Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e3232342e302f32302d3234203d3e203237393332.roa
File:                     3138312e37392e3232342e302f32302d3234203d3e203237393332.roa (raw, json)
Hash identifier:          Ipu3zjIBX9DiIkNAa/ZYKQODLaIi/uNJtfexWHmmyXQ=
Subject key identifier:   9E:50:1B:E9:98:81:51:27:8C:2E:C5:46:10:EC:B6:B4:46:53:F7:67
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       5D403A9A309F759BFC29D920704AB91916768B94
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e3232342e302f32302d3234203d3e203237393332.roa
Signing time:             Tue 05 Mar 2024 18:04:38 +0000
ROA not before:           Tue 05 Mar 2024 17:59:38 +0000
ROA not after:            Tue 04 Mar 2025 18:04:38 +0000
asID:                     27932
IP address blocks:        181.79.224.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 22:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:40:3a:9a:30:9f:75:9b:fc:29:d9:20:70:4a:b9:19:16:76:8b:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:38 2024 GMT
            Not After : Mar  4 18:04:38 2025 GMT
        Subject: CN=9E501BE9988151278C2EC54610ECB6B44653F767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e7:43:a2:55:80:15:67:69:66:3a:68:75:fa:
                    1b:7e:df:f6:68:db:76:b0:93:92:84:6b:96:b2:ec:
                    97:5e:a0:1a:0a:f1:38:fe:d5:51:56:1d:bf:bd:b2:
                    22:5d:b0:a2:f3:a3:a8:44:2e:ba:57:95:82:2c:d6:
                    e4:f8:51:f1:a9:3c:8e:87:ea:2c:bb:6e:2d:fd:bf:
                    ff:0e:75:60:74:d8:55:93:9a:8f:b2:80:ab:83:70:
                    14:7f:27:5f:5e:20:f6:62:c5:5d:d0:1d:0c:9f:ad:
                    de:49:ba:bf:65:0b:6e:08:d7:ac:fe:f5:eb:70:b4:
                    9c:ac:02:5f:52:98:cd:66:f2:04:c2:04:d6:51:a8:
                    19:c1:eb:8d:7b:5b:19:36:d3:3e:21:1d:ca:13:4a:
                    6b:33:a9:55:e8:59:2b:8f:9a:27:87:3f:a9:13:5f:
                    a7:84:ab:9e:d1:36:97:a4:d5:09:d7:55:0c:b5:d2:
                    30:ba:e3:8b:cc:fc:10:fe:e5:61:07:b5:30:36:13:
                    94:ac:b9:a4:07:8c:35:18:18:c7:ca:82:6f:c1:82:
                    d4:30:22:e1:53:5b:88:88:89:06:ff:d0:a7:49:4b:
                    dc:8e:05:97:e6:12:cf:c6:2f:ff:4e:ce:c5:26:a9:
                    e2:33:9a:c3:b3:1f:a6:48:1b:0e:ed:b3:1d:b5:b3:
                    b3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:50:1B:E9:98:81:51:27:8C:2E:C5:46:10:EC:B6:B4:46:53:F7:67
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e3232342e302f32302d3234203d3e203237393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.79.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         18:bc:aa:46:e1:04:d1:68:0f:29:42:d8:87:db:b6:0d:69:dc:
         b7:21:9e:45:82:6c:29:e8:0b:af:f8:4a:0b:27:f7:5c:c4:2f:
         78:ba:a7:1a:d9:8a:5e:78:76:71:4b:93:12:45:07:ef:e9:8e:
         6c:ce:d9:67:81:5d:7f:8b:be:86:b8:76:99:84:f7:a4:82:62:
         74:ee:f4:f1:ca:84:89:8a:85:fe:fa:91:36:81:fa:2d:2d:f4:
         f6:f4:af:17:d1:3e:14:50:d7:52:f0:9f:b9:6a:a0:b1:aa:fe:
         60:88:75:ac:69:3c:e2:75:f9:33:cb:2b:ae:7e:05:5f:c1:ad:
         d5:e2:18:14:58:dc:b2:d9:05:0e:a0:55:0a:17:02:09:08:35:
         97:4b:a1:be:66:3e:2c:4b:dd:4f:7a:fc:37:b8:64:be:01:07:
         9c:c6:51:9d:7b:ad:2a:72:80:c0:cf:7a:9f:01:c0:b2:f1:0b:
         8c:62:c1:a1:83:cb:6b:08:44:d0:84:f7:0d:29:46:34:2e:a8:
         2b:3f:33:3f:36:1a:0a:de:2e:43:61:3f:55:b2:00:18:53:f6:
         87:9e:5e:07:fb:5d:2d:c0:e5:5a:4b:df:ed:39:e0:31:4f:71:
         89:c7:0f:1e:d7:51:29:a5:be:9f:5a:2c:43:f4:44:39:9f:e8:
         62:68:6a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 23:11:54 2024 by rpki-client on console-fra.rpki-client.org