Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3132372e302f32342d3234203d3e203532343638.roa
File:                     3138312e37382e3132372e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          7ZqXziiD07XQvN0pi0U06pKqglbaKnWGUhQeSCr19hE=
Subject key identifier:   AD:95:AB:16:8B:B5:57:9F:1B:3E:02:08:CB:A5:0E:F0:EE:F6:84:C3
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       0975E1E5A48D107D99787ED32FE61E002A028450
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3132372e302f32342d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:04:47 +0000
ROA not before:           Tue 05 Mar 2024 17:59:47 +0000
ROA not after:            Tue 04 Mar 2025 18:04:47 +0000
asID:                     52468
IP address blocks:        181.78.127.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 22:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:75:e1:e5:a4:8d:10:7d:99:78:7e:d3:2f:e6:1e:00:2a:02:84:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:47 2024 GMT
            Not After : Mar  4 18:04:47 2025 GMT
        Subject: CN=AD95AB168BB5579F1B3E0208CBA50EF0EEF684C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3c:d4:5b:3d:53:7c:ce:f0:48:1d:3f:b4:77:
                    4f:b0:e6:c2:6a:d8:51:21:54:c7:c4:ef:f1:7a:03:
                    ce:32:3c:71:0f:0f:eb:86:cd:af:3f:9d:f9:6b:71:
                    ee:14:87:03:96:bb:4f:cf:97:bf:b5:d1:1c:18:33:
                    cb:6f:c2:ce:f0:ae:c3:c9:f3:57:da:6b:d7:2d:57:
                    31:20:76:e5:2c:87:ae:68:4a:ef:4e:1f:74:4f:6c:
                    c4:2b:82:1f:c8:52:1e:77:0a:6d:da:59:58:25:4a:
                    c5:d5:0f:8c:74:c0:81:c4:8f:a0:1b:93:b8:74:89:
                    cd:05:c8:70:5b:1b:be:7a:c1:15:5d:32:a8:fd:e4:
                    c6:6c:df:75:84:12:6a:44:87:a8:c9:97:15:03:6b:
                    74:34:15:f0:08:54:09:90:61:33:e8:98:83:c5:6e:
                    3d:a3:3d:92:57:66:1a:33:bd:db:cc:ea:bb:90:07:
                    77:a7:d8:fd:fe:0b:ed:59:53:8b:5c:f1:da:b5:95:
                    80:17:3d:a8:2b:95:c0:18:5d:53:16:74:b4:23:96:
                    5f:0c:b7:fc:af:bc:54:b5:69:8a:03:52:50:c0:39:
                    b9:02:9f:29:89:bb:90:31:e0:b0:90:0a:9c:2a:95:
                    d0:d2:f1:75:5e:8d:b7:ab:98:2a:40:63:99:dc:4a:
                    1a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:95:AB:16:8B:B5:57:9F:1B:3E:02:08:CB:A5:0E:F0:EE:F6:84:C3
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e3132372e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:05:20:0a:04:60:5c:83:c8:ac:46:c7:43:13:09:80:cc:8c:
         d0:90:89:30:88:03:32:f6:29:7e:b1:6e:35:bb:9a:7f:f2:a0:
         0d:12:7f:2b:3e:1d:d6:e4:5a:2f:fd:a4:a5:7a:bc:07:34:20:
         18:49:61:a4:1d:3e:d8:02:a8:fa:7a:f7:6b:8d:ec:99:25:af:
         3c:be:5e:7f:2d:92:2e:ed:53:9c:49:e0:91:08:c5:a9:98:73:
         48:46:9d:bf:14:81:08:a5:44:9a:78:e1:86:a8:67:90:2f:be:
         ef:e8:db:1c:80:3f:13:67:e7:a5:eb:8a:90:8c:59:11:85:c5:
         e2:e7:c7:57:40:53:58:77:c3:b4:e9:7d:02:fb:34:cd:9e:8c:
         c1:82:25:b7:d3:3e:b5:af:64:62:5c:47:e1:4b:42:ad:2b:92:
         fc:fa:2c:0f:ce:94:0d:19:ab:6e:a1:b3:7b:d1:0c:65:75:2c:
         94:48:0e:cf:d6:ca:cc:82:54:9b:a9:f2:e3:99:70:8d:ce:c1:
         5c:26:97:be:19:d9:32:b3:50:46:72:37:aa:77:4d:a6:bb:59:
         2b:33:7d:90:d1:86:41:d0:5c:0b:89:4f:34:ea:2c:8a:4b:86:
         cf:4b:d1:b2:fc:d7:91:af:5f:b0:19:8f:53:e4:fa:cd:98:46:
         c8:55:86:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 23:11:54 2024 by rpki-client on console-fra.rpki-client.org