Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323430303a3a2f33392d3433203d3e203231353735.roa
File:                     323830333a663038303a323430303a3a2f33392d3433203d3e203231353735.roa (raw, json)
Hash identifier:          awWmUpYb7vHUC8jiiTAHGIvVLQcUYdYVTuILhiQi1oo=
Subject key identifier:   A4:21:86:D2:92:91:27:B3:57:CF:F6:A6:3C:DD:FD:80:94:52:BC:5C
Certificate issuer:       /CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
Certificate serial:       43D258C2CDD9D7B0A96E07D7E3B87BAFD50F9719
Authority key identifier: D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323430303a3a2f33392d3433203d3e203231353735.roa
Signing time:             Tue 09 Apr 2024 04:40:00 +0000
ROA not before:           Tue 09 Apr 2024 04:35:00 +0000
ROA not after:            Tue 08 Apr 2025 04:40:00 +0000
asID:                     21575
IP address blocks:        2803:f080:2400::/39 maxlen: 43

Validation:               Failed, certificate revoked on Tue 28 May 2024 02:40:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:d2:58:c2:cd:d9:d7:b0:a9:6e:07:d7:e3:b8:7b:af:d5:0f:97:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6017AACFB785EAB7EA56D24337CDCD724EAC2AD
        Validity
            Not Before: Apr  9 04:35:00 2024 GMT
            Not After : Apr  8 04:40:00 2025 GMT
        Subject: CN=A42186D2929127B357CFF6A63CDDFD809452BC5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:94:1c:a3:5f:05:b6:e6:3e:8b:7d:bd:12:fe:
                    4f:aa:8e:4a:69:a4:cf:65:98:9b:ea:83:33:d8:20:
                    9d:65:bd:9e:a0:7a:9b:a5:26:94:57:74:97:b7:ad:
                    b6:ea:3d:0d:80:a9:0c:d8:7e:dd:53:62:62:f7:1f:
                    9a:2f:83:d4:d0:0e:03:c4:83:c7:3e:bd:f1:8c:f8:
                    dd:90:03:c5:6a:43:f9:2d:d4:32:fc:1d:f1:40:6a:
                    16:46:da:53:e5:f3:31:9a:b6:9c:5c:9b:c5:b3:b7:
                    8e:68:55:54:60:4b:80:47:23:a1:c1:a5:69:3c:11:
                    71:f2:ea:2b:ef:be:b2:b0:1b:12:f2:7f:13:03:0e:
                    f2:80:da:33:dc:4d:40:46:e0:62:1e:4e:f3:8d:99:
                    de:e2:5c:ac:56:cd:a9:e6:b2:cd:d4:90:9d:ba:24:
                    31:7f:fe:29:f5:a3:2c:bd:db:ae:a1:90:ce:77:ce:
                    df:f1:1a:19:a4:15:d4:77:3c:2f:34:b8:1c:5a:b1:
                    9a:2f:4f:ef:ef:c5:10:db:f3:7a:20:a9:45:ab:28:
                    5c:2b:74:b5:e1:ea:00:b7:c6:17:39:04:6d:a3:fd:
                    87:08:66:f4:34:82:ca:92:32:5d:04:3b:a0:1b:e1:
                    bb:73:91:84:02:24:37:af:6f:ac:df:11:95:b5:3a:
                    00:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:21:86:D2:92:91:27:B3:57:CF:F6:A6:3C:DD:FD:80:94:52:BC:5C
            X509v3 Authority Key Identifier:
                keyid:D6:01:7A:AC:FB:78:5E:AB:7E:A5:6D:24:33:7C:DC:D7:24:EA:C2:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6017AACFB785EAB7EA56D24337CDCD724EAC2AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC21DFD96188FF031874093BEF78B7FC7E5E3CC40F23922D9CDE59CD11658C84/0/323830333a663038303a323430303a3a2f33392d3433203d3e203231353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f080:2400::/39

    Signature Algorithm: sha256WithRSAEncryption
         23:e4:c6:52:5b:0f:55:cd:86:1c:a8:f7:ec:3a:8c:80:65:cd:
         56:e1:5e:47:af:4d:88:50:3e:5b:94:c1:0f:7f:0e:1f:c7:0e:
         87:ea:56:f1:41:30:8a:dd:40:bb:ea:aa:f3:c5:eb:df:65:4c:
         54:8a:be:0d:7b:4e:96:cb:3e:63:24:68:72:20:6d:fd:7e:bb:
         dc:48:3f:56:a7:68:55:1e:e3:35:f4:cc:23:d7:81:bc:20:4c:
         31:b2:15:14:aa:6e:4b:d3:5f:42:14:c0:f3:e8:61:d4:98:75:
         8d:cc:06:03:06:a5:7c:0b:9b:2f:1e:c8:72:74:ee:fe:eb:ec:
         43:0e:13:15:18:49:27:84:6f:a4:8d:7c:e9:80:78:39:ed:5c:
         3a:4b:90:aa:13:cf:4d:c5:7e:49:27:a9:31:02:9c:73:2b:84:
         a2:51:90:81:b0:0e:da:3c:aa:42:b6:8e:1c:09:08:d8:1e:26:
         20:85:b1:7a:b2:b9:61:30:9d:f5:78:09:b8:53:c1:1d:14:c6:
         fb:21:a8:6f:66:f7:51:1a:31:e1:1c:e7:67:0a:bb:11:bb:a5:
         66:09:12:14:11:57:9b:11:7f:8d:1a:16:c3:97:6f:73:97:d0:
         5f:19:c2:a2:e6:45:60:aa:80:06:44:e7:65:09:15:ae:cb:62:
         1f:48:42:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:59 2024 by rpki-client on console-fra.rpki-client.org