Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3133312e37322e32392e302f32342d3234203d3e203531323032.roa
File:                     3133312e37322e32392e302f32342d3234203d3e203531323032.roa (raw, json)
Hash identifier:          4dax2DLPEOYcEhOOWE/44jyRw5WM5edIIubM1RyLTUo=
Subject key identifier:   1F:00:F7:59:B3:8A:8D:D7:49:4E:A2:29:56:ED:AF:CF:3D:FF:2A:46
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       383FE6FD101BCF8E1DDD5A48EDFF01CD329A725F
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3133312e37322e32392e302f32342d3234203d3e203531323032.roa
Signing time:             Mon 08 Jul 2024 00:20:02 +0000
ROA not before:           Mon 08 Jul 2024 00:15:02 +0000
ROA not after:            Mon 07 Jul 2025 00:20:02 +0000
asID:                     51202
IP address blocks:        131.72.29.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 19:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:3f:e6:fd:10:1b:cf:8e:1d:dd:5a:48:ed:ff:01:cd:32:9a:72:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  8 00:15:02 2024 GMT
            Not After : Jul  7 00:20:02 2025 GMT
        Subject: CN=1F00F759B38A8DD7494EA22956EDAFCF3DFF2A46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8a:d5:95:c4:98:02:cd:c9:73:41:06:11:8d:
                    f8:54:e7:98:b2:83:71:22:e9:21:64:6c:29:41:c5:
                    21:5b:16:e1:54:14:67:1f:00:e9:74:b9:78:db:8b:
                    8d:01:03:2c:d1:b5:c2:7a:e1:b7:07:bd:cc:9b:65:
                    99:32:a6:0f:3d:89:65:d0:e5:33:96:f3:91:99:17:
                    7b:e6:f6:5d:5a:6c:f3:73:dd:43:b1:03:7e:eb:39:
                    b8:2f:9a:87:f6:1b:2f:a8:83:c3:ec:42:42:57:e3:
                    8f:15:56:5e:81:a0:cc:32:0f:4b:a0:df:2d:48:ae:
                    6a:3f:64:57:08:9b:c0:9b:7b:7e:0b:3e:bb:9c:8c:
                    7f:13:0b:8f:7a:48:d6:25:a5:6b:fd:71:a9:0d:6a:
                    3d:10:bd:44:86:aa:43:e1:aa:9c:2d:1f:1b:25:dd:
                    4e:24:54:63:cf:4f:d6:e2:f6:1f:56:12:69:e7:a6:
                    3e:9c:91:2e:d9:1e:c5:07:65:cc:4f:16:81:7c:5a:
                    d7:10:4d:13:79:91:cc:ab:8a:6e:73:01:89:0e:e8:
                    4c:44:03:19:30:91:b7:b6:57:13:6f:06:57:5f:c0:
                    d5:f5:1e:59:55:04:17:16:ea:73:33:6b:b1:99:b6:
                    08:4d:d5:9b:a5:4f:c2:5a:c6:6f:74:72:03:bd:42:
                    73:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:00:F7:59:B3:8A:8D:D7:49:4E:A2:29:56:ED:AF:CF:3D:FF:2A:46
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3133312e37322e32392e302f32342d3234203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:89:c4:e5:3e:d3:62:ac:e6:40:1c:65:03:da:73:b0:f0:6b:
         fe:bb:bb:43:2c:5b:cd:ea:ee:ac:06:f7:87:99:b1:d1:ec:b9:
         04:e5:63:44:5a:7e:29:7f:d4:72:19:71:76:23:ea:9a:fb:1d:
         e9:ee:d2:3b:14:7f:1a:25:62:51:f1:6c:38:47:b7:c3:29:2e:
         f4:14:0b:71:86:ab:79:e2:ac:bb:f2:cf:3d:6f:fc:9e:30:c0:
         c3:eb:e4:5d:7a:eb:a6:21:99:25:24:5d:10:54:d1:da:72:35:
         64:ff:67:93:70:99:ba:28:c8:d2:5f:eb:bd:89:e9:c0:28:7c:
         a8:14:07:f9:16:aa:d0:0b:b6:e6:ab:6c:f0:11:a2:18:3d:13:
         8b:32:47:b9:d2:c5:32:2d:73:4f:5c:f4:39:0f:17:ab:75:7b:
         0d:9f:65:c0:71:df:cf:3e:e6:0c:2c:5e:26:fd:b1:c2:cf:27:
         36:06:c4:ed:3d:a1:61:c8:bd:c7:ca:fa:90:86:cd:5a:9b:ed:
         c5:49:89:3a:ec:46:f0:77:9d:83:43:9e:b8:5e:9e:fe:33:8e:
         70:1c:55:88:6e:17:98:82:0c:38:75:b8:8c:94:d2:ea:06:7c:
         1e:87:da:fe:c2:c5:7d:dc:7a:ed:55:71:8e:c2:35:72:11:ce:
         48:db:77:65
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUOD/m/RAbz44d3VpI7f8BzTKacl8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTlCNEI1RUJDMTk1MEI3RkQ1MkIwOTc5NENDNTM2OTJB
QkI3RjIzMDAeFw0yNDA3MDgwMDE1MDJaFw0yNTA3MDcwMDIwMDJaMDMxMTAvBgNV
BAMTKDFGMDBGNzU5QjM4QThERDc0OTRFQTIyOTU2RURBRkNGM0RGRjJBNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTitWVxJgCzclzQQYRjfhU55iy
g3Ei6SFkbClBxSFbFuFUFGcfAOl0uXjbi40BAyzRtcJ64bcHvcybZZkypg89iWXQ
5TOW85GZF3vm9l1abPNz3UOxA37rObgvmof2Gy+og8PsQkJX448VVl6BoMwyD0ug
3y1Irmo/ZFcIm8Cbe34LPrucjH8TC496SNYlpWv9cakNaj0QvUSGqkPhqpwtHxsl
3U4kVGPPT9bi9h9WEmnnpj6ckS7ZHsUHZcxPFoF8WtcQTRN5kcyrim5zAYkO6ExE
Axkwkbe2VxNvBldfwNX1HllVBBcW6nMza7GZtghN1ZulT8Jaxm90cgO9QnOXAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUHwD3WbOKjddJTqIpVu2vzz3/KkYwHwYDVR0j
BBgwFoAUWbS168GVC3/VKwl5TMU2kqu38jAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MjhERUQyNTgxQjhFQTQ3MzdDNDRBQkRFODI4NEY3MzUw
NzNERTMwMzhDMkQ4RjhDNjE4NTExRkNDQUNFNTIyLzAvNTlCNEI1RUJDMTk1MEI3
RkQ1MkIwOTc5NENDNTM2OTJBQkI3RjIzMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81OUI0QjVFQkMxOTUwQjdGRDUy
QjA5Nzk0Q0M1MzY5MkFCQjdGMjMwLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODI4REVEMjU4MUI4RUE0NzM3QzQ0QUJERTgyODRGNzM1MDczREUzMDM4
QzJEOEY4QzYxODUxMUZDQ0FDRTUyMi8wLzMxMzMzMTJlMzczMjJlMzIzOTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzEzMjMwMzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACDSB0wDQYJ
KoZIhvcNAQELBQADggEBAGaJxOU+02Ks5kAcZQPac7Dwa/67u0MsW83q7qwG94eZ
sdHsuQTlY0Rafil/1HIZcXYj6pr7Henu0jsUfxolYlHxbDhHt8MpLvQUC3GGq3ni
rLvyzz1v/J4wwMPr5F1666YhmSUkXRBU0dpyNWT/Z5NwmbooyNJf672J6cAofKgU
B/kWqtALtuarbPARohg9E4syR7nSxTItc09c9DkPF6t1ew2fZcBx388+5gwsXib9
scLPJzYGxO09oWHIvcfK+pCGzVqb7cVJiTrsRvB3nYNDnrhenv4zjnAcVYhuF5iC
DDh1uIyU0uoGfB6H2v7CxX3ceu1VcY7CNXIRzkjbd2U=
-----END CERTIFICATE-----
Generated at Mon Jul 8 21:27:26 2024 by rpki-client on console-fra.rpki-client.org