Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/3138312e3233332e3136382e36342f32362d3236203d3e203532343638.roa
File:                     3138312e3233332e3136382e36342f32362d3236203d3e203532343638.roa (raw, json)
Hash identifier:          4eQ46ikpwj3hMY9FFIS7FtPsoiiy6UBrxIN9MKAednI=
Subject key identifier:   EF:E9:74:64:8C:95:FE:53:21:45:61:17:1C:09:ED:B2:4E:C5:87:E9
Certificate issuer:       /CN=CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71
Certificate serial:       11762A7F7881D6E787F1B17EC1301208312999D7
Authority key identifier: CD:03:59:B5:46:DA:A3:8D:E0:E9:8E:47:B8:5C:7B:2A:E2:C8:2D:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/3138312e3233332e3136382e36342f32362d3236203d3e203532343638.roa
Signing time:             Thu 12 Sep 2024 21:30:00 +0000
ROA not before:           Thu 12 Sep 2024 21:25:00 +0000
ROA not after:            Thu 11 Sep 2025 21:30:00 +0000
asID:                     52468
IP address blocks:        181.233.168.64/26 maxlen: 26

Validation:               Failed, certificate revoked on Fri 13 Sep 2024 17:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:76:2a:7f:78:81:d6:e7:87:f1:b1:7e:c1:30:12:08:31:29:99:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71
        Validity
            Not Before: Sep 12 21:25:00 2024 GMT
            Not After : Sep 11 21:30:00 2025 GMT
        Subject: CN=EFE974648C95FE53214561171C09EDB24EC587E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e5:3b:93:b9:28:47:53:98:4f:64:4f:69:15:
                    aa:fb:03:4b:41:50:21:64:3e:8c:fa:47:a1:42:94:
                    10:01:ad:8f:38:21:40:d6:a5:52:dd:41:a5:38:aa:
                    3e:78:6b:55:a2:60:3f:a4:b1:02:45:8d:11:0e:73:
                    60:53:d1:cf:04:68:71:34:28:7d:e5:a3:17:b6:48:
                    17:3c:22:c7:cc:1a:c9:dd:13:d4:a7:f1:b3:fc:30:
                    15:a1:86:1a:96:e9:a3:ad:d7:e4:96:86:9b:7c:ae:
                    71:68:07:07:00:c6:7a:ff:f2:82:f0:81:18:be:77:
                    88:53:d9:7e:a5:e1:d1:ea:a0:0c:3f:07:24:d4:c0:
                    1d:e2:1d:79:28:46:6e:9c:e4:d1:4f:e4:50:79:e2:
                    98:72:82:98:7f:f3:03:1f:f7:e8:9f:b6:e3:12:80:
                    62:e2:16:fe:73:03:85:f0:3e:f3:5d:c5:81:b5:02:
                    aa:d7:56:05:69:d0:f1:f5:bc:c6:d9:05:25:09:1a:
                    7d:ea:20:3d:1d:25:cb:63:93:e3:28:a5:0a:ff:9c:
                    23:b9:23:db:f6:56:7f:ae:84:fa:b5:1f:af:6d:f7:
                    55:a3:3f:e7:3b:df:3c:fa:79:11:c1:22:09:89:7c:
                    ef:bb:56:94:16:e0:4c:4b:06:19:26:af:b3:9e:54:
                    60:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E9:74:64:8C:95:FE:53:21:45:61:17:1C:09:ED:B2:4E:C5:87:E9
            X509v3 Authority Key Identifier:
                keyid:CD:03:59:B5:46:DA:A3:8D:E0:E9:8E:47:B8:5C:7B:2A:E2:C8:2D:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0359B546DAA38DE0E98E47B85C7B2AE2C82D71.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/825865E576BF41DD443CD73043850CA6EA6A1F203C3F284090953ABD88625CEB/0/3138312e3233332e3136382e36342f32362d3236203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.168.64/26

    Signature Algorithm: sha256WithRSAEncryption
         3c:33:e2:b8:2a:27:22:a7:51:da:aa:04:24:f4:56:c4:36:c8:
         1a:7e:c9:0a:3e:31:cd:fb:57:25:4f:04:e8:e5:a3:85:80:58:
         c4:df:41:55:2c:a3:f7:e8:7e:f1:0b:60:5d:04:8b:fb:71:20:
         50:83:6f:d4:84:d7:b9:4b:b6:eb:21:d3:8c:b8:8e:79:de:d7:
         b4:26:51:c0:ac:d1:ea:30:79:9e:a7:19:b8:f7:5b:63:92:c6:
         71:35:9a:b0:7c:e6:7f:51:af:59:2c:92:11:e6:fa:45:d4:22:
         b3:d3:d9:93:e1:b0:d9:28:44:c2:29:ec:9d:2d:3f:96:d1:15:
         b5:e3:c7:a4:ee:2b:d8:98:7b:18:b5:0d:7b:21:7b:3c:3c:93:
         9c:96:ca:58:4a:80:ee:57:2f:3f:56:81:44:8b:96:c0:03:45:
         ae:84:50:33:4c:6b:2c:25:51:85:d1:d3:78:70:99:33:91:5d:
         ee:7b:85:53:e8:71:7c:0d:03:35:96:85:c1:2c:fb:22:b9:7e:
         a1:1b:5c:54:f6:51:a4:0b:5d:d7:35:e1:9f:61:a3:2e:40:3f:
         d2:fb:89:43:f2:ce:9b:9c:90:0a:a9:b3:41:30:9f:55:0e:e9:
         5e:73:51:ba:0a:b4:49:63:8c:fd:f6:e2:93:a1:d7:2d:49:0d:
         be:89:87:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 13 18:17:53 2024 by rpki-client on console-ams.rpki-client.org