0c:ac:ca:2b:ba:df:72:11:3e:24:
                    fa:38:28:73:b3:0e:21:77:50:aa:1c:72:76:fa:66:
                    83:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8B:79:41:8B:95:8A:65:4D:37:B5:5B:AD:0E:5F:EE:00:15:6C:FA
            X509v3 Authority Key Identifier:
                keyid:7C:E4:5D:98:F4:1C:9A:B7:06:1F:84:A1:9C:19:04:14:D5:CB:4F:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7AB08EC2AC446E304D62380D91F9D5B414A646884B8FFF9A130271BC923D1529/0/7CE45D98F41C9AB7061F84A19C190414D5CB4FCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7CE45D98F41C9AB7061F84A19C190414D5CB4FCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7AB08EC2AC446E304D62380D91F9D5B414A646884B8FFF9A130271BC923D1529/0/3139322e3134312e33362e302f32342d3234203d3e20323635373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:5e:79:56:51:a6:c4:ff:e3:ff:8f:dd:d7:a6:c5:36:ad:ec:
         f2:a0:10:00:d6:21:7f:cc:56:30:d9:91:4d:93:f8:72:41:b3:
         a1:53:26:7e:0f:e2:9f:41:e5:49:f0:df:0d:64:a5:6b:c9:74:
         03:c2:44:9f:9f:93:0c:67:06:14:a6:d3:84:b1:26:66:79:f1:
         fd:83:08:54:e4:87:2e:c4:e9:d5:57:e0:09:e3:af:cf:f2:5f:
         20:31:b0:ea:8c:31:7d:c5:8b:9c:e1:18:2e:a1:44:0a:44:79:
         2a:ea:a5:ba:94:6e:cb:49:3b:4f:32:fa:73:de:28:65:01:a8:
         d1:c2:c8:39:58:f7:1a:a0:3b:2c:7a:a2:78:e3:ef:3c:62:d2:
         8d:dc:c6:0c:4d:47:9c:8e:38:a9:c3:e5:a9:95:bd:d2:5c:a5:
         c1:48:62:a8:31:76:dc:08:c4:f2:95:70:dc:90:9b:0c:96:fd:
         7c:88:d1:29:43:5c:dc:f8:54:8e:8e:45:39:4f:88:ce:e1:c2:
         6e:5f:dd:09:9b:c3:3c:4e:65:9b:63:0d:14:c7:39:2f:ef:97:
         f3:6b:22:ad:ea:ee:5c:7d:4e:8a:ad:7d:e8:79:04:ba:04:21:
         4f:f0:64:6f:3f:9b:fe:06:5c:45:4e:87:32:d5:9c:66:8a:f8:
         a5:02:db:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:51 2024 by rpki-client on console-fra.rpki-client.org