Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/34352e3232342e3130372e302f32342d3234203d3e20323635383438.roa
File:                     34352e3232342e3130372e302f32342d3234203d3e20323635383438.roa (raw, json)
Hash identifier:          h5NwZRGmSjUzCN5Lo8Pod1zWDsSfkmrOcjcvb1jd6Uw=
Subject key identifier:   8F:B3:31:66:42:C3:C2:FD:64:4F:6C:04:07:E1:45:4C:D9:5B:E2:D4
Certificate issuer:       /CN=28A7D53BAC53105CA8A0B3A1C95C2E6A71981653
Certificate serial:       2E797AA9B4D61EBEFF46190D2DEC84FA13991E3A
Authority key identifier: 28:A7:D5:3B:AC:53:10:5C:A8:A0:B3:A1:C9:5C:2E:6A:71:98:16:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/34352e3232342e3130372e302f32342d3234203d3e20323635383438.roa
Signing time:             Tue 05 Mar 2024 17:53:51 +0000
ROA not before:           Tue 05 Mar 2024 17:48:51 +0000
ROA not after:            Tue 04 Mar 2025 17:53:51 +0000
asID:                     265848
IP address blocks:        45.224.107.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 16 Apr 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:79:7a:a9:b4:d6:1e:be:ff:46:19:0d:2d:ec:84:fa:13:99:1e:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28A7D53BAC53105CA8A0B3A1C95C2E6A71981653
        Validity
            Not Before: Mar  5 17:48:51 2024 GMT
            Not After : Mar  4 17:53:51 2025 GMT
        Subject: CN=8FB3316642C3C2FD644F6C0407E1454CD95BE2D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:2d:8e:a6:51:61:a6:40:ac:21:8f:60:9c:12:
                    65:42:23:5c:a4:09:19:24:a2:7f:df:77:5d:46:8e:
                    9a:97:ad:b7:27:8d:8e:0f:a9:32:d6:b3:b0:d6:ea:
                    42:92:d7:f4:8d:86:b5:f8:af:94:41:8b:51:7a:db:
                    66:43:2e:dd:8c:fb:d7:aa:c2:b2:e6:57:97:9c:c7:
                    fd:ca:a2:65:0b:3e:8a:1b:08:26:0e:57:62:5f:75:
                    e7:56:c7:46:66:1d:49:57:29:2c:dd:56:7f:53:9f:
                    db:c8:79:c6:da:65:bb:0f:04:24:60:cb:ca:14:63:
                    4d:04:3f:a6:a3:05:aa:cd:dd:76:e2:13:72:de:6d:
                    7b:45:60:42:05:b5:72:d7:d4:15:13:42:a7:b1:e2:
                    e7:28:2f:1c:63:e7:d0:76:97:07:08:e7:d8:e7:dd:
                    dd:f7:c3:c4:cf:e3:ae:4a:5b:3c:bb:07:de:b5:11:
                    8f:4b:bd:ec:5f:6d:09:5d:5c:77:68:12:bc:91:e5:
                    45:e4:e8:95:f5:7b:8f:d4:72:2a:b5:34:ed:84:21:
                    b0:4d:e1:a5:9a:06:d2:96:cc:f0:ac:e7:9b:58:7c:
                    16:a3:8a:e0:58:4f:89:3c:be:66:2d:2d:9a:23:36:
                    6d:70:5e:32:8f:ee:02:2e:32:6f:1e:ea:8c:67:8a:
                    79:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B3:31:66:42:C3:C2:FD:64:4F:6C:04:07:E1:45:4C:D9:5B:E2:D4
            X509v3 Authority Key Identifier:
                keyid:28:A7:D5:3B:AC:53:10:5C:A8:A0:B3:A1:C9:5C:2E:6A:71:98:16:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28A7D53BAC53105CA8A0B3A1C95C2E6A71981653.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D3C2FE82536E6B95409CC04489D3F05DE207450580DC0430925479EE1C73785/0/34352e3232342e3130372e302f32342d3234203d3e20323635383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:85:d9:e8:65:63:28:3d:4a:d1:fa:ce:48:32:a9:ea:da:24:
         eb:67:93:e5:fc:b6:c4:1a:77:71:12:4b:12:1b:d2:dc:d8:9c:
         5d:cc:64:aa:9b:0d:15:bf:7a:98:0a:b9:b0:59:49:b7:ea:5e:
         03:e5:fd:9c:ef:f1:55:5d:f5:5f:1b:a4:e0:e1:1b:e0:a4:04:
         03:c8:76:e4:ec:17:76:78:9c:2f:70:49:e5:1c:7e:43:1b:5c:
         35:28:5c:65:a2:d4:af:8b:ca:28:2d:18:59:69:66:db:0c:e3:
         da:e3:e7:11:8e:86:37:61:d3:fb:79:b5:00:8b:fd:49:0e:a0:
         fc:2b:c9:7e:b5:b5:d8:50:01:e6:2b:db:d9:08:0a:15:8b:0a:
         a6:4c:6d:8e:f1:20:d8:31:45:e5:46:ee:f5:cb:31:dc:41:eb:
         7a:df:d1:14:85:af:58:94:72:00:50:98:37:2c:8e:1d:20:a8:
         c6:de:9c:1d:a4:6f:87:e5:f7:3c:0d:9c:e6:32:e4:67:76:7b:
         84:e7:69:bf:fe:ef:d0:02:6a:31:85:0b:40:ea:13:5a:e7:21:
         2a:d1:a5:6a:92:5d:99:58:91:83:fd:bb:1a:8f:d6:84:dc:44:
         2e:30:12:ca:07:f4:dd:7b:a0:b4:22:41:fc:9f:77:a3:86:c7:
         8e:e3:76:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:51 2024 by rpki-client on console-fra.rpki-client.org