Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3133312e37322e33302e302f32342d3234203d3e203531323032.roa
File:                     3133312e37322e33302e302f32342d3234203d3e203531323032.roa (raw, json)
Hash identifier:          +dAM0sUH3q3jZ6eL7N+Q69GaIMKwcY/Z7zKKOCTztGA=
Subject key identifier:   C4:6A:D6:88:90:73:4D:D2:6A:8A:27:55:4C:6A:42:15:3D:6D:9F:91
Certificate issuer:       /CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
Certificate serial:       77BAB4A6DFF6FA1A424C9B50F5C1385AAF87A28B
Authority key identifier: 59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3133312e37322e33302e302f32342d3234203d3e203531323032.roa
Signing time:             Mon 08 Jul 2024 00:20:09 +0000
ROA not before:           Mon 08 Jul 2024 00:15:09 +0000
ROA not after:            Mon 07 Jul 2025 00:20:09 +0000
asID:                     51202
IP address blocks:        131.72.30.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 19:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ba:b4:a6:df:f6:fa:1a:42:4c:9b:50:f5:c1:38:5a:af:87:a2:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59B4B5EBC1950B7FD52B09794CC53692ABB7F230
        Validity
            Not Before: Jul  8 00:15:09 2024 GMT
            Not After : Jul  7 00:20:09 2025 GMT
        Subject: CN=C46AD68890734DD26A8A27554C6A42153D6D9F91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ce:63:52:60:fb:84:ff:eb:19:83:b6:3d:8d:
                    6a:27:ea:8e:fb:cd:77:31:fd:85:ad:26:e4:c6:6e:
                    28:df:7d:9d:98:a3:55:df:ae:e7:de:2b:7c:6b:9f:
                    59:c7:79:23:84:2f:b4:1c:75:00:65:51:38:2c:cc:
                    15:39:dd:a1:21:e0:37:60:5e:65:2d:43:02:2d:62:
                    c2:16:76:58:86:b8:03:54:31:28:49:61:b3:3e:50:
                    6a:58:e6:71:a1:2c:9c:5f:62:35:c2:8f:d6:06:f1:
                    1b:44:35:ad:22:2c:e9:de:d9:17:df:d6:6d:84:ca:
                    f4:e2:b6:8f:32:df:53:aa:61:9b:66:81:63:25:a5:
                    80:61:71:ed:10:47:2b:a1:71:93:f2:6c:2c:4b:f1:
                    90:af:66:1a:47:10:c3:d7:cc:50:b1:0a:33:4d:3c:
                    39:ed:16:48:43:3f:fd:e6:86:4d:0b:ec:d6:0f:4e:
                    80:95:6a:4e:c0:f7:a2:db:ee:65:d5:f6:7b:8a:57:
                    01:41:2d:1a:ac:c6:2d:d6:95:2c:7b:02:23:67:05:
                    02:a4:47:6e:f4:c0:14:1a:81:a0:cf:10:42:59:5a:
                    a4:21:b9:70:6c:c1:ac:8d:ee:3d:11:a7:21:0d:75:
                    a9:79:35:e0:08:e5:19:3b:b0:f3:7f:64:06:de:39:
                    95:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6A:D6:88:90:73:4D:D2:6A:8A:27:55:4C:6A:42:15:3D:6D:9F:91
            X509v3 Authority Key Identifier:
                keyid:59:B4:B5:EB:C1:95:0B:7F:D5:2B:09:79:4C:C5:36:92:AB:B7:F2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59B4B5EBC1950B7FD52B09794CC53692ABB7F230.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/828DED2581B8EA4737C44ABDE8284F735073DE3038C2D8F8C618511FCCACE522/0/3133312e37322e33302e302f32342d3234203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:b7:ef:a1:14:17:72:ac:e7:77:ac:96:56:d8:26:11:43:2b:
         26:92:81:bf:65:ea:69:eb:7b:0d:dc:7a:c5:fa:9a:19:97:4a:
         bd:b2:3e:c0:ee:13:79:0e:20:82:97:5c:82:1c:64:3f:c4:77:
         4c:35:67:44:78:80:ea:31:a5:40:22:8b:d5:83:d7:fb:41:31:
         02:cd:b9:60:62:f6:c4:08:95:84:67:f4:0f:eb:06:3f:fa:18:
         29:16:39:8a:b7:d1:7b:51:e7:29:7e:b2:52:47:3f:f4:8d:ed:
         18:8e:d4:60:a7:12:ce:9b:56:37:cc:8d:1a:fa:d1:a5:b4:e4:
         63:4d:b5:64:97:11:bd:9f:86:b4:1d:1c:d6:7b:96:47:fa:99:
         e6:c5:f9:53:bf:f7:31:fd:7e:96:6b:6b:d8:e1:a0:a5:05:22:
         49:7c:83:60:dc:49:56:66:f6:3a:f7:44:36:4e:23:c8:a8:51:
         05:a4:f6:20:e4:73:78:1e:78:cf:70:29:c3:c1:dd:3d:54:e1:
         72:f2:94:38:44:bf:5b:b0:59:10:7a:1c:ef:e7:82:ad:13:51:
         e3:14:c8:85:46:31:5d:02:26:31:bd:ce:f5:8a:e5:4a:c3:aa:
         10:20:94:f3:4d:a0:9f:d2:ca:41:6a:39:45:18:9b:32:6a:7c:
         c2:2c:a0:e7
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUd7q0pt/2+hpCTJtQ9cE4Wq+HooswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTlCNEI1RUJDMTk1MEI3RkQ1MkIwOTc5NENDNTM2OTJB
QkI3RjIzMDAeFw0yNDA3MDgwMDE1MDlaFw0yNTA3MDcwMDIwMDlaMDMxMTAvBgNV
BAMTKEM0NkFENjg4OTA3MzRERDI2QThBMjc1NTRDNkE0MjE1M0Q2RDlGOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtzmNSYPuE/+sZg7Y9jWon6o77
zXcx/YWtJuTGbijffZ2Yo1XfrufeK3xrn1nHeSOEL7QcdQBlUTgszBU53aEh4Ddg
XmUtQwItYsIWdliGuANUMShJYbM+UGpY5nGhLJxfYjXCj9YG8RtENa0iLOne2Rff
1m2EyvTito8y31OqYZtmgWMlpYBhce0QRyuhcZPybCxL8ZCvZhpHEMPXzFCxCjNN
PDntFkhDP/3mhk0L7NYPToCVak7A96Lb7mXV9nuKVwFBLRqsxi3WlSx7AiNnBQKk
R270wBQagaDPEEJZWqQhuXBswayN7j0RpyENdal5NeAI5Rk7sPN/ZAbeOZWzAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUxGrWiJBzTdJqiidVTGpCFT1tn5EwHwYDVR0j
BBgwFoAUWbS168GVC3/VKwl5TMU2kqu38jAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MjhERUQyNTgxQjhFQTQ3MzdDNDRBQkRFODI4NEY3MzUw
NzNERTMwMzhDMkQ4RjhDNjE4NTExRkNDQUNFNTIyLzAvNTlCNEI1RUJDMTk1MEI3
RkQ1MkIwOTc5NENDNTM2OTJBQkI3RjIzMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81OUI0QjVFQkMxOTUwQjdGRDUy
QjA5Nzk0Q0M1MzY5MkFCQjdGMjMwLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODI4REVEMjU4MUI4RUE0NzM3QzQ0QUJERTgyODRGNzM1MDczREUzMDM4
QzJEOEY4QzYxODUxMUZDQ0FDRTUyMi8wLzMxMzMzMTJlMzczMjJlMzMzMDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzEzMjMwMzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACDSB4wDQYJ
KoZIhvcNAQELBQADggEBAJi376EUF3Ks53esllbYJhFDKyaSgb9l6mnrew3cesX6
mhmXSr2yPsDuE3kOIIKXXIIcZD/Ed0w1Z0R4gOoxpUAii9WD1/tBMQLNuWBi9sQI
lYRn9A/rBj/6GCkWOYq30XtR5yl+slJHP/SN7RiO1GCnEs6bVjfMjRr60aW05GNN
tWSXEb2fhrQdHNZ7lkf6mebF+VO/9zH9fpZra9jhoKUFIkl8g2DcSVZm9jr3RDZO
I8ioUQWk9iDkc3geeM9wKcPB3T1U4XLylDhEv1uwWRB6HO/ngq0TUeMUyIVGMV0C
JjG9zvWK5UrDqhAglPNNoJ/SykFqOUUYmzJqfMIsoOc=
-----END CERTIFICATE-----
Generated at Mon Jul 8 21:27:26 2024 by rpki-client on console-fra.rpki-client.org