Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3133312e37322e32382e302f32342d3234203d3e203531323032.roa
File:                     3133312e37322e32382e302f32342d3234203d3e203531323032.roa (raw, json)
Hash identifier:          4wZ+k5kxuZAQIPyUFtuP0X3Pf0RQ8UDmJ5kLw/wCm3s=
Subject key identifier:   60:BA:47:22:62:E6:70:DA:20:0A:BE:2E:14:34:A7:53:F7:07:5F:55
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       3975F79B1B7CC6C4162D3A17606610054128D6ED
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3133312e37322e32382e302f32342d3234203d3e203531323032.roa
Signing time:             Mon 08 Jul 2024 00:20:05 +0000
ROA not before:           Mon 08 Jul 2024 00:15:05 +0000
ROA not after:            Mon 07 Jul 2025 00:20:05 +0000
asID:                     51202
IP address blocks:        131.72.28.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 19:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:75:f7:9b:1b:7c:c6:c4:16:2d:3a:17:60:66:10:05:41:28:d6:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  8 00:15:05 2024 GMT
            Not After : Jul  7 00:20:05 2025 GMT
        Subject: CN=60BA472262E670DA200ABE2E1434A753F7075F55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:93:25:55:0c:14:4f:b9:9b:0c:43:87:f0:f5:
                    66:ed:98:a5:7b:82:3d:9b:26:8d:39:97:7d:19:12:
                    63:13:a6:d4:4e:f2:5e:6f:a2:2e:5c:65:6d:d3:ec:
                    40:36:25:42:66:5e:72:bd:41:bf:72:8e:45:c5:20:
                    f8:2c:e5:16:a9:88:53:11:ad:50:31:5d:ea:8a:08:
                    0e:5e:b2:c4:ff:62:1c:76:30:ba:7c:6c:83:79:e6:
                    1a:a1:34:1d:22:90:a3:49:34:73:8b:bc:09:0f:07:
                    d1:9d:a8:75:b6:03:12:3e:41:50:1c:2d:60:73:43:
                    0c:de:a6:e5:a2:2d:5e:51:f6:55:38:7e:36:f4:0c:
                    c4:f5:53:bb:c3:e8:36:ee:70:ce:2f:4d:1e:bd:55:
                    16:63:27:bf:67:04:e3:28:5e:de:3a:e9:a2:bf:f9:
                    3a:0d:46:8f:b1:9b:3d:8e:01:50:dd:47:13:95:cd:
                    d5:73:4b:8d:f2:23:ba:89:5e:49:a6:ae:1d:af:b4:
                    4a:8c:56:f2:c8:00:d3:96:38:d5:33:3f:ae:8b:36:
                    da:c0:65:bc:6c:74:fb:9c:b8:ab:48:c9:d5:2d:3e:
                    14:61:62:4a:9c:ca:bd:36:eb:10:f6:c6:af:e2:5e:
                    c3:07:02:0b:49:5a:05:60:cb:45:84:70:2e:63:cd:
                    de:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:BA:47:22:62:E6:70:DA:20:0A:BE:2E:14:34:A7:53:F7:07:5F:55
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3133312e37322e32382e302f32342d3234203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:4b:77:d2:86:9c:e1:e3:54:00:1b:37:b2:fc:50:65:49:12:
         2d:a0:21:53:07:c5:70:1d:0a:c7:7a:f3:cc:83:7d:6c:74:81:
         ce:a2:2a:93:d7:8f:0f:2a:9e:3c:c3:cb:62:b1:77:4c:73:77:
         04:84:83:98:4d:7e:14:fe:33:e6:97:49:e0:e0:5f:ec:0e:ef:
         6c:40:a7:f4:33:ff:72:11:0c:35:94:3a:8a:81:2c:00:93:96:
         c5:4c:56:43:ed:04:69:cc:89:94:17:fe:80:87:0b:68:04:31:
         e7:a6:92:b5:e3:85:54:23:23:99:e7:df:05:54:e9:5a:41:38:
         56:41:bb:64:92:5c:d9:8b:1b:6c:47:54:f0:9a:4c:cc:55:24:
         9f:86:b2:2d:3b:5b:bd:21:da:7c:8c:8a:28:7e:07:5a:d3:48:
         de:22:12:40:5a:53:34:99:8a:54:85:4a:c6:4c:59:85:3c:be:
         a9:94:00:ac:d9:49:ea:29:88:d9:7a:da:4f:23:ef:12:74:7b:
         08:a5:bf:a5:d3:98:11:6b:ae:b8:6d:87:95:5f:28:45:5b:06:
         92:82:5d:fd:48:05:b5:97:a4:79:ce:64:a3:f0:fc:c8:ce:e1:
         35:aa:9e:df:79:61:52:53:86:92:36:4a:3d:58:09:72:01:ea:
         bc:c0:ad:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 21:54:37 2024 by rpki-client on console-ams.rpki-client.org