Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/948B1C0962D2BE2F6780500F236495A7845F433D3AC784492992C29C880461F5/0/34352e3138332e36322e302f32342d3234203d3e20323733303633.roa
File:                     34352e3138332e36322e302f32342d3234203d3e20323733303633.roa (raw, json)
Hash identifier:          b8CU2bHlc0ojVsCbkSJkToy47V5Rt6+jtlz5KBrcI4c=
Subject key identifier:   03:2E:0D:59:AD:F4:D3:58:D9:EC:5B:F5:01:43:B6:F5:89:9E:DA:B3
Certificate issuer:       /CN=352876AA3B7BD34529C4806D306052CF8D3D5515
Certificate serial:       174FE28DBB392CC74A20F13955F196E0DC7FB7AD
Authority key identifier: 35:28:76:AA:3B:7B:D3:45:29:C4:80:6D:30:60:52:CF:8D:3D:55:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/352876AA3B7BD34529C4806D306052CF8D3D5515.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/948B1C0962D2BE2F6780500F236495A7845F433D3AC784492992C29C880461F5/0/34352e3138332e36322e302f32342d3234203d3e20323733303633.roa
Signing time:             Tue 05 Mar 2024 17:43:43 +0000
ROA not before:           Tue 05 Mar 2024 17:38:43 +0000
ROA not after:            Tue 04 Mar 2025 17:43:43 +0000
asID:                     273063
IP address blocks:        45.183.62.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 08 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:4f:e2:8d:bb:39:2c:c7:4a:20:f1:39:55:f1:96:e0:dc:7f:b7:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=352876AA3B7BD34529C4806D306052CF8D3D5515
        Validity
            Not Before: Mar  5 17:38:43 2024 GMT
            Not After : Mar  4 17:43:43 2025 GMT
        Subject: CN=032E0D59ADF4D358D9EC5BF50143B6F5899EDAB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:04:ec:ff:8d:01:d8:60:a8:fb:da:bb:62:22:
                    2d:e6:84:3e:eb:0a:d6:b5:bf:5c:3d:50:74:74:b3:
                    e6:69:a2:92:73:0a:4d:38:eb:7d:c4:b2:57:48:2a:
                    c4:05:2e:d1:ac:20:c2:a5:cc:93:ca:49:cb:b0:28:
                    6b:1d:57:22:16:9a:32:c5:a3:c3:15:4d:13:82:a4:
                    51:b2:21:e0:64:72:c2:e6:b9:98:da:fa:9c:48:38:
                    00:cc:0a:17:4b:c7:bc:9f:d7:23:df:2f:8b:50:d5:
                    d3:71:88:06:8d:34:7e:9e:3d:a6:c6:41:10:65:a3:
                    aa:c0:77:38:c5:cc:1c:0a:f7:d3:09:34:a1:29:a1:
                    61:79:c3:09:8a:24:d0:ba:ce:4c:8f:63:16:d4:c9:
                    fe:dd:5a:9a:bb:b7:f2:73:3b:e8:f8:c1:ed:fa:df:
                    c1:db:61:ec:d3:6f:c5:90:67:0c:12:af:7c:8e:59:
                    8f:a7:be:52:4f:cf:db:5f:13:c8:54:94:fd:d6:4d:
                    35:e6:f0:d7:32:57:fc:4c:0e:68:d1:6a:07:f1:d5:
                    9c:22:0c:df:a9:5d:e2:88:ed:75:81:ad:ad:0b:da:
                    fd:fe:25:2c:b6:6f:29:92:11:95:6f:9c:54:4c:2c:
                    69:7c:9b:6a:6b:d9:17:15:d9:72:b7:f2:9e:ca:71:
                    ba:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:2E:0D:59:AD:F4:D3:58:D9:EC:5B:F5:01:43:B6:F5:89:9E:DA:B3
            X509v3 Authority Key Identifier:
                keyid:35:28:76:AA:3B:7B:D3:45:29:C4:80:6D:30:60:52:CF:8D:3D:55:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/948B1C0962D2BE2F6780500F236495A7845F433D3AC784492992C29C880461F5/0/352876AA3B7BD34529C4806D306052CF8D3D5515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/352876AA3B7BD34529C4806D306052CF8D3D5515.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/948B1C0962D2BE2F6780500F236495A7845F433D3AC784492992C29C880461F5/0/34352e3138332e36322e302f32342d3234203d3e20323733303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:d0:5e:b6:f4:e2:7f:fc:6e:94:53:72:a7:bd:df:49:ec:2d:
         fe:35:6d:98:96:a0:82:5b:99:2f:9f:88:32:ba:28:f6:f6:4e:
         86:d1:c2:94:b8:71:65:9d:a6:31:9e:a3:9e:2e:66:cd:08:00:
         ef:66:99:79:3b:5c:ce:a1:bd:d2:b4:e1:0a:73:37:69:76:60:
         84:ca:8b:fa:8e:52:a8:d4:82:af:bd:f6:d1:dc:54:38:96:e2:
         18:54:ce:37:7d:68:0c:1b:39:15:08:ec:a1:e9:15:e6:5b:34:
         a2:cd:b1:a8:79:48:ba:81:36:f8:0c:b4:c4:00:f2:68:fc:aa:
         03:e4:0f:a6:ea:c0:b9:fd:f8:af:61:f7:33:c1:42:ba:09:6e:
         aa:46:d2:ae:b5:b2:04:21:6f:2e:21:9b:ac:8c:31:8f:4b:ba:
         0d:3d:a3:4b:5c:41:d6:1a:26:78:61:af:84:a3:af:ab:b0:f6:
         36:a4:02:30:4c:1e:d7:0e:3f:71:21:e7:d2:3d:76:d7:af:c0:
         2c:99:1b:f7:2a:2c:7c:32:8b:b9:bf:3d:2b:cc:dc:df:e1:5a:
         ca:18:e6:65:11:dd:23:e7:be:9d:2e:a4:ce:65:bd:2a:f0:37:
         6d:e1:64:6d:c7:b6:aa:53:67:5d:4d:52:6e:c7:9b:d0:26:8b:
         47:a2:05:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 06:31:06 2024 by rpki-client on console-fra.rpki-client.org