Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e3235342e302f32342d3234203d3e203237393332.roa
File:                     3138312e37392e3235342e302f32342d3234203d3e203237393332.roa (raw, json)
Hash identifier:          OW5mroLNsvDuCa/EWoeiJ0I2ttscSc/6QwSyjUxKYYs=
Subject key identifier:   BA:90:BC:41:B2:CD:BC:C5:8C:96:CD:6F:A8:0C:B4:B1:D3:86:3D:CA
Certificate issuer:       /CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
Certificate serial:       4891C64B8C4E2E6B50EF0B178C2C4996FF7EFD2F
Authority key identifier: 99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e3235342e302f32342d3234203d3e203237393332.roa
Signing time:             Tue 05 Mar 2024 18:04:30 +0000
ROA not before:           Tue 05 Mar 2024 17:59:30 +0000
ROA not after:            Tue 04 Mar 2025 18:04:30 +0000
asID:                     27932
IP address blocks:        181.79.254.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 22:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:91:c6:4b:8c:4e:2e:6b:50:ef:0b:17:8c:2c:49:96:ff:7e:fd:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50
        Validity
            Not Before: Mar  5 17:59:30 2024 GMT
            Not After : Mar  4 18:04:30 2025 GMT
        Subject: CN=BA90BC41B2CDBCC58C96CD6FA80CB4B1D3863DCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:aa:ca:a2:6b:82:19:e5:da:01:74:a0:47:59:
                    c6:55:72:71:12:0e:b6:e3:41:93:59:2c:c8:c6:9f:
                    87:e2:5a:6a:3f:e9:d1:c3:52:25:ff:bc:d6:c8:41:
                    10:02:16:5c:92:b9:55:79:62:1e:33:32:80:aa:f9:
                    dc:04:d0:2f:1b:40:4d:de:2f:17:a9:be:bd:1a:13:
                    3b:fe:0f:3a:d6:5e:f6:31:b0:86:85:57:e1:90:5b:
                    e8:57:83:bd:78:c3:60:54:ea:bb:c5:e6:be:14:80:
                    9a:70:cf:fe:f6:33:23:17:92:e4:70:7e:37:5b:86:
                    5a:47:3a:a5:b1:12:e1:fd:b4:c0:9a:ab:5a:d5:a2:
                    1b:60:65:9f:fd:ed:4a:e0:16:7a:ff:53:17:98:aa:
                    46:e7:54:fd:bb:33:e8:dc:b1:9c:da:ad:9b:15:ef:
                    47:91:db:b9:2c:a8:78:cb:b8:d1:d8:a2:c0:94:3b:
                    a5:17:20:e8:61:c1:b9:9c:3d:92:36:3c:c1:9c:1d:
                    98:ba:7b:ae:68:51:4c:df:e9:64:b0:5b:93:38:e9:
                    26:37:bb:c3:e2:19:db:3c:07:c6:da:d8:c8:a6:e3:
                    42:cd:a0:32:6b:53:31:67:3e:a0:d0:12:28:d8:09:
                    03:c2:14:1d:ca:da:b3:20:e0:c7:73:62:a2:c1:0e:
                    71:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:90:BC:41:B2:CD:BC:C5:8C:96:CD:6F:A8:0C:B4:B1:D3:86:3D:CA
            X509v3 Authority Key Identifier:
                keyid:99:D9:23:A2:52:7D:78:CB:CA:1B:C2:B6:B1:5D:AC:0F:1F:6C:7E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99D923A2527D78CBCA1BC2B6B15DAC0F1F6C7E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AABDF4095FE8B22882D20B16DB7D2BFD381C0F9E62C6EB659447D44BE7E1CBC2/0/3138312e37392e3235342e302f32342d3234203d3e203237393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.79.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:47:6f:a9:9a:77:c1:9e:ce:4b:5f:d4:3e:d2:ba:ef:fb:ce:
         62:de:99:24:1e:c9:04:c5:7b:d8:04:fe:8a:92:e3:48:d7:68:
         17:67:87:84:29:ad:3e:a5:af:51:9d:63:ab:f4:72:07:6b:b1:
         7e:c4:82:0e:9e:d3:ac:7a:b8:1c:92:21:36:44:aa:c6:3e:9c:
         7e:cd:00:a6:10:6e:74:13:d6:79:ac:d7:8e:3f:73:6a:fd:9a:
         58:44:19:32:44:ab:b8:7c:29:c3:8d:02:75:50:6b:ba:d1:21:
         16:88:23:93:a9:14:ec:0d:9c:db:15:66:c2:90:71:6a:29:3a:
         75:bc:bf:8b:41:49:6d:ed:11:60:d1:b0:bf:53:51:cd:ff:10:
         0f:4b:ea:7a:b5:ec:f8:b9:14:53:79:d1:43:6f:f0:7b:55:1b:
         86:e9:d1:5f:93:e3:b9:d1:03:69:34:f6:69:22:07:dc:39:e5:
         87:60:67:a7:7d:b9:6c:8b:97:00:c9:89:92:9a:26:71:cd:eb:
         c3:be:6f:b8:fc:c9:58:0f:6a:43:99:8b:6d:3b:17:4a:e4:42:
         ec:87:0b:2c:51:d7:44:3c:46:35:04:16:d3:8a:6f:55:c9:ef:
         82:33:d7:3d:3c:4f:f6:7a:26:b5:2e:4f:28:c5:1c:72:dd:bf:
         fc:0a:c0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 23:11:54 2024 by rpki-client on console-fra.rpki-client.org