Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8DBD41B7F06A468732622CF059FCEEFAFA6BD5E6E5A930002D28F9E79CF26A7B/0/3138312e3139312e36352e302f32342d3234203d3e20323635373737.roa
File:                     3138312e3139312e36352e302f32342d3234203d3e20323635373737.roa (raw, json)
Hash identifier:          vRcuOWUFSjsiyMPwdgwQsunUwvwCNhhlEkvcMeEd6NE=
Subject key identifier:   D5:93:D0:74:31:1E:EB:BE:08:95:14:03:F8:B2:41:59:84:9F:14:62
Certificate issuer:       /CN=B3E16B442B70A5D5C45D8B88AB4F5945F139E65C
Certificate serial:       26EC1F22467B94E0EC115CF30EA81A17DD752868
Authority key identifier: B3:E1:6B:44:2B:70:A5:D5:C4:5D:8B:88:AB:4F:59:45:F1:39:E6:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3E16B442B70A5D5C45D8B88AB4F5945F139E65C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8DBD41B7F06A468732622CF059FCEEFAFA6BD5E6E5A930002D28F9E79CF26A7B/0/3138312e3139312e36352e302f32342d3234203d3e20323635373737.roa
Signing time:             Tue 05 Mar 2024 17:55:17 +0000
ROA not before:           Tue 05 Mar 2024 17:50:17 +0000
ROA not after:            Tue 04 Mar 2025 17:55:17 +0000
asID:                     265777
IP address blocks:        181.191.65.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 16 May 2024 15:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:ec:1f:22:46:7b:94:e0:ec:11:5c:f3:0e:a8:1a:17:dd:75:28:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3E16B442B70A5D5C45D8B88AB4F5945F139E65C
        Validity
            Not Before: Mar  5 17:50:17 2024 GMT
            Not After : Mar  4 17:55:17 2025 GMT
        Subject: CN=D593D074311EEBBE08951403F8B24159849F1462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:3c:ac:f6:d6:9c:aa:ba:55:56:7c:2d:02:9c:
                    82:36:bf:90:fe:39:14:ba:1f:d2:97:3a:78:f0:ee:
                    5c:a5:9d:f7:fd:4f:7d:3f:1e:64:9c:5d:ad:bf:10:
                    4a:78:16:0c:90:a6:a1:23:6a:e1:30:b3:e8:de:75:
                    7f:d7:9e:0e:e4:ca:24:85:da:29:8e:f9:50:be:8d:
                    ab:30:8f:10:b5:df:4f:9b:3c:0d:eb:c1:5f:47:e0:
                    b0:e8:5d:82:d3:3e:8e:6b:d4:c0:d9:b3:b7:01:bb:
                    66:ac:46:8d:93:10:30:d2:f2:4c:c2:cd:92:26:4c:
                    f7:cf:4a:cb:57:22:ae:70:e4:41:08:60:b0:fd:9c:
                    aa:35:81:45:11:73:97:49:a3:ae:0d:f9:83:84:14:
                    31:87:16:1b:d6:b6:b3:fc:37:06:df:8e:11:90:c0:
                    0c:a9:ad:67:ea:bf:2f:9c:91:d2:82:cf:f2:80:f8:
                    c1:fd:fb:a2:46:98:6c:a7:23:f1:02:86:bd:df:c0:
                    16:05:1e:58:67:e6:fe:03:c6:c7:91:4c:d7:dd:68:
                    50:99:c8:f8:3e:70:07:da:45:d4:c3:f9:1a:88:8b:
                    19:72:40:98:a1:b9:16:59:d0:d8:45:7c:b7:3a:e7:
                    1b:5b:17:92:c2:b9:ea:ab:4c:7e:10:1c:92:62:20:
                    c5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:93:D0:74:31:1E:EB:BE:08:95:14:03:F8:B2:41:59:84:9F:14:62
            X509v3 Authority Key Identifier:
                keyid:B3:E1:6B:44:2B:70:A5:D5:C4:5D:8B:88:AB:4F:59:45:F1:39:E6:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8DBD41B7F06A468732622CF059FCEEFAFA6BD5E6E5A930002D28F9E79CF26A7B/0/B3E16B442B70A5D5C45D8B88AB4F5945F139E65C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3E16B442B70A5D5C45D8B88AB4F5945F139E65C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8DBD41B7F06A468732622CF059FCEEFAFA6BD5E6E5A930002D28F9E79CF26A7B/0/3138312e3139312e36352e302f32342d3234203d3e20323635373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:33:af:d5:b2:7e:3e:24:1b:cb:5a:da:d9:fa:8f:56:96:8d:
         0b:04:49:d9:0b:77:e3:55:9b:a6:a0:c3:31:c1:90:d3:24:dd:
         3b:a2:ae:8b:6b:91:e3:42:67:d2:93:b7:bc:31:36:45:6a:2e:
         47:27:24:d8:e2:b8:f9:b1:19:61:22:63:61:46:d1:b7:26:b7:
         d5:9e:bd:5d:1a:2a:71:63:34:5f:95:fc:24:7f:42:bb:ed:99:
         2e:93:41:e1:09:33:be:f0:9d:cd:de:db:8a:0c:7a:d3:5f:38:
         91:81:8c:12:ce:03:ec:13:da:6c:a7:98:eb:c0:e1:e0:6f:9a:
         4c:3b:2c:8a:26:54:67:77:64:e7:74:d8:47:ac:34:e9:8e:cd:
         5c:e4:36:60:08:9f:6b:32:ae:14:21:f4:99:94:0f:93:7a:16:
         ea:71:1b:ad:f3:4f:bb:62:6f:81:03:5d:d6:d0:b8:5e:ff:2d:
         c5:42:93:7e:74:4c:15:63:b1:9d:f6:64:d2:e3:8f:ef:e6:56:
         7e:26:6c:7d:81:06:77:44:d2:dc:c6:66:a9:ae:e1:31:26:d4:
         f0:ac:4a:a2:5e:fb:aa:88:93:e7:51:2a:b0:d2:f0:4c:2f:93:
         68:e3:e3:77:fc:67:0d:1e:2f:e0:79:47:f5:77:be:d5:91:23:
         cf:f1:11:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 19:18:52 2024 by rpki-client on console-ams.rpki-client.org