Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/34352e3232342e3130352e302f32342d3234203d3e20323635383438.roa
File:                     34352e3232342e3130352e302f32342d3234203d3e20323635383438.roa (raw, json)
Hash identifier:          rMjYY3HgL4yZtWoWTTqHJ3ejMzr3zlKhbc1puk+w1CE=
Subject key identifier:   1F:8C:5B:33:C8:3E:03:77:1E:1F:DC:CC:12:9B:98:77:36:28:35:D8
Certificate issuer:       /CN=28A7D53BAC53105CA8A0B3A1C95C2E6A71981653
Certificate serial:       6E4FCEBA21190BDEAEDB2B7A9B72D7AF46EBA1DB
Authority key identifier: 28:A7:D5:3B:AC:53:10:5C:A8:A0:B3:A1:C9:5C:2E:6A:71:98:16:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/34352e3232342e3130352e302f32342d3234203d3e20323635383438.roa
Signing time:             Tue 05 Mar 2024 17:53:50 +0000
ROA not before:           Tue 05 Mar 2024 17:48:50 +0000
ROA not after:            Tue 04 Mar 2025 17:53:50 +0000
asID:                     265848
IP address blocks:        45.224.105.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 16 Apr 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:4f:ce:ba:21:19:0b:de:ae:db:2b:7a:9b:72:d7:af:46:eb:a1:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28A7D53BAC53105CA8A0B3A1C95C2E6A71981653
        Validity
            Not Before: Mar  5 17:48:50 2024 GMT
            Not After : Mar  4 17:53:50 2025 GMT
        Subject: CN=1F8C5B33C83E03771E1FDCCC129B9877362835D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3e:07:9d:38:c9:ad:29:b7:4c:69:63:05:bf:
                    97:c0:21:9e:36:d8:29:95:6a:91:e7:22:67:21:9a:
                    9e:ea:7f:3c:81:9f:1e:84:af:2e:1e:9b:89:5a:2d:
                    58:c5:a7:ac:e4:6e:f3:32:e7:58:1f:f3:43:0c:2f:
                    7c:d9:f0:aa:0a:e7:63:fa:14:1d:0b:80:38:17:90:
                    3e:fe:a5:12:a2:a4:b1:38:16:24:2d:30:17:45:33:
                    9e:a9:c3:44:d4:7e:d0:31:54:1b:f3:7c:5e:07:6a:
                    cc:6c:d2:11:db:2b:90:45:d4:67:ff:df:9b:77:18:
                    8d:7c:52:2d:a6:68:72:30:97:5a:1a:c8:2b:d5:7f:
                    bd:7d:ca:6e:31:d9:6b:61:26:94:df:0d:2b:c5:1f:
                    c0:ff:10:2c:7d:11:bf:4e:a4:86:a6:0e:59:dd:37:
                    62:65:e5:a7:34:38:4a:30:ae:1e:1d:4d:36:2f:c3:
                    cd:8d:04:25:8f:73:16:05:f3:6d:42:e5:e3:63:e6:
                    6a:34:59:91:df:02:f6:50:ba:81:35:65:60:19:55:
                    ff:22:87:f7:8d:ac:28:b3:87:b8:5d:45:1b:40:64:
                    64:f7:42:79:04:8d:c8:93:05:3a:8e:18:cc:71:ab:
                    83:45:43:46:12:7e:53:7a:5c:f1:83:67:67:81:ca:
                    71:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8C:5B:33:C8:3E:03:77:1E:1F:DC:CC:12:9B:98:77:36:28:35:D8
            X509v3 Authority Key Identifier:
                keyid:28:A7:D5:3B:AC:53:10:5C:A8:A0:B3:A1:C9:5C:2E:6A:71:98:16:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/34352e3232342e3130352e302f32342d3234203d3e20323635383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:b6:c2:ce:35:1c:f0:5f:da:11:c4:15:c0:43:cd:ce:7b:65:
         53:c1:a2:01:95:6d:55:64:a6:7e:37:51:3c:85:28:d6:75:49:
         d9:8e:6c:02:a0:02:6e:46:15:50:10:48:3c:09:65:67:4d:fd:
         fc:5c:c5:1a:d8:5c:77:f8:75:15:3e:a7:45:99:ee:da:2d:7a:
         6e:94:e3:46:55:b3:83:d9:a8:3d:98:8f:99:2e:2f:f8:3e:ad:
         b1:c8:1f:f7:9c:16:d4:cb:0f:41:70:ad:ed:b9:40:b9:da:e9:
         11:56:2b:71:28:43:69:52:7d:98:ce:14:30:3d:3b:06:e0:41:
         11:77:94:7e:ce:5e:05:73:de:c7:6d:0f:53:c1:ff:e8:a7:ce:
         d3:4b:ac:ef:16:e4:6e:0d:b5:02:e6:e9:40:c0:5e:59:60:2b:
         63:af:5c:4b:a1:8d:b3:8e:ec:c9:0a:72:5c:bc:74:08:9b:da:
         c0:bf:33:9e:f5:aa:86:cc:fb:65:d7:e0:e0:24:e7:cc:35:68:
         66:62:ac:e1:2d:20:95:91:f3:85:de:5c:62:95:20:ac:bb:ba:
         69:09:e0:1e:b9:aa:2b:30:77:bb:90:06:43:f8:b3:99:cf:6e:
         09:6d:05:cc:7c:1e:1a:dd:e0:50:36:e4:6d:44:99:84:71:83:
         ed:ce:9f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:02 2024 by rpki-client on console-ams.rpki-client.org