Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e37352e3234302f32382d3238203d3e203532343638.roa
File:                     3138312e37382e37352e3234302f32382d3238203d3e203532343638.roa (raw, json)
Hash identifier:          GQdLSmQ8OdRhXloRwkhHVa2c4LxM6mM3aJcvH3kUBNI=
Subject key identifier:   44:D6:E3:25:A9:E2:E5:42:BC:AF:3E:AB:F6:C3:0A:00:63:C6:81:F2
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       32A415E9583F3DA198D410AF298B3CCC0A3EFFD0
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e37352e3234302f32382d3238203d3e203532343638.roa
Signing time:             Tue 04 Jun 2024 17:10:00 +0000
ROA not before:           Tue 04 Jun 2024 17:05:00 +0000
ROA not after:            Tue 03 Jun 2025 17:10:00 +0000
asID:                     52468
IP address blocks:        181.78.75.240/28 maxlen: 28

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 22:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:a4:15:e9:58:3f:3d:a1:98:d4:10:af:29:8b:3c:cc:0a:3e:ff:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Jun  4 17:05:00 2024 GMT
            Not After : Jun  3 17:10:00 2025 GMT
        Subject: CN=44D6E325A9E2E542BCAF3EABF6C30A0063C681F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c2:6e:db:2d:56:2c:e4:fa:f3:ac:e6:e3:fc:
                    c4:e6:da:c3:06:be:de:cd:60:31:c2:78:7c:b7:5a:
                    19:02:d4:98:a7:24:87:58:1f:52:95:d1:1f:5c:3c:
                    1e:83:27:10:73:23:56:5b:be:c5:37:2f:0f:4c:33:
                    04:1f:e3:86:26:b6:06:f4:c0:ac:a4:7a:45:63:34:
                    77:d1:4a:99:91:54:2b:83:89:af:59:64:c6:0d:bd:
                    81:88:54:6b:ef:44:c6:ce:dd:f3:e4:cd:f3:b7:7b:
                    4d:ea:35:4e:07:28:06:f7:58:44:c7:2c:61:e5:b3:
                    54:01:f5:4a:0a:9e:07:35:d1:43:b3:1a:d5:d9:74:
                    0d:d8:b7:6e:50:da:65:3f:10:a5:2c:a5:cc:cb:db:
                    2e:a9:d9:84:40:f8:7c:c1:0c:df:f3:a0:8f:d9:b4:
                    a2:ae:ed:2b:81:0d:de:a8:4b:ec:18:6f:81:0e:8c:
                    2b:dc:fc:5e:dd:12:9b:d4:d6:66:97:61:50:dd:6d:
                    5f:2e:8d:70:f0:88:54:a6:a3:58:26:05:aa:53:38:
                    fc:f1:81:66:0c:76:57:2b:6d:b7:cd:2b:ea:1f:a4:
                    cf:4e:0b:4c:25:ab:7e:c5:d0:68:8a:0b:0e:5c:03:
                    c6:b1:07:68:59:2e:96:19:e2:20:a4:09:c4:92:0c:
                    11:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D6:E3:25:A9:E2:E5:42:BC:AF:3E:AB:F6:C3:0A:00:63:C6:81:F2
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37382e37352e3234302f32382d3238203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.75.240/28

    Signature Algorithm: sha256WithRSAEncryption
         31:5d:5e:4a:8a:4f:ab:b1:cb:27:49:a1:50:2f:da:82:28:0d:
         a3:5f:5a:92:2d:a0:58:d0:a6:cb:81:17:8f:36:b5:03:62:75:
         13:11:f2:c4:91:be:f0:21:65:3c:c5:79:07:da:32:68:75:2e:
         ee:34:62:0d:0c:fa:1b:8f:3e:93:fe:d9:93:89:17:ce:3f:e3:
         2c:ad:cc:38:3d:12:88:4b:ad:9f:64:38:df:16:c9:2d:48:3b:
         3e:c5:9c:f4:0d:17:b5:29:cb:1b:9f:47:94:e7:f5:b0:92:ac:
         fc:26:e5:e1:80:5a:bd:87:25:61:3e:ee:82:d5:79:d0:23:c3:
         6c:1f:06:30:61:30:f0:af:c1:14:c3:34:96:06:44:d4:6b:32:
         cd:98:58:0f:70:7d:6d:e4:f5:9e:31:fe:40:c5:1a:4f:0c:1e:
         46:48:6e:a0:d7:81:36:b9:a2:87:98:09:c0:dd:0e:d1:e8:ee:
         25:3a:93:4a:fc:44:35:c0:cf:bb:4f:e2:d6:4f:d1:23:b7:27:
         99:6c:d4:ba:95:bd:17:f5:1c:62:a6:04:f1:47:99:70:59:ee:
         3a:cd:14:d3:5d:fe:0d:6c:7a:40:8c:79:01:ee:b0:51:90:5a:
         db:02:1a:f3:7b:40:a4:aa:1e:18:a5:1c:10:e2:b4:9d:9f:40:
         31:bf:30:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 23:11:54 2024 by rpki-client on console-fra.rpki-client.org