Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3132352e302f32342d3234203d3e203532343638.roa
File:                     3138312e37382e3132352e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          UFUo6dxXql6vr3cV7ZQxr/g9TbqMw1sNuT7cMJNV0xQ=
Subject key identifier:   C2:D2:FB:8A:AB:72:DE:C2:2F:13:35:3A:31:2A:CA:16:2B:EB:E7:81
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       4E63A2AB883CEBDE35C1465609F01CA97A1014A2
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3132352e302f32342d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:04:56 +0000
ROA not before:           Tue 05 Mar 2024 17:59:56 +0000
ROA not after:            Tue 04 Mar 2025 18:04:56 +0000
asID:                     52468
IP address blocks:        181.78.125.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 22:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:63:a2:ab:88:3c:eb:de:35:c1:46:56:09:f0:1c:a9:7a:10:14:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:56 2024 GMT
            Not After : Mar  4 18:04:56 2025 GMT
        Subject: CN=C2D2FB8AAB72DEC22F13353A312ACA162BEBE781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:16:25:ed:8c:bc:af:22:ba:25:12:49:cf:48:
                    f8:37:8b:f3:ea:af:80:1c:9d:1b:16:c0:1e:80:ca:
                    df:98:5d:a3:b0:44:8b:88:f1:df:d9:4f:0a:96:b2:
                    f7:4a:fd:5c:e8:bb:74:dc:d0:33:61:9c:f4:f5:82:
                    7d:ca:25:34:06:3b:54:c0:5e:5e:fa:73:26:c5:b5:
                    d5:64:9a:8d:b3:97:1c:e4:54:bb:21:bc:a0:e4:35:
                    3b:17:34:03:6b:2a:68:21:2f:a5:9c:bd:cb:f0:5f:
                    59:75:70:d1:9f:69:91:af:ae:ab:47:48:64:e4:40:
                    b3:db:f5:87:a3:a7:9d:fc:9a:c3:59:4c:a1:bc:aa:
                    c0:e8:66:1e:30:43:c0:ff:9f:f1:ad:1e:37:09:57:
                    ed:59:3c:3b:b9:96:53:45:17:0c:f1:2e:bd:51:80:
                    20:18:35:25:d6:7b:ff:e5:f9:c8:bf:42:e7:6b:3a:
                    47:49:c4:e2:03:5c:28:05:09:e7:fd:74:5f:b6:07:
                    af:91:38:65:74:17:5a:1a:7d:40:e0:7f:18:46:ec:
                    3e:28:14:0d:fd:16:50:e0:cc:6a:6a:75:1b:c4:99:
                    2a:2b:ea:4d:ed:d9:a1:81:4c:b3:60:d2:91:fa:94:
                    40:02:1c:ca:09:32:a5:fc:29:ed:79:f8:5b:60:dd:
                    86:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D2:FB:8A:AB:72:DE:C2:2F:13:35:3A:31:2A:CA:16:2B:EB:E7:81
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3132352e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:d9:6a:d1:5c:af:3f:fe:69:71:75:12:e2:44:6f:76:7b:5e:
         dd:56:1b:31:22:59:30:9e:91:46:73:20:c3:9b:26:9b:00:13:
         62:9a:41:d9:1c:82:79:37:1d:78:bf:e2:90:da:12:3a:7d:e3:
         5b:25:43:49:6c:1d:f7:af:0f:4b:e9:0a:e6:95:ee:0d:da:8a:
         cc:4e:5c:c3:04:02:d5:d1:1a:44:77:57:6f:30:23:df:24:fe:
         84:90:c6:7f:8b:b3:0b:6c:d5:d9:35:d6:ec:6e:88:4c:db:16:
         47:76:6d:42:a3:0a:8b:21:ae:24:5d:b8:31:84:44:96:28:cc:
         09:10:89:fc:61:ec:fb:4c:c1:b6:92:0a:50:f6:99:33:55:5c:
         94:3a:a2:13:34:f1:12:a1:59:fd:e1:50:83:9a:c6:d2:07:af:
         34:4a:ef:0d:30:f2:48:2c:30:83:8d:5e:02:59:25:df:5c:75:
         44:96:68:cf:21:60:ba:5e:ff:9c:8f:d7:c4:62:2a:be:49:e0:
         86:82:13:34:94:7a:5c:2e:62:f6:25:a1:57:89:16:cb:30:c8:
         c4:dd:37:da:80:62:a2:24:20:fa:6c:1f:23:37:50:d9:78:23:
         57:b4:58:f7:1d:77:07:28:60:38:c4:63:db:14:3f:9f:31:f8:
         bd:f9:1e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 25 00:59:06 2024 by rpki-client on console-ams.rpki-client.org